Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8AD129A70B134182A98A099793F6D4CA09BE827.cer
File:                     E8AD129A70B134182A98A099793F6D4CA09BE827.cer (raw, json)
Hash identifier:          qAowcrSXsB40albbf54VJnzADBAas919aR6S7vsIZPY=
Subject key identifier:   E8:AD:12:9A:70:B1:34:18:2A:98:A0:99:79:3F:6D:4C:A0:9B:E8:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       025FA9197B9A89174D52B20DB30E62DCCAE44D37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/E8AD129A70B134182A98A099793F6D4CA09BE827.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 13:21:36 +0000
Certificate not after:    Fri 07 Nov 2025 13:26:36 +0000
Subordinate resources:    AS: 28191
                          IP: 186.193.176.0/20
                          IP: 189.90.32.0/20
                          IP: 2804:c2c::/32

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 20:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:a9:19:7b:9a:89:17:4d:52:b2:0d:b3:0e:62:dc:ca:e4:4d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 13:21:36 2024 GMT
            Not After : Nov  7 13:26:36 2025 GMT
        Subject: CN=E8AD129A70B134182A98A099793F6D4CA09BE827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:3f:f7:a5:3d:f4:13:25:1e:ab:6e:22:3c:
                    9c:fe:43:e8:52:f9:ac:41:58:bf:8d:d5:ba:de:1d:
                    39:5e:ab:9f:47:59:ad:c1:7f:6f:6f:63:0e:45:f1:
                    b0:d7:c3:66:2e:62:81:52:48:bf:0d:97:e3:6f:46:
                    b3:86:a9:6d:fc:5f:6c:cb:ac:a2:60:55:98:06:d9:
                    f6:0e:af:c3:b8:8e:07:cb:6a:c7:e4:45:0b:ba:0c:
                    07:13:41:21:f6:0e:05:ed:81:40:0f:0a:4c:77:62:
                    ac:15:0a:dd:9a:64:7c:a5:4b:63:fd:68:1d:e6:2f:
                    08:5c:cc:37:b1:83:bc:c5:5e:99:eb:33:96:d1:4c:
                    e7:8f:bf:fa:29:b7:e7:3f:7e:65:34:e8:a0:4d:79:
                    e4:01:6c:bd:a7:ff:1e:f3:d4:d2:20:6f:16:52:a5:
                    90:01:a3:ee:21:01:a3:0e:75:fb:9c:7a:b0:c4:49:
                    ca:f6:a1:6f:1b:9a:e4:65:c6:de:10:7c:7e:4f:1c:
                    c3:a4:7c:84:0a:12:f0:a9:fc:dc:3c:09:96:54:41:
                    8f:85:0d:03:19:f5:8c:4d:bb:53:78:59:09:51:9f:
                    d3:35:48:65:9f:1b:ce:6b:67:87:a8:64:9f:d3:7e:
                    12:19:08:13:97:27:86:cc:c8:0e:bb:23:15:f4:60:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:AD:12:9A:70:B1:34:18:2A:98:A0:99:79:3F:6D:4C:A0:9B:E8:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/E8AD129A70B134182A98A099793F6D4CA09BE827.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20
                  189.90.32.0/20
                IPv6:
                  2804:c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28191

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:9b:d9:79:b8:f3:06:b3:4c:b3:dd:32:c3:62:77:3a:0d:
         87:b5:34:c5:4b:33:7d:3b:64:5b:be:c8:2b:d7:af:be:35:29:
         32:30:19:f3:a5:70:bf:e6:6c:40:d5:9d:9e:c4:0c:02:e0:ea:
         85:8d:b8:5d:10:1b:97:ed:5a:a3:20:58:7d:b1:0e:9f:84:1b:
         13:5a:9b:12:6a:e7:b9:22:a5:5b:55:3b:66:ce:91:f3:5b:8b:
         75:4a:87:49:d1:e4:4d:48:15:c4:fd:03:97:b1:2b:ee:08:9e:
         51:55:78:24:1b:26:7f:47:84:0a:96:67:b4:bd:18:0f:79:40:
         73:66:4b:6c:dd:ff:96:f1:32:27:40:2c:23:45:64:1e:79:85:
         fa:cf:b1:95:b3:fb:d5:16:6f:d8:54:db:99:53:d3:f5:51:94:
         a0:2b:22:58:75:8d:92:c0:47:92:fa:87:49:cd:1f:7b:8d:c8:
         9e:4d:54:c8:9e:e4:dc:70:80:2a:3f:21:2a:32:2b:af:f8:1b:
         9c:b2:92:dd:8b:af:09:e9:55:33:fa:6a:1f:4a:a3:ba:0b:b1:
         af:0e:f3:f4:a2:8d:f8:bc:ce:21:46:70:37:24:08:62:51:0a:
         ec:26:88:d8:18:3e:28:33:e0:62:83:55:16:ae:d9:b0:01:57:
         da:86:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 00:00:59 2024 by rpki-client on console-fra.rpki-client.org