Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer
File:                     CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer (raw, json)
Hash identifier:          CtITd3aLdZj3+VEJ9SRsQ6pwDtL9mKQs/kie08803qE=
Subject key identifier:   CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06B72F85AE64E010DF410B93B6C06FB0106C2A9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Sep 2024 19:26:21 +0000
Certificate not after:    Mon 01 Sep 2025 19:31:21 +0000
Subordinate resources:    AS: 274594
                          IP: 2804:90ac::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 11:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b7:2f:85:ae:64:e0:10:df:41:0b:93:b6:c0:6f:b0:10:6c:2a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  2 19:26:21 2024 GMT
            Not After : Sep  1 19:31:21 2025 GMT
        Subject: CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:e9:ac:00:3b:6f:0a:83:b9:62:30:66:fd:
                    86:e7:0d:f3:8f:92:82:be:11:dc:87:31:e1:e6:fa:
                    c9:9f:f9:5e:28:96:10:78:02:51:8d:5b:c6:95:bb:
                    55:36:20:a8:fc:83:b2:64:28:6b:c9:23:ac:22:2e:
                    46:2b:1f:ab:c2:ad:6d:8d:89:96:12:e2:41:c2:7f:
                    fc:e5:b6:40:ca:56:ef:0e:1b:26:3f:ba:b7:1d:8f:
                    45:75:58:6a:03:98:f5:1f:0a:9c:60:e5:0f:86:35:
                    ea:cf:e0:55:e1:41:48:78:42:86:3e:59:36:1a:9f:
                    35:41:3a:0a:c1:04:68:57:b1:97:29:85:37:ce:0f:
                    19:8f:e1:cd:40:f1:f1:bc:4d:f7:2e:02:cf:3f:b2:
                    58:95:f3:17:61:60:90:28:2a:3e:6e:f9:55:83:9f:
                    ab:87:d5:90:8f:1b:03:c9:6c:71:5a:f6:88:1d:20:
                    05:17:a4:d1:ef:8c:90:8e:84:c7:a7:3a:c4:bc:67:
                    dd:db:4c:51:9f:45:82:dc:fe:1d:e0:36:b9:8a:10:
                    a5:2b:be:88:e5:2f:d5:04:d7:f8:0c:17:fd:4c:0f:
                    dd:9f:1c:74:e8:9e:fe:6e:a9:a2:c8:7a:ab:df:47:
                    d5:ae:8d:db:2b:95:59:2b:45:cf:07:da:84:94:96:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274594

    Signature Algorithm: sha256WithRSAEncryption
         c1:a5:48:28:d2:67:d3:b4:c8:16:94:2f:e9:99:19:3b:5f:6a:
         6a:e0:38:06:0a:6e:0a:6d:6b:6e:20:e2:95:58:71:4d:af:e9:
         d5:ee:af:b7:0a:fb:9d:85:3d:5d:a0:4c:9d:d4:03:37:86:b4:
         0e:26:91:31:3c:bf:d4:ff:20:6e:d4:15:31:01:0b:e3:ee:43:
         ff:83:67:37:61:d0:b9:73:e7:41:89:b4:c4:89:60:05:4d:91:
         ab:c6:00:99:b4:70:3c:b5:fb:ac:d7:e3:fe:76:cc:2e:81:7c:
         1d:d2:a3:3e:fa:c2:5d:06:75:d6:a8:75:b5:4b:95:fd:d8:e2:
         b6:1f:63:82:0a:b2:eb:81:9c:ce:9a:d4:fd:46:04:6a:23:a1:
         47:ae:d2:56:c7:5f:54:c2:0b:7a:5d:b4:16:b5:58:7f:6e:6b:
         72:cf:54:bd:37:8e:c1:f9:9b:90:7d:74:46:34:3b:17:40:1c:
         10:c7:85:c0:26:d4:fd:44:b2:f1:9e:4d:56:83:44:db:d6:ba:
         08:d7:ba:25:d1:80:88:21:fc:af:36:ab:b1:6d:ed:d5:8d:8b:
         92:38:4c:a0:ce:39:dd:43:52:b6:c5:a5:80:28:fd:66:7a:a8:
         5d:46:00:03:de:b2:41:8c:ff:a0:38:8f:c8:59:16:31:2b:26:
         f1:ea:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org