Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
File:                     0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer (raw, json)
Hash identifier:          sZbZGgkKo/u1F0AWNFTzbGnXBmpJtbMqFc9T+rNvIjY=
Subject key identifier:   0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0499FD92DFC634BCD32F8726A6B772D1A493C20C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:28:51 +0000
Certificate not after:    Thu 03 Apr 2025 16:33:51 +0000
Subordinate resources:    AS: 267540
                          IP: 201.182.216.0/22
                          IP: 2804:42f8::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:99:fd:92:df:c6:34:bc:d3:2f:87:26:a6:b7:72:d1:a4:93:c2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:28:51 2024 GMT
            Not After : Apr  3 16:33:51 2025 GMT
        Subject: CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:81:b0:3d:75:b6:30:c0:62:75:b3:7f:3e:
                    00:b2:ea:02:3d:db:92:1f:06:3c:db:9e:01:3c:7a:
                    cb:c0:1a:d7:08:9a:aa:fe:4d:41:50:fe:97:7e:f5:
                    f9:f9:05:f1:26:0e:9b:41:e4:94:a4:71:4f:54:fc:
                    12:8c:73:c1:c2:0a:d0:cb:d3:0d:dd:3a:9b:3e:b7:
                    3b:81:91:b9:a4:89:ab:d9:78:a8:1b:b5:0f:b5:38:
                    88:a6:79:2f:68:70:9f:ef:3a:18:e4:b0:ea:09:1f:
                    ec:e8:f4:04:18:f0:ce:d1:eb:70:bc:44:f4:08:38:
                    b5:00:3d:ba:34:b6:0b:80:8f:07:d3:cd:39:01:2f:
                    24:cc:91:55:ee:38:4d:40:05:34:b1:7e:2e:6e:66:
                    75:88:a4:f6:a8:77:ae:ee:83:21:0b:71:de:ab:7f:
                    3b:8b:65:61:f8:7b:fd:57:aa:ef:52:aa:10:ab:09:
                    7f:e6:ac:90:f6:08:7d:65:48:5d:16:bf:23:81:db:
                    c7:aa:6b:d6:6d:79:92:9a:73:df:46:c3:1b:2f:95:
                    5a:d9:00:f0:3d:fd:71:83:09:f5:ae:94:c1:e3:de:
                    e6:6b:86:f3:df:ea:58:8e:61:06:a9:3e:a4:8a:d7:
                    8f:0f:d3:35:6a:99:ee:93:53:ef:a6:56:78:b8:14:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.216.0/22
                IPv6:
                  2804:42f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267540

    Signature Algorithm: sha256WithRSAEncryption
         d4:a8:5a:00:fb:65:45:bd:6d:c0:e9:e2:03:76:11:ae:1a:06:
         55:1a:3f:5e:d7:c0:0c:f5:01:36:9b:ea:aa:01:4b:93:2b:43:
         ef:64:a2:74:8b:9d:db:40:d9:7c:08:9a:87:57:5d:99:5e:02:
         e8:27:dd:44:fc:93:e8:c7:a2:bd:c4:09:a9:f1:ed:48:4e:d9:
         94:da:ca:59:c5:f0:f6:40:c3:93:5d:d3:93:97:3a:fd:a6:d6:
         f9:7b:2f:42:59:7e:b6:b0:47:f6:99:fa:c1:00:fd:af:26:76:
         b5:18:43:9e:e4:e0:27:4e:fe:eb:de:ef:56:cc:c3:3e:c1:db:
         3c:7c:cc:84:c5:cd:4b:5a:b6:91:82:9c:ba:ed:4d:4e:e2:89:
         23:26:28:d8:7d:da:46:f1:b5:90:6f:f6:51:1d:79:2e:93:96:
         c2:64:f0:8c:55:56:4e:f1:31:83:6a:f4:58:84:4e:21:0b:be:
         8f:c4:28:3a:0a:68:18:97:e6:96:2a:20:5a:39:5c:db:26:cd:
         74:8d:23:3e:08:55:21:44:e4:32:dd:e7:f3:40:19:7e:92:21:
         90:5c:ff:f4:45:a6:55:33:0f:98:d6:77:5b:6d:06:65:92:62:
         fe:d8:f4:d9:b2:d5:85:56:34:f9:bf:ef:d9:7b:34:24:d7:5b:
         a3:74:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 09:06:52 2024 by rpki-client on console-ams.rpki-client.org