Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/26BA891A82008F4E2412DE950956BD0004DD3CA8.cer
File:                     26BA891A82008F4E2412DE950956BD0004DD3CA8.cer (raw, json)
Hash identifier:          BAFpZ63MqHaiOKvaQsthkBYn+52fd7/acrb6OXgHNPU=
Subject key identifier:   26:BA:89:1A:82:00:8F:4E:24:12:DE:95:09:56:BD:00:04:DD:3C:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BA28B1B60636A477A104B7C8B5A21E31240F7DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/1/26BA891A82008F4E2412DE950956BD0004DD3CA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:06 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:06 +0000
Subordinate resources:    AS: 264005
                          IP: 143.0.148.0/22
                          IP: 168.194.48.0/22
                          IP: 2804:293c::/32

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 23:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a2:8b:1b:60:63:6a:47:7a:10:4b:7c:8b:5a:21:e3:12:40:f7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:06 2024 GMT
            Not After : Apr  2 18:30:06 2025 GMT
        Subject: CN=26BA891A82008F4E2412DE950956BD0004DD3CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:5a:c9:5a:d2:e3:e7:d0:91:e9:b0:d5:bf:
                    8c:0b:66:a5:94:73:31:17:8f:d4:3f:ce:d6:87:57:
                    38:68:07:4e:02:bf:ec:7b:8f:72:0d:61:09:16:7e:
                    de:49:ee:b5:8b:7b:f9:31:fb:d3:bf:54:6f:21:f3:
                    b3:bd:45:fa:0b:09:0d:bb:44:c3:e3:0e:d1:34:12:
                    f4:c7:7c:7a:22:81:a7:13:1d:73:4e:dd:2a:10:b4:
                    7b:1b:70:a9:3a:f0:36:bd:98:00:c5:c6:15:c5:00:
                    4b:15:15:0c:62:fc:d6:5c:0c:55:b7:df:22:45:9c:
                    d5:d1:1a:0c:7e:d2:dc:53:80:77:62:c1:02:c6:68:
                    1f:d1:79:4e:c2:e5:7f:1e:84:9c:ab:b4:cb:cd:a7:
                    0f:86:5e:5e:5f:54:d5:83:6c:d1:99:15:b7:0a:19:
                    95:c2:e6:94:16:40:24:6f:3c:d0:08:f8:a9:5c:dc:
                    b5:cf:11:b3:89:be:0c:9e:b3:90:f6:d2:d0:88:3e:
                    12:5c:9c:88:7c:cd:9c:14:0e:f1:84:25:74:51:07:
                    99:b5:ab:9c:63:c4:d3:6c:71:76:c6:58:b1:96:cd:
                    08:1b:cf:e2:65:1a:40:42:00:06:72:12:fe:3e:7d:
                    40:6d:9e:d4:98:69:cb:72:de:87:09:83:d8:44:4c:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:BA:89:1A:82:00:8F:4E:24:12:DE:95:09:56:BD:00:04:DD:3C:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/1/26BA891A82008F4E2412DE950956BD0004DD3CA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.148.0/22
                  168.194.48.0/22
                IPv6:
                  2804:293c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264005

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:e4:ff:73:ad:9c:f5:9f:cb:60:28:95:01:80:e0:2b:0d:
         1e:09:04:be:82:d7:7b:e1:5d:2a:f0:5a:69:16:97:7f:24:21:
         56:92:fb:db:50:d1:b3:ce:64:95:25:09:b4:17:f2:4d:74:ad:
         eb:de:7c:0c:53:5e:85:7e:33:f9:54:b5:76:34:ab:5f:a4:20:
         f3:a9:f8:c3:b8:8d:bb:de:4d:56:36:83:b7:8f:d8:47:dd:ea:
         72:a0:8a:fa:6e:84:44:70:9c:03:66:c2:bb:a4:86:0b:e4:d1:
         1a:ef:ad:aa:2b:54:21:cb:00:31:d1:80:87:c2:ff:7c:6b:80:
         37:4f:a2:ab:5d:7c:34:fe:42:55:95:54:fd:8a:ba:38:b3:fb:
         8a:16:48:9e:45:8c:9e:46:92:0f:ae:0d:e0:62:c2:11:b3:b7:
         4b:51:51:a7:8d:32:d7:03:1e:64:48:c0:d0:6d:4b:c5:3e:e5:
         9a:78:b1:19:0e:49:de:f6:93:42:d7:78:e0:85:de:53:6e:57:
         c7:8b:c2:d3:b7:88:6d:17:9b:ff:54:fb:0f:dd:f9:78:fa:2a:
         7b:41:9d:50:42:6e:96:73:1c:da:ab:f8:22:66:d6:b6:4a:7d:
         9a:ef:6d:0c:58:52:7e:79:ff:47:79:ae:d3:1b:de:3a:f3:03:
         79:0e:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 02:39:20 2024 by rpki-client on console-fra.rpki-client.org