Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/17378A12D6D3D6FCA524258703546F72DEAC9595.cer
File:                     17378A12D6D3D6FCA524258703546F72DEAC9595.cer (raw, json)
Hash identifier:          dJMpOq3Ui9/em0v1ER6HVhxpQQnmK0p8OmvwApRkg1U=
Subject key identifier:   17:37:8A:12:D6:D3:D6:FC:A5:24:25:87:03:54:6F:72:DE:AC:95:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42800915606420694CA270A18556FF723E09FBC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/17378A12D6D3D6FCA524258703546F72DEAC9595.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 18:36:44 +0000
Certificate not after:    Tue 08 Oct 2024 18:41:44 +0000
Subordinate resources:    AS: 271468
                          IP: 181.224.12.0/22
                          IP: 2804:7bfc::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:09:15:60:64:20:69:4c:a2:70:a1:85:56:ff:72:3e:09:fb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 18:36:44 2023 GMT
            Not After : Oct  8 18:41:44 2024 GMT
        Subject: CN=17378A12D6D3D6FCA524258703546F72DEAC9595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:29:a7:da:b3:73:51:a2:7a:a3:88:03:af:6a:
                    54:23:53:6d:56:61:d9:a9:3f:9e:ca:c4:d4:d9:53:
                    71:8b:01:38:b2:d0:8f:e7:9c:f9:4f:6d:31:e5:33:
                    da:e9:98:64:1a:cd:5d:37:6c:e9:a4:da:ac:e2:38:
                    bf:51:25:f7:bf:ac:11:df:5b:ba:40:8e:07:6c:47:
                    0a:df:da:ff:60:f4:42:31:1e:1a:d3:e6:2a:e1:cd:
                    86:25:1e:fb:a0:cc:ad:1e:1f:c0:4c:77:33:9f:af:
                    23:1e:73:c4:0e:02:dd:c4:3c:a1:da:ed:59:66:33:
                    ba:e0:e7:09:07:d7:2a:ee:17:3d:e3:67:79:dd:e4:
                    d5:82:67:50:92:36:e4:4c:23:d7:72:9f:db:e2:4e:
                    cb:05:e7:f5:74:8d:5b:32:11:04:9d:9c:41:ed:02:
                    de:99:16:43:56:47:b4:83:ff:6d:14:27:5a:35:ef:
                    89:73:b0:f0:d2:9d:c0:d0:c5:21:8b:1a:83:a9:d6:
                    10:a9:1a:18:be:4a:9c:ea:c9:66:73:32:45:63:c2:
                    5e:ff:10:6a:99:df:45:86:4e:87:e7:0a:54:ad:b2:
                    70:e7:d3:07:61:50:d7:6f:34:b1:ff:22:0f:7a:7a:
                    74:7d:7f:97:5c:05:1a:b8:74:b6:23:48:aa:11:39:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:37:8A:12:D6:D3:D6:FC:A5:24:25:87:03:54:6F:72:DE:AC:95:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/17378A12D6D3D6FCA524258703546F72DEAC9595.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/22
                IPv6:
                  2804:7bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271468

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:d7:b5:8b:3a:4d:3f:e5:58:75:ed:56:e1:c9:f5:25:27:
         80:23:59:ad:47:18:08:0c:a1:48:c6:9d:6c:2d:f0:a9:d3:5c:
         74:7e:e3:88:50:93:36:d6:2b:6f:99:d8:ba:48:6a:65:d9:f5:
         8f:b0:86:d8:fe:ab:9a:41:37:9d:2c:e6:71:0b:07:4e:66:ff:
         21:ea:53:a0:c7:52:22:06:55:3e:38:e0:04:01:0a:c9:da:ef:
         c0:f2:91:12:d3:06:5c:09:9f:31:87:cb:1a:a8:3e:60:81:6b:
         3e:4f:fe:34:fd:98:fc:81:c3:6f:1e:ba:ed:63:90:b0:42:9c:
         a9:c5:d6:82:5a:ac:62:8c:d6:b0:83:53:2c:5d:f7:23:ff:d3:
         17:53:1c:6c:ff:90:a7:1a:63:95:ce:39:d7:3a:5a:e7:72:46:
         d8:b2:71:2a:1e:1d:a9:c0:b7:59:9c:12:ee:25:cd:e5:b6:dd:
         75:83:ef:5b:11:dc:29:2a:8e:48:54:df:f4:49:3d:71:87:51:
         14:d1:17:95:30:eb:73:5f:2b:23:e5:c7:0a:ec:52:2b:46:ca:
         5e:ad:7a:69:c0:e7:86:d3:1d:95:82:1c:cc:f7:2e:6c:b4:45:
         b7:0a:9e:d5:6b:92:66:50:38:f1:7f:20:96:f2:83:71:cc:69:
         bb:3b:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----