Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0E25322D396E87242DEC3F70A18C3BC69A50ADC.cer
File:                     D0E25322D396E87242DEC3F70A18C3BC69A50ADC.cer (raw, json)
Hash identifier:          4YqjruGzvst+uMjWFIjV5XJmfN8a9Fsu5aaFSo20zZ8=
Subject key identifier:   D0:E2:53:22:D3:96:E8:72:42:DE:C3:F7:0A:18:C3:BC:69:A5:0A:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56AE4A2970143D7EA091E48870CBBA8766F84C5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/D0E25322D396E87242DEC3F70A18C3BC69A50ADC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Sep 2024 13:07:41 +0000
Certificate not after:    Wed 03 Sep 2025 13:12:41 +0000
Subordinate resources:    AS: 272530
                          IP: 2804:82a0::/32

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:4a:29:70:14:3d:7e:a0:91:e4:88:70:cb:ba:87:66:f8:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 13:07:41 2024 GMT
            Not After : Sep  3 13:12:41 2025 GMT
        Subject: CN=D0E25322D396E87242DEC3F70A18C3BC69A50ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:3a:5b:38:5c:c4:4e:aa:bb:82:b1:4e:df:
                    9d:e4:4e:41:8b:0e:da:71:da:2a:4a:88:91:6b:71:
                    c8:f0:df:f4:2f:c5:a4:f1:cc:c5:73:92:90:07:e3:
                    65:5c:8c:4a:15:6f:3e:3c:8b:23:fc:05:d3:af:61:
                    8b:ca:b1:88:b4:f0:99:8c:20:99:2a:a4:cd:56:7a:
                    0a:b9:e6:8a:c0:21:07:3e:08:20:4c:7c:37:8a:8f:
                    6e:40:10:bb:ab:19:8a:06:a5:f8:25:0a:71:19:c8:
                    c1:c5:8a:af:6f:22:b5:72:52:b1:cc:c2:98:5b:6d:
                    8d:d6:c1:f6:a7:04:d8:56:d9:29:66:76:d2:d3:a7:
                    1f:65:f1:f0:87:0d:9b:a4:c6:66:99:6b:78:12:d6:
                    c7:ab:f4:df:7f:57:6f:ec:26:ee:37:42:5f:fb:61:
                    c5:6d:aa:fc:a8:c8:a3:9a:70:6a:f1:a2:30:0c:0d:
                    66:9b:ae:7a:0f:91:83:2c:c7:99:8b:18:9d:a1:7f:
                    fe:49:c0:e7:1a:9d:5a:65:fe:7b:af:72:aa:d5:71:
                    f6:3f:df:24:3b:1d:13:8d:e9:fd:58:0e:76:b7:63:
                    a9:b8:0e:b8:a6:64:41:f7:94:3c:a7:73:99:69:9e:
                    e5:49:0e:c4:a4:b7:4f:16:69:a1:f5:fc:78:b0:b8:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:E2:53:22:D3:96:E8:72:42:DE:C3:F7:0A:18:C3:BC:69:A5:0A:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/D0E25322D396E87242DEC3F70A18C3BC69A50ADC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272530

    Signature Algorithm: sha256WithRSAEncryption
         cd:e5:16:1e:07:41:32:8b:3d:84:dd:3d:ec:08:03:fc:c3:b9:
         14:b5:29:7f:c2:6d:dd:16:17:2f:59:a1:9f:fc:f9:dc:d4:f9:
         9a:92:d4:85:6e:fc:3f:fc:e8:38:39:62:06:1b:dd:bb:00:af:
         15:3f:26:97:e3:8f:ae:0c:49:1c:63:1f:ad:a9:1c:a3:74:19:
         70:2d:0e:ad:e9:95:99:02:37:0e:45:06:6f:99:41:75:1f:08:
         f1:77:22:8a:2d:f1:3b:4b:90:37:e1:b5:1c:39:64:d1:a4:77:
         d3:36:6a:ad:ee:a5:3a:69:9a:f2:81:d7:e7:9f:4b:19:4e:0a:
         8d:8e:b2:13:7e:6d:bb:60:aa:14:7e:1b:a3:b5:eb:4b:4b:0f:
         fb:bc:ca:7c:b6:0e:c8:a3:e3:2f:a8:c0:88:4e:bb:08:b6:a0:
         f8:12:c1:02:05:17:8f:9e:9b:ea:9b:c5:cc:64:62:69:8d:c8:
         7e:ea:f4:04:c5:51:e2:1c:e0:06:24:31:81:11:2c:12:99:47:
         28:55:e6:82:6e:b6:08:cf:b1:94:9b:3f:4e:3c:57:0f:33:52:
         65:5e:2a:91:60:ee:27:2a:84:6d:5e:13:3e:31:67:7c:d5:f1:
         2c:b3:a0:7c:94:45:a5:a2:63:97:0f:0f:68:3b:ff:81:28:8a:
         22:66:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 10:22:47 2024 by rpki-client on console-fra.rpki-client.org