Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.cer
File:                     0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.cer (raw, json)
Hash identifier:          WRsQ4shNBnIPtCqAUm2s1fcjFB+HvGSppDZtbVTFeA0=
Subject key identifier:   0B:A4:7C:DB:7D:95:14:82:27:92:E9:29:6E:9D:EB:81:CD:FC:B0:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B298FFC4279A12A26D39A2E6B5AA6C023BB9138
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jul 2024 18:06:16 +0000
Certificate not after:    Fri 04 Jul 2025 18:11:16 +0000
Subordinate resources:    AS: 267473
                          IP: 192.141.184.0/22
                          IP: 2804:4208::/32

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 13:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:8f:fc:42:79:a1:2a:26:d3:9a:2e:6b:5a:a6:c0:23:bb:91:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  5 18:06:16 2024 GMT
            Not After : Jul  4 18:11:16 2025 GMT
        Subject: CN=0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:55:7f:f5:85:46:cb:3d:d6:ca:fc:38:0a:
                    8c:98:51:73:97:33:de:78:73:96:b0:c8:02:0d:c6:
                    c0:4d:43:52:03:d2:e8:04:b0:10:8f:90:0f:63:9a:
                    13:0f:9f:b8:bf:fb:5d:fc:a2:ca:f7:68:0d:56:e1:
                    a5:fb:e1:f0:47:7a:6d:db:65:b9:68:d8:d6:47:8f:
                    ed:c4:ab:a5:cb:e1:23:0a:78:2a:58:8a:c9:b9:e8:
                    b9:76:2e:2d:1a:2c:a4:2a:43:87:8c:d5:62:92:19:
                    b7:4c:94:7a:8c:dd:d5:ae:54:1f:46:e5:6d:7e:43:
                    5d:45:d7:75:e0:6a:24:f3:db:68:d5:df:27:50:bd:
                    8d:a2:0d:46:95:c1:34:e1:1d:78:18:85:63:37:73:
                    ae:9a:f5:6c:a0:2d:6a:d0:05:4d:a8:e3:c6:72:e5:
                    5a:db:81:ce:31:09:5d:ac:c2:f8:33:5b:c3:97:3b:
                    3c:27:90:f0:ea:c1:43:f8:82:4b:6e:0c:8b:02:97:
                    37:88:11:96:0a:47:b2:ab:5c:d4:7c:98:d1:9c:96:
                    82:75:05:82:37:5c:6e:16:d3:ec:3a:5d:98:64:1c:
                    4c:ca:5b:91:ce:f7:4b:88:a2:65:8c:39:6a:62:29:
                    2a:62:8d:35:7c:d1:e6:80:d4:76:db:d3:27:54:06:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:A4:7C:DB:7D:95:14:82:27:92:E9:29:6E:9D:EB:81:CD:FC:B0:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.184.0/22
                IPv6:
                  2804:4208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267473

    Signature Algorithm: sha256WithRSAEncryption
         36:07:5d:22:93:3c:cd:e8:a1:20:4e:f6:f8:86:3e:57:a4:d4:
         e6:8a:0a:94:0a:3d:1f:6b:65:34:0a:34:e2:96:0d:ca:9f:b7:
         a2:0c:ad:10:07:38:a1:7e:20:d2:59:61:f5:ac:da:35:e5:65:
         c1:26:94:0f:dd:3d:31:50:4c:b3:9c:b4:e5:f8:33:63:64:62:
         f2:a5:27:26:ea:5f:8e:ef:04:d5:bb:2f:d1:43:41:55:4b:c3:
         1d:17:02:ed:88:92:b0:1e:a8:31:d7:fe:d8:2c:9e:61:43:2d:
         6e:f7:b7:49:c7:e4:0e:e5:55:c5:9e:cd:1a:4c:51:f0:b2:db:
         97:28:bd:c6:96:29:fb:ec:c6:97:70:b3:a1:18:f8:11:1c:d2:
         5e:fe:29:e6:ad:f5:11:fb:8f:33:0f:97:64:8e:b2:af:20:a2:
         fa:b6:be:47:ff:f1:22:6f:91:0f:54:03:84:28:48:15:8e:e4:
         2c:33:d8:98:66:6c:f2:5c:b2:90:79:04:1a:23:33:44:1d:3c:
         1e:10:f1:7f:7a:c4:79:65:70:2e:ee:70:67:b7:de:34:41:3c:
         8c:13:fc:71:eb:c1:4d:2a:a6:2a:83:c3:ec:6a:63:b5:32:28:
         ba:31:b2:47:c4:88:4d:a3:1f:3c:0d:eb:79:6d:90:da:ec:55:
         26:55:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 18:42:07 2024 by rpki-client on console-ams.rpki-client.org