Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.cer
File:                     0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.cer (raw, json)
Hash identifier:          eodUpz4Vzfhad5LuLNvPC6M1XBLVoYlHJXyxw0TjL4Y=
Subject key identifier:   0C:21:32:3E:3C:8F:28:01:0E:75:A1:EF:FD:E7:8D:6E:8A:98:0B:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       613C8699558D2BA32B4F5D7993571569523B1215
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 May 2024 19:51:43 +0000
Certificate not after:    Tue 13 May 2025 19:56:43 +0000
Subordinate resources:    AS: 268080
                          IP: 45.169.4.0/22
                          IP: 2804:57b0::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 23:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3c:86:99:55:8d:2b:a3:2b:4f:5d:79:93:57:15:69:52:3b:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 14 19:51:43 2024 GMT
            Not After : May 13 19:56:43 2025 GMT
        Subject: CN=0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6f:e5:97:9d:7a:d4:bc:d6:25:b1:34:b0:df:
                    76:24:a2:3a:8a:d0:36:7d:fb:25:f7:69:0b:bb:a2:
                    d0:f7:c6:a1:2b:b5:30:e1:4a:3d:fc:07:02:98:ab:
                    fa:ab:c9:d2:d2:ab:e2:cd:0a:a3:8c:df:52:9d:b3:
                    e3:4a:c6:62:08:1f:e7:fa:70:f3:bf:c5:6a:fe:0f:
                    e9:88:57:a6:8f:2e:76:7e:3e:38:16:75:bf:d9:3e:
                    a9:95:83:37:69:0e:f3:53:4e:10:d8:e5:ab:f0:37:
                    7b:f9:ce:82:0a:44:f8:45:0d:d1:ec:a0:1a:a5:b0:
                    a9:7c:54:46:30:e6:e7:b4:ef:59:3d:61:e3:6e:04:
                    59:db:b8:c7:2c:17:d2:c0:03:bd:e5:58:e5:51:b6:
                    7d:2b:73:f4:9b:f1:75:03:cd:21:d7:01:f5:fc:83:
                    43:3b:cf:8e:33:91:a6:96:17:dc:c8:05:0f:26:8c:
                    4b:d3:51:6e:8d:20:d0:a4:eb:68:5c:7e:02:de:ee:
                    47:f6:40:a0:95:72:20:be:64:dc:ea:6a:1a:ec:2c:
                    01:f2:3c:4e:05:7d:45:58:91:d2:9b:fa:f9:01:bd:
                    50:68:3a:6b:17:b9:e4:2e:94:24:a3:74:f0:28:8b:
                    ac:5e:aa:e2:a0:fc:8a:7a:eb:94:11:67:4f:46:b5:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:21:32:3E:3C:8F:28:01:0E:75:A1:EF:FD:E7:8D:6E:8A:98:0B:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/0C21323E3C8F28010E75A1EFFDE78D6E8A980BCD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/22
                IPv6:
                  2804:57b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268080

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:ab:bb:8c:57:4a:57:ed:b5:e0:f1:b1:d6:c1:e0:3e:66:
         f3:25:73:2d:62:a2:dd:19:75:ca:7d:3f:6a:9d:d9:4c:86:93:
         20:3d:74:15:34:1d:63:73:ad:85:a5:91:7e:67:31:2d:90:73:
         73:10:6e:f1:00:c3:e8:3f:ff:09:c7:7b:c6:56:b9:12:43:e3:
         5a:32:26:83:84:c9:6c:7d:61:b6:d6:7b:ad:19:4b:b6:af:33:
         1d:87:9f:04:df:4c:ef:ac:db:37:fe:6a:24:75:31:ee:8b:59:
         39:16:d6:66:17:fb:03:5d:8d:f4:25:25:36:2d:bf:ed:b1:bd:
         4b:9d:0a:f5:66:9e:b6:b0:c4:f0:a3:88:84:75:79:39:f8:86:
         ff:0b:96:7d:8a:dc:72:fb:21:b0:33:4f:73:fe:30:fa:ae:5e:
         4a:94:b0:99:bb:68:73:19:05:dc:19:ac:c1:26:d4:97:6a:d0:
         dd:0c:70:3a:5f:0b:a6:17:e4:03:d7:df:e8:78:8f:32:49:87:
         fb:e7:ab:b5:f8:1b:13:e5:ef:6f:74:59:b0:f2:a0:1e:38:a2:
         a6:e4:dd:61:8b:cf:b0:28:f5:ce:52:c6:99:b0:d1:08:9e:6f:
         d3:f2:65:cc:5c:fc:51:49:9d:1d:a8:2e:d1:e7:1a:df:48:7c:
         b3:55:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org