Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.cer
File:                     8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.cer (raw, json)
Hash identifier:          NIKe2HI3qEobRG3ibA0pZ4hI7x54EH3JMdCh+1Q36mQ=
Subject key identifier:   8D:A5:B4:B4:77:0B:5C:8D:6D:21:41:4A:6E:2C:80:B7:23:7E:07:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       304A812AB6FFBA66642591EDF9A7DA4432D141D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 16:19:51 +0000
Certificate not after:    Thu 08 Jan 2026 16:24:51 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32

Validation:               Failed, certificate revoked on Thu 09 Jan 2025 16:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:81:2a:b6:ff:ba:66:64:25:91:ed:f9:a7:da:44:32:d1:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 16:19:51 2025 GMT
            Not After : Jan  8 16:24:51 2026 GMT
        Subject: CN=8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:f8:d3:0b:37:a1:b3:09:dd:e5:2f:5b:bb:
                    59:4e:9f:5d:57:21:05:d2:78:90:b4:e0:86:4b:3a:
                    ec:91:7f:45:fd:dc:7f:72:26:47:10:ab:05:5b:fb:
                    dc:71:b1:33:43:3b:03:ab:a1:c2:06:60:c3:aa:7d:
                    a5:61:21:1b:41:33:75:04:a3:a7:26:8e:6c:dd:54:
                    bf:f3:27:99:63:5f:bd:24:53:6f:8e:ae:44:e2:48:
                    11:f8:6c:41:6e:f5:cf:84:8f:71:00:04:d8:f9:5b:
                    1d:2a:2a:21:8c:1e:50:64:49:73:62:ff:61:dc:e9:
                    4c:0d:ac:34:6e:e2:a7:69:bd:1d:f0:b7:79:cb:c0:
                    c2:bc:89:c2:aa:84:27:45:4f:3b:b3:b2:bb:04:be:
                    91:f1:e9:b7:01:5d:32:e1:b9:de:62:c5:be:5c:ba:
                    18:c5:b9:3b:15:6f:0d:cd:74:9b:c8:87:e9:4e:5a:
                    3c:6e:75:bf:98:54:77:f9:46:fb:97:71:7d:fa:58:
                    58:d3:fb:68:b6:c4:de:88:7d:f6:74:d6:10:29:fd:
                    37:cf:db:44:79:c0:5f:a4:fa:64:41:4d:69:b8:e4:
                    bd:23:0c:63:64:56:aa:28:89:35:1f:c1:f8:8a:20:
                    64:12:14:89:1c:e3:79:da:d7:b0:ec:e1:7c:70:a8:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:A5:B4:B4:77:0B:5C:8D:6D:21:41:4A:6E:2C:80:B7:23:7E:07:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         07:15:47:b1:4e:83:82:e6:80:56:ab:1d:50:bb:3e:ef:0b:68:
         2d:9c:b3:13:67:f7:7d:25:c1:00:5d:46:f7:67:8e:9e:21:12:
         97:57:86:1a:ff:95:06:28:7c:d6:f4:f8:f0:a5:bb:9d:d0:01:
         96:a9:b1:6e:c9:48:8d:04:40:78:95:56:90:b4:de:a2:c8:11:
         ba:dd:a9:61:b4:00:a2:eb:bd:aa:ec:1a:77:f3:fe:f2:b0:1a:
         b6:9a:65:74:7e:ef:11:44:86:0c:3d:e2:65:bb:f4:29:57:27:
         55:84:c7:4f:d7:e2:40:29:9e:0b:bc:ce:3a:d6:21:6a:1d:04:
         c0:fc:b3:37:6e:f0:82:18:6e:db:22:65:5a:29:cf:95:e3:d3:
         47:82:08:cd:56:4e:09:d6:30:80:db:f1:03:83:49:21:69:e5:
         6b:eb:fb:a0:59:65:de:56:3d:6c:32:93:dd:a3:4b:9a:11:08:
         80:e9:a0:d5:26:ed:19:a1:24:56:4e:21:31:f8:b0:e2:1c:0d:
         ec:d2:96:40:fa:d2:37:69:c5:e6:d4:a4:09:54:6f:8a:54:0f:
         7c:14:3f:ba:4a:6b:96:49:5b:cf:02:74:42:82:4a:bc:c6:f2:
         19:51:b7:a8:c2:ae:fb:a5:26:f0:2b:17:5a:0e:2c:82:2b:1e:
         53:d5:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 9 19:51:58 2025 by rpki-client on console.sobornost.net