Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.cer
File:                     B920BF0EDCE3A3B03FEC47745AFE6218226CB774.cer (raw, json)
Hash identifier:          fUtsK5RhPTf4ov7I4XEFGR2WLvpZzOdvlZALe++bHK8=
Subject key identifier:   B9:20:BF:0E:DC:E3:A3:B0:3F:EC:47:74:5A:FE:62:18:22:6C:B7:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C31F5B49C01CE1EBA8F3CB5F886B832336972C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:33:28 +0000
Certificate not after:    Wed 02 Apr 2025 22:38:28 +0000
Subordinate resources:    AS: 273392
                          IP: 45.168.94.0/24
                          IP: 2804:8df4::/32

Validation:               Failed, certificate revoked on Sun 26 May 2024 08:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:31:f5:b4:9c:01:ce:1e:ba:8f:3c:b5:f8:86:b8:32:33:69:72:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:33:28 2024 GMT
            Not After : Apr  2 22:38:28 2025 GMT
        Subject: CN=B920BF0EDCE3A3B03FEC47745AFE6218226CB774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:33:11:eb:65:68:60:7c:b0:b9:a4:77:f8:
                    c9:d3:58:b4:e3:54:8f:82:91:88:27:a7:80:d6:47:
                    22:3c:32:1d:75:b5:bd:75:4c:a1:5d:35:cb:99:56:
                    77:d7:6b:b8:4d:c0:a5:4c:26:68:45:5c:95:2d:da:
                    6d:d3:aa:c8:20:df:fd:1d:4a:dc:06:fb:1c:37:c8:
                    b2:05:a9:9a:38:f2:6d:c7:4f:64:51:12:8d:b2:f7:
                    fd:5e:93:ff:0d:94:24:31:cb:49:6b:ef:8d:3d:c3:
                    25:4e:48:41:de:88:bf:24:b8:ea:19:c9:e2:19:29:
                    d0:81:b0:5b:c0:4e:4f:e8:d9:a0:9b:62:6a:3f:af:
                    43:28:71:72:47:d8:8f:32:e9:34:51:24:e5:cf:80:
                    db:6c:b1:f3:21:16:b0:95:e4:c4:c3:55:86:cc:f3:
                    f1:bb:22:a3:c0:ae:02:bb:39:04:4a:6b:bc:72:7e:
                    25:60:95:25:e4:ff:f0:95:f9:86:ab:a7:dc:97:a1:
                    6b:f1:b5:e8:09:02:1a:aa:47:a3:89:73:99:9b:66:
                    a4:9d:6e:eb:b1:23:87:9b:e0:57:ba:6b:c8:bb:36:
                    3f:79:24:86:a3:3d:e6:9c:a0:3c:d9:76:63:d9:83:
                    e8:2e:36:ef:78:f0:cb:6c:62:67:ca:8e:d8:65:77:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:20:BF:0E:DC:E3:A3:B0:3F:EC:47:74:5A:FE:62:18:22:6C:B7:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24
                IPv6:
                  2804:8df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273392

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:84:39:c6:77:10:75:b8:54:23:9b:3a:df:1b:94:1a:e7:
         ad:a8:9f:ae:65:2e:10:09:a8:36:16:d9:f4:c8:ab:05:92:e2:
         bf:d1:16:ba:c4:f4:78:7e:95:72:f5:bb:4d:10:18:76:b0:37:
         5f:39:1f:d2:d6:83:e8:6b:4a:4e:0d:2b:5a:fe:b1:8f:bb:b1:
         c9:59:41:49:33:e3:6f:dc:de:6f:c1:c7:0d:a0:85:26:36:77:
         c0:d2:34:0c:06:23:d4:88:90:62:6f:de:d8:64:36:7a:3e:f1:
         ed:67:f0:22:e2:fb:cc:c6:75:89:18:ad:d4:97:c6:3b:6e:2e:
         76:90:df:30:34:eb:c8:62:01:e3:44:7c:f8:a3:13:00:78:67:
         51:30:ee:13:7f:aa:6c:b6:00:b6:3a:d6:73:72:d5:13:4b:3a:
         c9:bc:f8:1f:ca:56:7e:59:0a:27:15:7b:48:cf:9a:f5:c5:ed:
         67:e6:d6:24:d5:75:01:d9:d6:86:6d:70:30:91:85:b2:dc:d2:
         5e:24:ce:0c:ea:0c:fe:c2:25:ce:ac:53:9b:5f:bc:ab:0e:16:
         e4:88:e9:79:68:87:88:99:27:0a:ca:c9:a1:98:28:e8:30:16:
         fd:91:1f:df:db:f0:1e:c1:e3:39:a8:45:70:6f:af:1b:7e:c5:
         b5:6c:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:21:27 2024 by rpki-client on console-fra.rpki-client.org