Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer
File:                     CD8C447FF133EB21C0315B78AB00573F23F7A647.cer (raw, json)
Hash identifier:          tkkLyk5pd5q/vvDE0nR7WsnrhNGwGUXhIm9gekso5uM=
Subject key identifier:   CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       239DDE11F71B70470E06DC6103C214D5DAC6FF3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2024 14:29:04 +0000
Certificate not after:    Thu 04 Sep 2025 14:34:04 +0000
Subordinate resources:    AS: 270549
                          IP: 187.120.160.0/22
                          IP: 2804:6db0::/32

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 22:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9d:de:11:f7:1b:70:47:0e:06:dc:61:03:c2:14:d5:da:c6:ff:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 14:29:04 2024 GMT
            Not After : Sep  4 14:34:04 2025 GMT
        Subject: CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:7f:92:fe:37:07:b0:c2:86:5d:4b:7d:f1:
                    74:6b:e6:4e:ce:4e:9c:51:95:e9:3f:a6:64:cc:4f:
                    f8:f4:74:4c:36:23:5b:f6:a1:b3:27:d2:61:f3:0e:
                    eb:12:a4:0d:11:8c:11:8a:9e:d3:f1:03:f5:3a:f9:
                    7e:9c:21:a9:f1:de:02:9f:e1:ec:3c:3f:8b:22:35:
                    9b:5e:aa:b9:5c:dc:b9:0d:67:36:b8:7b:11:11:f7:
                    c2:76:6d:97:76:8f:f2:9a:58:51:39:98:04:34:1e:
                    ce:f4:29:64:89:65:af:2c:86:9a:41:ac:cc:04:90:
                    bb:45:31:b7:28:bc:05:a2:59:fe:eb:7c:41:f4:41:
                    09:d8:88:b8:c9:4f:f5:32:3a:78:ae:79:d0:87:d6:
                    d5:97:4c:f0:30:81:1c:fe:d4:ef:f8:d0:a5:9a:ad:
                    b6:a5:fb:1b:9a:bb:a3:05:41:dc:4e:e9:21:ed:cc:
                    6e:73:65:3d:06:ec:2f:0f:5a:fc:af:47:b9:e6:c1:
                    1b:b3:f7:f1:3d:d7:80:fa:aa:d5:73:51:7a:14:e2:
                    e2:d1:33:40:c7:90:23:ce:ab:51:6b:52:d9:8b:5f:
                    99:af:8c:f7:5a:90:4c:78:f3:dd:a0:8f:a8:da:7e:
                    12:2c:aa:60:42:7a:75:a5:0f:72:6f:bb:2f:3c:60:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.160.0/22
                IPv6:
                  2804:6db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270549

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:9a:34:75:47:ef:db:c0:fd:a1:9a:5f:d9:b5:72:53:0b:
         54:68:d4:7e:2a:8d:2b:27:51:31:a8:3e:00:af:d4:6b:7e:e8:
         5e:4b:0d:74:19:e4:60:9b:ba:97:cc:a7:da:20:c7:4c:52:ce:
         a0:56:d7:a0:c2:a8:85:eb:0b:ab:2b:80:e8:c5:3c:9d:99:04:
         7d:b3:cd:c3:df:80:b6:0a:5a:97:78:d3:02:31:17:c9:f1:5e:
         88:73:b5:3f:60:3d:c2:60:2b:b1:cb:87:9b:51:e6:d0:4c:fd:
         37:ab:6d:e4:4d:1f:37:e3:60:a8:6a:69:8f:d2:4e:af:4a:ae:
         ee:f8:92:63:48:75:1b:97:19:9a:3e:b2:09:26:8e:75:69:47:
         02:d5:4d:eb:7d:17:e2:d9:0a:ae:b8:72:ff:2f:fc:e9:64:52:
         f4:e3:c9:f4:69:bb:12:c2:a8:0a:cb:2f:03:bb:ca:28:56:e1:
         83:b9:94:59:64:e6:4d:76:25:4d:60:cf:d6:07:69:96:d9:27:
         42:d9:3f:8b:ef:ca:c6:3e:a0:e3:79:d3:1c:a5:cc:34:26:aa:
         cf:b9:37:59:3a:c5:70:22:02:eb:87:d3:16:7e:e5:c6:a7:bb:
         80:86:a3:10:36:6d:45:10:45:72:12:e2:24:6a:2f:d4:23:ae:
         13:98:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 00:06:04 2024 by rpki-client on console-fra.rpki-client.org