Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
File:                     CF89ECF1906934B8868749FE10703ECBB434D3B9.cer (raw, json)
Hash identifier:          50jP8BC0wffVA0tsuZS/P2IlZOvaiS+ToRvr2B64HB0=
Subject key identifier:   CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53A5B08EA72D524CBD6D4A369486A68F5715EC9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:37:15 +0000
Certificate not after:    Wed 02 Apr 2025 22:42:15 +0000
Subordinate resources:    AS: 262505
                          IP: 177.55.144.0/20
                          IP: 177.66.224.0/20
                          IP: 2804:544::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 19:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a5:b0:8e:a7:2d:52:4c:bd:6d:4a:36:94:86:a6:8f:57:15:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:37:15 2024 GMT
            Not After : Apr  2 22:42:15 2025 GMT
        Subject: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:bd:ee:b4:58:7e:3e:dc:8d:f2:be:7a:78:
                    79:d2:26:99:b9:e8:f1:97:d0:bb:95:d2:35:42:98:
                    e8:79:e7:2e:65:fb:f4:69:61:73:6a:b1:dd:f1:4a:
                    7b:d7:29:63:ab:28:5c:45:6a:ab:5b:a9:dd:2f:dc:
                    e2:e7:70:55:a9:b2:d0:89:82:b9:7f:94:10:7b:ec:
                    3a:3f:8e:ad:c0:a8:ef:b2:17:30:59:cf:f7:bd:1f:
                    a8:ce:88:af:38:d9:30:af:6a:16:85:12:b8:96:79:
                    23:a2:02:43:57:59:88:52:61:b9:36:e8:49:fe:80:
                    bb:4e:dc:02:c8:1a:34:a0:3c:54:8d:77:15:45:36:
                    f0:b7:05:9f:22:1b:3a:1b:91:b3:9e:12:29:ae:22:
                    5a:cd:b1:dd:5a:78:2c:2b:49:ad:32:a6:0d:80:ab:
                    2e:d2:d7:94:95:11:50:b8:54:2c:42:4e:7b:12:d0:
                    f3:35:25:86:08:ab:57:43:92:e0:dc:28:1d:db:c0:
                    c3:a3:f2:da:74:3a:12:9f:63:e0:e8:6d:84:be:3c:
                    23:7c:1a:31:d1:1e:1c:0f:f2:21:60:fc:19:3c:43:
                    04:ef:c5:35:35:17:ae:99:1a:d2:dd:8a:50:7e:5c:
                    f3:f1:0d:f4:db:38:29:46:19:24:e1:03:bc:c8:36:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20
                  177.66.224.0/20
                IPv6:
                  2804:544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262505

    Signature Algorithm: sha256WithRSAEncryption
         d5:bf:69:a1:5d:cf:c5:1a:a2:63:a4:f8:c0:ac:1f:c1:46:c9:
         fb:88:4a:a9:00:f1:47:f1:9b:68:2a:f1:b8:70:ab:2f:25:e4:
         65:8e:b3:8d:c0:04:ff:29:f6:82:b0:b3:ef:ff:35:ce:5e:4a:
         f4:ce:5b:f3:2d:d3:f3:7a:36:3b:4d:42:c7:29:de:cd:9d:07:
         8e:c0:f5:f6:18:1c:d8:19:86:9a:9f:09:a5:b7:23:59:4c:0f:
         7b:83:fb:04:30:3a:10:59:84:a8:ac:d3:b0:58:6d:23:f0:f1:
         24:22:a6:66:a1:bb:9b:47:f0:5c:86:d6:9d:61:f5:51:dc:e2:
         1e:d7:e4:08:74:b5:cb:a0:89:c2:16:c2:31:2e:2e:f1:fe:e3:
         44:d0:06:8b:c0:41:d6:33:2d:5c:fc:bb:29:e9:f6:2e:b3:63:
         fd:58:e5:7f:ec:8b:d5:16:21:cc:51:7a:cd:77:ac:f9:8b:47:
         2d:17:89:2b:6a:71:76:21:ba:37:5d:1b:25:82:f0:6d:d4:3b:
         19:42:1d:f6:13:35:ae:3c:f2:0d:d8:7a:8e:4e:e7:62:58:8f:
         0d:31:c7:38:13:13:0d:fc:9d:f4:88:4e:05:34:9b:9f:6f:48:
         27:4d:dd:bd:66:e0:3d:68:45:d3:14:60:c0:fd:21:51:d7:bb:
         6d:7c:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:18 2024 by rpki-client on console-fra.rpki-client.org