Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C96FF7E11968F485CE87C6A0838A462D0A93C5A0.cer
File:                     C96FF7E11968F485CE87C6A0838A462D0A93C5A0.cer (raw, json)
Hash identifier:          YBUKbv7UNgoD26afrDLwhjbf7oHZ9QNF0kQnO+MjA4o=
Subject key identifier:   C9:6F:F7:E1:19:68:F4:85:CE:87:C6:A0:83:8A:46:2D:0A:93:C5:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08F60C75E43C7518E5BF58889D9521B071B454AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/C96FF7E11968F485CE87C6A0838A462D0A93C5A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 May 2024 09:36:06 +0000
Certificate not after:    Thu 29 May 2025 09:41:06 +0000
Subordinate resources:    AS: 52532
                          IP: 45.235.80.0/22
                          IP: 179.106.96.0/20
                          IP: 2804:2d8::/32
                          IP: 2804:df8::/32

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 19:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f6:0c:75:e4:3c:75:18:e5:bf:58:88:9d:95:21:b0:71:b4:54:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 30 09:36:06 2024 GMT
            Not After : May 29 09:41:06 2025 GMT
        Subject: CN=C96FF7E11968F485CE87C6A0838A462D0A93C5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:13:6f:34:0d:a2:ac:b9:d5:fd:37:29:d0:
                    91:4c:9e:ea:f6:e7:55:a3:16:2a:f0:ab:05:41:c6:
                    ed:2f:4c:2d:6e:48:79:6a:7b:1c:75:18:b5:f7:6a:
                    67:14:7c:10:09:d7:2d:53:bd:fc:05:b9:09:17:19:
                    2d:2b:bd:13:ac:8d:30:b6:3f:2c:08:9a:e5:27:6b:
                    64:43:8a:72:b2:16:81:6d:22:1c:26:3d:20:c3:57:
                    38:5f:da:64:88:bc:5a:6a:49:e1:6f:33:88:cc:06:
                    c6:a7:2b:9a:fb:c2:01:55:90:ba:90:1d:21:9b:6c:
                    69:e9:db:62:d6:01:cf:5d:f0:c2:4f:9f:0a:1d:d3:
                    82:c9:11:df:1a:c8:2f:dd:dd:49:6d:c5:10:9f:41:
                    c6:53:95:82:9c:b4:7f:0d:24:46:b3:85:aa:a5:25:
                    8a:71:77:54:67:e4:51:9a:de:60:5f:9e:88:1b:22:
                    20:37:e3:2c:60:e8:43:5c:f8:62:54:29:aa:49:1b:
                    47:d4:6c:8b:5b:74:de:63:1a:ee:9e:82:1a:c8:a3:
                    62:a5:6f:e3:ae:16:d2:c3:05:22:6c:33:a7:77:99:
                    4f:de:50:42:38:0a:17:7a:bc:0e:93:e1:a7:66:5f:
                    86:1d:c0:bf:32:ef:2e:eb:52:44:43:a9:a0:41:d6:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:6F:F7:E1:19:68:F4:85:CE:87:C6:A0:83:8A:46:2D:0A:93:C5:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/C96FF7E11968F485CE87C6A0838A462D0A93C5A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.80.0/22
                  179.106.96.0/20
                IPv6:
                  2804:2d8::/32
                  2804:df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52532

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:79:dd:66:20:35:f5:f1:79:8e:e6:b2:cf:ee:f3:d8:49:
         89:d6:41:22:13:bf:9b:d0:5b:82:09:87:c0:b6:c8:f9:2a:ae:
         09:58:aa:bb:ea:45:4e:79:5d:3a:37:70:0a:60:16:fc:17:ed:
         c2:83:3f:38:3d:0c:d4:5d:e1:7a:24:30:8e:01:9a:2d:00:49:
         fc:8c:a0:36:2a:0f:14:bb:e3:54:08:b3:07:84:82:b7:8d:b6:
         a1:8d:f2:c6:e4:db:07:72:2e:4c:4f:ef:af:21:65:23:f2:ef:
         2c:54:9a:f9:bc:c5:93:ea:3c:3e:44:d9:42:da:0a:a9:a0:e7:
         99:0a:e1:30:a6:d9:b3:48:45:47:c9:57:02:1a:b1:4f:0b:31:
         fc:72:bc:23:21:da:4b:76:00:bd:a5:88:8e:2a:bc:b1:41:c0:
         f2:53:9f:15:e1:3b:3c:a8:87:ee:e4:2b:80:ad:b0:00:2d:20:
         b6:49:f3:b3:2e:be:b2:69:26:2e:a8:31:42:ae:65:89:22:85:
         91:5d:00:b4:a0:fd:9c:ad:9e:ac:86:eb:26:5d:f9:42:9a:a4:
         33:d2:7a:6f:14:e6:11:a9:72:48:8e:df:55:3a:f9:4c:3f:db:
         2c:a4:57:5d:1b:98:26:91:ba:6d:6f:b2:f1:00:72:81:5e:5c:
         1f:96:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 23:34:43 2024 by rpki-client on console-ams.rpki-client.org