Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer
File:                     0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer (raw, json)
Hash identifier:          61PrrEr/K/SvJrEdfXv0mN2jUFy/VLoJ1TB+eJ32zcw=
Subject key identifier:   0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       354783C2A7C96596B1A2CD0673EC8777E115E9BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Aug 2024 15:05:41 +0000
Certificate not after:    Thu 31 Jul 2025 15:10:41 +0000
Subordinate resources:    AS: 268597
                          IP: 45.164.44.0/22
                          IP: 2804:53a4::/32

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 06:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:47:83:c2:a7:c9:65:96:b1:a2:cd:06:73:ec:87:77:e1:15:e9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  1 15:05:41 2024 GMT
            Not After : Jul 31 15:10:41 2025 GMT
        Subject: CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:db:de:5c:74:a0:eb:7d:d7:89:3e:59:b5:
                    ad:29:18:c4:6b:26:a1:82:24:96:0c:7d:d5:6d:b5:
                    05:86:b0:8f:dd:c8:5e:86:bc:e3:39:12:75:79:a7:
                    f1:6f:a0:a2:92:2e:5c:8c:b9:45:52:46:e1:42:e8:
                    4e:4a:1e:ae:e6:b9:82:16:75:aa:37:c4:c1:6d:b4:
                    66:42:00:ae:1b:b4:4c:80:ca:4d:aa:41:1c:d8:8b:
                    62:4e:ec:8f:c2:01:e6:aa:7c:e0:44:4e:8c:3c:4c:
                    26:41:58:4b:89:d8:7f:56:4e:18:fe:de:69:5d:ea:
                    5a:38:95:88:1a:0b:85:8a:03:6a:15:ed:5a:06:e8:
                    f6:3b:1a:cc:b6:46:fc:d4:12:56:97:e6:d7:9b:38:
                    2c:d2:a3:0c:d7:4c:85:ca:f4:86:3a:16:bc:d1:9e:
                    47:3b:f9:f4:ea:de:53:d0:71:64:00:4b:70:d8:0f:
                    52:ee:c1:9b:10:6a:93:46:5a:06:53:11:bc:f4:37:
                    ab:24:cb:d8:96:3a:38:3e:af:7b:0c:d2:4c:0e:82:
                    0d:2d:46:63:9c:aa:a7:6d:10:94:da:dd:44:00:1f:
                    a3:93:0c:a0:f6:11:c3:a2:3d:b5:6f:48:5b:26:14:
                    47:03:74:5d:2e:70:f1:6e:4e:83:89:68:2a:d2:c4:
                    19:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.44.0/22
                IPv6:
                  2804:53a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268597

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:94:58:32:94:03:49:c4:96:87:75:77:16:1c:3e:4a:68:
         28:3b:db:f0:2c:dc:e0:8b:d9:56:54:d8:c8:d1:19:0c:5a:44:
         53:bc:47:1f:c4:a5:fc:24:f8:fd:93:56:33:b3:13:31:72:ea:
         a2:41:03:1c:9e:7e:de:f9:14:50:60:13:76:f2:a4:87:cb:48:
         c6:5f:c2:79:f1:16:c6:0d:75:98:e6:42:bf:fa:1c:97:cf:40:
         9a:80:0a:89:78:b7:af:3f:6b:13:74:ca:9e:c1:1f:23:1c:ec:
         f7:b8:5e:8b:9d:88:8f:e7:67:f8:90:85:03:61:84:7e:40:fd:
         fa:ff:b1:79:a7:75:cd:d0:16:80:80:d2:7a:1b:19:8f:08:4b:
         1f:87:67:10:f5:f6:cc:08:4d:2d:3f:21:da:13:f0:11:22:65:
         31:7a:88:43:24:2e:4f:0d:8d:bb:4b:47:13:b3:70:22:96:2d:
         ef:e8:a4:78:fd:4d:2b:96:8e:b0:ab:5e:8d:c0:04:25:6a:91:
         16:65:cb:85:2d:ee:91:86:c5:1e:50:cf:b7:b6:a2:56:e8:4d:
         66:6d:74:de:db:50:48:e6:a5:76:e3:6f:b1:79:d8:96:9b:ca:
         b3:ef:1e:6c:79:92:8d:6e:c4:54:77:6e:2c:8b:d6:e8:8e:c2:
         06:6e:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 09:51:35 2024 by rpki-client on console-fra.rpki-client.org