Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
File:                     16B9C582730C28B297957612533E707E2A6E6990.cer (raw, json)
Hash identifier:          0wtao58mm1zgk3/M6+r8gPw5/Tp2p/thymg4SyckAAg=
Subject key identifier:   16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C2D55C232BE3E980CBDDD893D5919454ECFF649
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 01:04:44 +0000
Certificate not after:    Fri 04 Apr 2025 01:09:44 +0000
Subordinate resources:    AS: 28182
                          IP: 170.231.128.0/21
                          IP: 189.89.0.0/20
                          IP: 2001:1294::/32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 11:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:55:c2:32:be:3e:98:0c:bd:dd:89:3d:59:19:45:4e:cf:f6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 01:04:44 2024 GMT
            Not After : Apr  4 01:09:44 2025 GMT
        Subject: CN=16B9C582730C28B297957612533E707E2A6E6990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:60:15:95:66:89:f4:fa:e4:f9:d1:77:39:
                    4d:4b:3a:9b:47:eb:d6:20:28:20:d2:a3:ac:29:4f:
                    c8:2f:e1:f4:6c:ff:c0:b3:8b:7a:c8:7c:cb:5b:ca:
                    7e:57:1b:2f:38:f8:f8:2e:6f:68:03:5a:1e:8c:36:
                    ca:fa:6a:a2:90:34:55:81:96:c1:55:51:1e:1d:d8:
                    e3:7b:84:41:00:bc:34:7c:9e:ef:5c:18:32:7c:e5:
                    8b:a5:2d:da:92:4a:5c:92:7a:7c:af:69:4b:9b:e9:
                    be:40:a8:ef:d0:75:da:ab:eb:cc:61:68:ff:bd:e9:
                    44:b1:24:01:45:bd:63:f5:7a:e0:74:69:c2:8e:3c:
                    27:dc:8e:b1:87:36:77:82:f2:53:98:d1:89:4b:3f:
                    7e:30:55:e2:29:02:bd:67:31:12:50:b8:1f:f1:cb:
                    44:1c:2c:13:bd:7e:2d:1a:5e:39:17:f4:55:39:dc:
                    54:42:dc:3f:be:c1:8e:a5:43:91:ec:fb:e4:6b:5a:
                    16:a5:cc:b5:30:21:df:6f:25:e9:9f:ef:ee:51:12:
                    a6:9d:c5:76:29:79:c6:9e:37:fd:ea:90:c0:ac:13:
                    9c:28:d8:8e:71:51:c5:5b:81:cf:9b:44:61:4a:29:
                    95:3d:9b:53:cb:2e:21:30:5b:72:2d:54:70:ba:bb:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/21
                  189.89.0.0/20
                IPv6:
                  2001:1294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28182

    Signature Algorithm: sha256WithRSAEncryption
         be:9a:dd:b8:23:da:e1:78:6b:57:68:7c:b7:8a:e4:0c:e9:c2:
         78:4b:bd:4c:35:24:a9:a7:54:19:91:29:18:76:20:f3:87:2c:
         e6:01:a9:f0:79:d8:2b:d0:c2:15:de:68:0b:c4:6c:27:5e:1a:
         a6:86:bd:c9:ac:2b:b7:bf:72:60:ce:65:1d:d0:41:63:78:54:
         a9:dd:14:3e:33:fe:20:6d:9f:aa:a8:80:b6:b8:16:00:ac:b8:
         29:f3:85:11:11:3c:53:27:31:60:42:98:1d:0b:a3:58:a2:bc:
         b5:6e:a1:da:0a:60:5d:f6:81:66:96:62:da:5f:fc:b4:2c:89:
         40:e6:67:f8:1f:fd:d9:e4:c2:6d:a1:18:4e:94:80:e8:42:00:
         ae:90:05:b1:a4:b4:f0:46:9e:71:5a:ef:1e:d9:bb:7c:c9:ae:
         20:cf:0b:58:19:29:fb:d5:20:6d:e4:e4:66:d5:b2:3d:00:bc:
         52:ec:4e:18:0e:90:ea:d6:72:09:df:fa:9e:52:93:9d:71:71:
         84:f9:84:39:fe:73:03:3c:06:2b:ee:03:13:dc:ca:03:e7:96:
         ff:12:94:6c:41:96:ef:b7:0f:70:f4:05:e6:54:6e:28:16:6a:
         3f:91:7c:d0:4c:8b:0e:a4:f5:21:11:31:38:e0:1f:df:e5:ff:
         c4:81:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org