Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D63944944C9213940D0D5EABDAE9B471306B6760.cer
File:                     D63944944C9213940D0D5EABDAE9B471306B6760.cer (raw, json)
Hash identifier:          Di49j5OKYJfUtVrtYAQ75l8Z1K7o3ZoZxSQ8AUlJvmY=
Subject key identifier:   D6:39:44:94:4C:92:13:94:0D:0D:5E:AB:DA:E9:B4:71:30:6B:67:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CB1ECD6B013018D7DCE81F8A9607600849CD47E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/D63944944C9213940D0D5EABDAE9B471306B6760.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Sep 2024 19:03:45 +0000
Certificate not after:    Wed 03 Sep 2025 19:08:45 +0000
Subordinate resources:    AS: 267473
                          IP: 192.141.184.0/22
                          IP: 2804:4208::/32

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 00:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b1:ec:d6:b0:13:01:8d:7d:ce:81:f8:a9:60:76:00:84:9c:d4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 19:03:45 2024 GMT
            Not After : Sep  3 19:08:45 2025 GMT
        Subject: CN=D63944944C9213940D0D5EABDAE9B471306B6760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:2c:0f:4d:a7:85:84:87:61:37:67:9e:f7:
                    e9:d6:ea:b8:f8:c3:10:60:77:89:4c:96:51:93:ca:
                    3c:de:bc:e1:91:b8:0e:5d:df:4e:d0:f6:da:20:86:
                    3a:6d:bc:05:04:ac:a2:be:3a:e2:dc:af:02:b0:99:
                    76:a2:30:a2:0b:b2:f5:6d:80:34:28:34:32:5d:ec:
                    59:58:cf:83:b9:ec:57:95:ef:0a:9a:05:5c:69:eb:
                    29:1e:e8:66:ba:6e:08:10:d1:6d:19:a3:aa:81:34:
                    ae:89:dd:46:46:0c:18:84:bc:a2:44:ab:4d:6f:02:
                    97:58:a7:1c:dd:1e:6c:12:a9:5e:78:e5:79:36:50:
                    0b:0d:28:96:7c:b8:c5:52:cd:10:50:69:a1:45:69:
                    a2:da:25:78:c1:29:57:9a:93:8a:fc:47:ce:21:52:
                    f6:7a:6c:88:2f:77:df:66:ae:77:09:96:f5:eb:12:
                    29:ca:73:0d:04:d2:13:c8:ad:c8:2e:ab:ba:79:bd:
                    67:eb:45:58:05:fb:c7:41:5d:26:64:44:64:b0:b1:
                    00:a0:b4:55:c3:6d:ff:87:79:02:0a:97:c2:9a:88:
                    36:84:c4:02:63:b9:ba:ce:0a:99:41:9c:a6:5e:6c:
                    21:5a:b0:b1:20:e4:40:5a:85:f5:3a:81:91:21:ec:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:39:44:94:4C:92:13:94:0D:0D:5E:AB:DA:E9:B4:71:30:6B:67:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/D63944944C9213940D0D5EABDAE9B471306B6760.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.184.0/22
                IPv6:
                  2804:4208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267473

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:3b:a8:5d:61:c0:51:ec:38:a5:40:f1:23:f4:2b:d3:71:
         8a:ea:e2:9b:92:d4:a3:4a:9c:c4:f5:e3:3f:60:79:b7:f6:29:
         7f:fd:a1:24:c3:68:57:68:93:c4:e0:41:c2:26:4d:15:15:6c:
         71:a7:5f:50:79:ac:39:bb:8a:a2:01:ac:59:51:c0:e5:a6:27:
         a3:28:65:5c:13:58:91:dc:16:58:77:f5:a4:2b:3e:8c:3f:7a:
         0a:c7:22:37:01:48:f2:64:0b:bd:4b:aa:8d:6d:53:03:a1:d0:
         89:db:e7:4c:0d:b6:8d:84:c7:a8:4e:6b:b0:30:a5:38:a2:31:
         98:0b:77:67:1f:96:ba:0c:07:2e:07:23:98:3b:56:d4:8a:7e:
         60:23:dd:a9:57:54:e4:a7:04:0d:5a:ba:c1:64:21:5f:c2:52:
         40:14:0a:86:61:d9:3b:0c:15:7e:84:39:1a:ce:e3:15:8c:e1:
         0d:41:62:1f:61:ae:24:9c:31:0b:93:2b:38:0d:80:50:ca:33:
         37:78:2d:09:19:ac:44:ea:f5:e5:5b:9e:56:00:ed:ab:7a:7a:
         be:36:ca:a6:59:1e:78:c9:7d:90:21:52:22:41:49:3f:16:75:
         f5:3f:7f:1b:bf:46:77:b0:78:3f:87:65:6d:15:b3:98:39:39:
         54:79:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 04:01:20 2024 by rpki-client on console-fra.rpki-client.org