Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
File:                     C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer (raw, json)
Hash identifier:          zmDk43R+bqZl0SC0YcgUBSQD2JgeKmRo28+H1/6h1Qg=
Subject key identifier:   C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62863C571F987EE4DA66FC591376F9A663BB3016
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:54:12 +0000
Certificate not after:    Wed 02 Apr 2025 18:59:12 +0000
Subordinate resources:    AS: 271556
                          IP: 179.63.80.0/22
                          IP: 2804:7d5c::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 08:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:86:3c:57:1f:98:7e:e4:da:66:fc:59:13:76:f9:a6:63:bb:30:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:54:12 2024 GMT
            Not After : Apr  2 18:59:12 2025 GMT
        Subject: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:a3:48:83:b1:4d:54:8f:4f:ee:dc:55:0c:
                    ad:06:b8:c3:f1:f8:75:4c:2a:32:c3:5d:38:8f:d4:
                    9f:3b:47:5e:23:c8:d7:bb:94:f7:01:05:86:ab:e8:
                    ca:41:10:3d:bb:5f:70:a0:47:0d:58:86:a6:69:72:
                    80:a2:47:4d:2c:f4:30:97:40:5f:05:63:fb:29:69:
                    cb:7f:70:8f:34:72:07:27:43:36:e6:46:d7:1d:24:
                    a1:c3:6f:e9:6a:a4:8f:f9:36:b2:dc:ab:11:4a:b5:
                    fd:46:ee:af:9e:17:0a:ce:c0:28:c2:76:3b:99:c9:
                    8d:8f:c5:e0:5d:ce:07:94:de:63:f7:20:03:5a:cb:
                    83:ed:a5:4f:71:e5:f3:ee:ea:e5:2d:83:bd:3a:cc:
                    6b:cd:a5:0e:c4:69:2b:dd:33:03:52:e2:63:06:71:
                    e3:32:cc:b8:49:30:32:88:a1:f8:0c:88:90:0d:ca:
                    75:2c:18:ec:17:ac:b5:c2:45:7e:81:ba:45:a8:c7:
                    4a:b1:93:e0:8f:1b:b8:5c:86:92:0b:96:90:c2:54:
                    87:cd:e1:7c:61:e9:3a:13:7c:55:f2:cb:26:5a:df:
                    b2:2d:4e:4c:b1:38:10:38:a5:f2:b8:7c:e2:0d:5d:
                    0f:20:f8:5d:4d:2d:85:22:b4:10:cd:e9:de:93:fa:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.80.0/22
                IPv6:
                  2804:7d5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271556

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:6b:f0:61:9c:d8:f9:22:87:15:5f:cd:9c:86:7d:be:b7:
         58:9d:8c:d6:19:a7:70:4d:6b:08:ab:ef:61:87:07:76:02:bd:
         1b:4e:9d:20:65:ee:8a:bb:3e:df:28:e8:18:d1:3d:79:68:0a:
         7d:7c:6a:68:21:01:68:21:e0:78:c9:14:8e:3e:65:1a:21:42:
         5a:52:ab:85:3e:f3:54:c5:32:9e:55:83:70:d1:00:e5:3d:82:
         ef:a1:80:14:a8:1c:3f:69:1d:39:4c:38:6f:18:f6:55:34:41:
         d1:e6:b5:d3:51:6d:9b:12:42:5d:dd:42:24:c9:94:0d:44:5e:
         27:45:bd:32:dc:00:5c:b8:56:38:bf:bd:b2:be:28:ae:fe:d7:
         4b:7b:a7:fa:7a:41:5f:3d:60:39:ae:03:20:42:05:d7:87:74:
         4f:34:fc:0a:50:a2:ec:da:7f:98:23:7a:3c:ef:09:19:29:1e:
         ca:2c:03:69:a1:e3:bb:aa:36:83:3c:06:99:dd:68:df:ae:fc:
         ed:14:54:80:83:84:c9:0a:75:f7:f2:3a:06:6d:31:1d:5b:7e:
         6e:19:59:59:c2:2b:8b:f6:01:c0:49:02:65:de:85:87:4d:7e:
         a6:f4:e8:ac:ef:fa:cb:46:3a:cc:d9:0c:67:28:4e:15:89:ee:
         b5:91:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org