Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.cer
File:                     CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.cer (raw, json)
Hash identifier:          wFXt/+UdniZan3D4Q+x7jj2yBZUxNKB729ne6SFYWkY=
Subject key identifier:   CC:08:DC:41:D5:00:DF:B5:6D:D5:52:61:F3:D0:6C:A5:C6:49:5E:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56128C9A52CE0D1222C5ED723DD3105E19A67A19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:59:53 +0000
Certificate not after:    Thu 03 Apr 2025 15:04:53 +0000
Subordinate resources:    AS: 270263
                          IP: 200.53.4.0/22
                          IP: 2804:6954::/32

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 05:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:8c:9a:52:ce:0d:12:22:c5:ed:72:3d:d3:10:5e:19:a6:7a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:59:53 2024 GMT
            Not After : Apr  3 15:04:53 2025 GMT
        Subject: CN=CC08DC41D500DFB56DD55261F3D06CA5C6495ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:c7:bb:64:7a:03:ff:15:58:1d:38:a5:d5:
                    66:c1:67:65:6b:98:32:37:72:3b:89:0a:d7:3a:b1:
                    40:69:c9:e9:d8:9c:ad:7f:65:83:de:73:61:31:7b:
                    4a:ea:3f:91:d8:1d:94:8f:db:be:da:de:3c:92:ff:
                    f2:64:e1:8d:73:df:16:f9:b1:85:d9:b0:5e:ec:6d:
                    9f:75:78:cd:e1:d4:b6:f7:95:c4:28:c6:fb:86:41:
                    66:9b:ce:81:87:36:d5:54:fe:58:6a:90:a6:e1:c2:
                    8d:20:3b:a0:7e:3f:f1:45:c6:44:76:38:1e:21:8d:
                    2b:fa:e6:8f:66:1f:70:c9:18:0b:59:c5:01:32:ab:
                    07:da:15:4c:ad:a3:a4:60:be:5c:a4:f7:12:ca:36:
                    c7:8b:8f:a9:44:a2:29:42:05:d0:5f:72:87:1d:bc:
                    ab:34:09:40:e4:87:f2:e2:d3:bd:a0:1e:0f:b9:06:
                    41:46:79:86:6a:1a:98:ea:df:2b:e5:3b:c4:47:63:
                    a3:61:88:49:f7:ec:f7:95:65:e6:d8:e6:86:0e:97:
                    5b:9e:39:13:1a:ac:8e:f9:df:cb:e5:46:ee:13:f3:
                    65:8e:ba:fb:e5:4d:1d:71:ab:4e:a5:eb:84:1d:b3:
                    05:38:9c:1b:64:ce:ec:e2:cd:e6:92:f8:80:22:db:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:08:DC:41:D5:00:DF:B5:6D:D5:52:61:F3:D0:6C:A5:C6:49:5E:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.4.0/22
                IPv6:
                  2804:6954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270263

    Signature Algorithm: sha256WithRSAEncryption
         15:23:c9:e8:5a:30:47:ab:f3:97:c9:8e:e0:bb:6e:5d:f7:c2:
         b1:53:c7:c1:a4:4a:0d:51:c7:b7:93:c6:de:44:4f:94:81:e7:
         a3:df:b5:b5:42:e1:0a:49:de:a9:3c:d7:b4:2c:78:95:1e:13:
         ee:12:bd:78:9b:94:9e:54:23:ad:5e:d4:d5:34:67:ee:c3:0b:
         55:ff:b8:97:e9:7a:77:4f:7a:ab:32:16:55:91:1c:6e:e2:a2:
         a1:cb:44:e0:c9:28:d6:f1:63:9a:5f:99:50:f9:a0:3a:3c:37:
         3b:93:70:0a:6e:f6:53:a5:66:23:4d:a3:20:1f:05:c5:f8:05:
         e9:f2:64:78:b4:cd:e7:78:51:46:04:19:25:4e:c3:e2:fa:96:
         a9:98:e0:5f:4c:87:17:2b:0f:8a:8c:d9:fa:22:23:05:fb:ec:
         a3:9f:2c:d6:c5:cb:03:26:71:d5:40:2c:4d:92:37:e4:40:89:
         02:18:0c:f9:af:f8:41:81:c6:c4:c9:61:2b:a4:62:b0:af:64:
         4d:b1:a7:29:76:f0:97:77:6f:52:96:d0:11:0d:d7:a9:68:6e:
         3d:e7:70:86:4a:e7:59:19:08:87:6c:5b:b0:02:12:4a:17:06:
         5c:5d:c8:f1:88:7a:df:8b:48:29:28:3d:d4:43:42:63:f5:c2:
         dd:e6:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 07:30:21 2024 by rpki-client on console-ams.rpki-client.org