Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer
File:                     0F1137C27E661ED0B131846131EE7EB20F7A2385.cer (raw, json)
Hash identifier:          G9AWJ3OclSH0sx8RJPkikcP2Fe+7E3WtctoWtFJEPvo=
Subject key identifier:   0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4AB1C2990AC5DEE9662E5359BAABE845ADEF59FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 00:06:03 +0000
Certificate not after:    Fri 04 Apr 2025 00:11:03 +0000
Subordinate resources:    AS: 268053
                          IP: 45.167.60.0/22
                          IP: 2804:573c::/32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 11:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b1:c2:99:0a:c5:de:e9:66:2e:53:59:ba:ab:e8:45:ad:ef:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 00:06:03 2024 GMT
            Not After : Apr  4 00:11:03 2025 GMT
        Subject: CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:3b:c7:1e:9d:dd:3b:73:17:5a:da:38:e0:
                    77:aa:04:fe:0c:1e:fb:30:7b:5a:51:d1:bd:56:57:
                    01:25:2f:36:82:21:c1:e7:32:15:58:0b:06:de:77:
                    af:3e:b7:ce:2d:ad:4b:18:b9:23:c1:ad:7b:ae:2c:
                    0f:bb:be:55:0e:26:c7:d3:56:45:ad:22:a1:67:7c:
                    4f:6a:16:21:64:f5:bc:d6:65:fd:ca:d3:89:90:0a:
                    45:00:2c:49:80:88:e2:b2:ca:a0:bb:a7:48:74:2e:
                    a2:c8:a2:03:d6:f6:9a:d5:a8:60:12:14:e7:1a:59:
                    4f:71:43:f1:e2:54:2b:a9:ba:26:b9:f0:d1:85:4a:
                    55:48:e2:48:91:e9:3b:33:c0:de:3c:6a:aa:0d:e0:
                    b2:61:bb:e9:d8:07:37:86:6a:16:bc:45:37:db:5d:
                    d7:d4:2b:19:5b:3b:31:f8:41:f7:59:72:62:e5:b8:
                    87:1d:d7:af:33:e6:87:fd:56:f7:d7:75:86:3e:f2:
                    6f:31:c8:f3:31:8d:a5:00:18:a5:df:27:8a:d7:48:
                    ca:77:94:68:09:5f:53:54:bc:07:23:0f:21:10:2b:
                    a0:e0:93:10:b0:7e:da:85:f8:b0:84:6c:64:be:41:
                    2a:58:f7:30:41:19:7d:87:e5:25:57:1a:38:df:7f:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/22
                IPv6:
                  2804:573c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268053

    Signature Algorithm: sha256WithRSAEncryption
         5e:df:6e:fd:0c:d0:ac:59:85:b3:9d:54:4d:ca:1e:c5:aa:7b:
         61:d6:a4:de:68:9d:43:56:82:60:48:b9:f7:b4:75:7a:0c:8d:
         63:ff:f0:16:29:18:a3:3a:0e:6c:8e:ce:31:0c:b1:f3:b3:72:
         2c:b8:22:02:a4:5c:18:6c:29:78:bc:67:b5:5b:8f:ca:8b:b6:
         f5:a7:22:82:aa:33:41:a7:92:41:10:48:61:d4:48:f0:d6:72:
         8f:47:a6:9d:bb:a7:3a:21:37:9e:93:6a:ff:4e:76:5d:08:8c:
         6e:30:a6:bd:c8:38:9b:e4:ee:f8:e8:fb:63:a6:f8:5c:5d:5f:
         b6:aa:1d:c2:e1:25:49:cf:08:0e:c1:2e:da:db:8c:a3:c2:43:
         e5:7b:47:99:d6:b0:05:cc:1b:56:63:38:67:7e:ff:f9:67:04:
         25:37:71:b3:50:b2:83:5a:2c:b3:d3:78:27:92:ab:17:58:fc:
         27:19:db:fa:e2:74:dc:ec:c3:b5:8b:27:ad:36:69:66:30:fb:
         44:c7:a5:e1:fa:73:83:f8:a6:95:d0:99:bf:bd:38:ae:d0:21:
         6a:02:f4:18:f3:fd:8a:52:c3:3f:cd:36:e9:1a:bb:5c:72:76:
         92:4c:8c:82:c8:d9:71:43:ad:1b:f9:03:c1:20:78:a5:c8:d4:
         87:6a:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:25 2024 by rpki-client on console-fra.rpki-client.org