Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.cer
File:                     C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.cer (raw, json)
Hash identifier:          dYx3PMZlZ+cGJVnS4UY5WdK0dNRBnZhd2riNMHxEDGU=
Subject key identifier:   C9:A8:8B:5F:E0:36:D7:70:C1:45:0F:A9:0A:FF:AF:ED:6D:FF:1C:1F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59C05BF5F59C500CC936509732FA91CAA4629AED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:10:25 +0000
Certificate not after:    Thu 03 Apr 2025 08:15:25 +0000
Subordinate resources:    AS: 270604
                          IP: 187.0.32.0/22
                          IP: 2804:6e8c::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 04:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c0:5b:f5:f5:9c:50:0c:c9:36:50:97:32:fa:91:ca:a4:62:9a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:10:25 2024 GMT
            Not After : Apr  3 08:15:25 2025 GMT
        Subject: CN=C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:85:b8:7d:a8:c0:d8:a8:5c:3e:66:80:96:75:
                    64:84:b8:fd:fb:d6:6b:58:ca:97:a9:75:a3:a0:90:
                    e9:a2:e8:5b:ac:53:59:7f:b3:e3:ac:c6:1e:b9:cb:
                    f2:09:d6:d4:ee:0a:53:8d:1e:96:25:96:50:af:69:
                    d0:23:9f:8f:56:2b:57:ac:00:8b:3d:c9:c4:61:3f:
                    9c:13:17:5a:ec:56:66:a8:06:be:a6:c5:66:2f:26:
                    67:cd:63:67:d4:68:07:05:a7:a1:8c:ae:37:bd:1c:
                    6f:56:20:ea:42:65:42:f2:4c:09:d7:7b:19:82:88:
                    1c:54:71:f4:5e:6c:f2:8a:51:bd:05:7a:c2:9d:28:
                    74:56:a5:e7:b5:de:77:2c:59:c1:bf:bd:49:4a:08:
                    42:77:76:58:65:58:7b:fb:de:47:0c:97:3b:e3:e2:
                    ad:d2:e4:a2:65:0d:12:80:8d:dd:09:6f:42:7c:bb:
                    c4:11:22:ed:93:e8:67:75:0a:76:26:6a:19:d0:df:
                    10:72:9c:a0:54:72:79:24:d6:21:fa:49:22:d2:93:
                    3e:af:32:5f:b1:95:46:c0:23:cb:6e:93:8b:9c:d1:
                    f3:eb:27:47:51:f0:57:68:e2:1a:1c:b7:1f:73:f0:
                    03:9d:31:8a:02:ae:c8:89:95:81:0c:ba:a4:a7:b2:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:A8:8B:5F:E0:36:D7:70:C1:45:0F:A9:0A:FF:AF:ED:6D:FF:1C:1F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.32.0/22
                IPv6:
                  2804:6e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270604

    Signature Algorithm: sha256WithRSAEncryption
         08:03:ea:31:a5:d7:9b:96:5c:65:f0:0c:70:80:82:d3:68:2a:
         54:c2:ea:5f:5d:b4:04:b5:90:f4:8f:51:96:0c:21:9b:27:fa:
         bf:da:cb:26:a0:d8:27:7a:4e:ea:4a:9e:95:b5:dd:ff:cd:a7:
         fa:e4:c7:aa:04:14:61:11:d5:8f:dd:52:cb:7b:4b:01:d5:5e:
         cd:c1:4f:41:fa:e3:9c:13:cf:77:43:78:db:f3:fc:da:a1:aa:
         28:72:d3:d9:0a:75:72:cd:21:94:d8:08:9b:44:6b:38:78:19:
         e3:13:0e:f2:17:70:16:46:fc:71:83:3e:35:3c:72:4e:e8:ba:
         6f:77:02:cc:1a:0a:cc:b6:17:da:a5:be:da:b9:a7:3b:67:e5:
         22:56:e1:e8:f2:38:d8:2c:8a:3f:82:74:c4:fa:67:a1:a2:36:
         29:84:2e:0b:11:e4:a3:ca:bf:e5:6a:c2:cc:6d:b4:bc:e0:fa:
         ae:cf:58:f4:4c:81:c1:c4:74:35:30:68:30:9c:60:36:c9:47:
         c4:17:8b:06:ad:25:04:2e:f1:f8:91:37:00:b3:6d:df:ad:d6:
         93:dd:5e:64:5f:58:6e:4f:20:43:6e:8a:f9:36:ad:4f:f7:33:
         12:50:9c:88:db:8d:b0:36:37:76:93:f7:2c:7c:f4:0b:61:a3:
         c6:1b:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org