Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer
File:                     26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer (raw, json)
Hash identifier:          Lk9bo0xSydOTUENA5U7h2DHmP/wTDZ0LEPteuDgfXcQ=
Subject key identifier:   26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48424C24FAC572EB2BD72A0D3E79FB920DFDB321
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:39:28 +0000
Certificate not after:    Wed 02 Apr 2025 18:44:28 +0000
Subordinate resources:    AS: 269712
                          IP: 190.112.156.0/22
                          IP: 2804:68bc::/32

Validation:               Failed, certificate revoked on Sun 19 May 2024 14:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:42:4c:24:fa:c5:72:eb:2b:d7:2a:0d:3e:79:fb:92:0d:fd:b3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:39:28 2024 GMT
            Not After : Apr  2 18:44:28 2025 GMT
        Subject: CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:ba:79:93:a1:1d:e6:a1:2a:63:3d:52:f9:
                    9e:84:c7:ba:52:13:03:dc:7b:0a:48:cc:7e:d8:be:
                    e3:a4:5c:f7:2d:8f:ee:4e:0e:7c:37:e4:51:f8:ab:
                    65:0b:7f:07:3d:93:ad:27:51:51:e9:e3:85:1f:f8:
                    b1:14:70:be:8e:04:81:bb:d7:d3:d3:76:18:bc:d9:
                    9c:6e:c3:77:64:d5:73:43:fa:fd:89:56:19:7b:6e:
                    ad:60:01:ec:26:9e:71:76:3e:e7:f5:f7:4d:60:ba:
                    88:51:a0:ea:d3:a7:9e:8b:1f:b4:64:89:d4:63:d4:
                    a4:d3:ef:38:d8:47:ee:59:53:31:2a:c3:16:75:30:
                    ee:b4:ae:b0:54:5a:45:f1:5d:24:7e:28:84:d9:b0:
                    75:12:a2:98:21:73:00:5b:31:78:a2:2c:82:76:26:
                    6f:1b:f5:7a:f1:2f:f6:8a:f7:e5:fe:0f:36:6f:2e:
                    79:31:94:36:90:5d:ef:10:82:f5:d5:8c:2c:69:74:
                    25:39:e8:d8:36:98:56:82:a2:2c:c2:eb:08:fc:c7:
                    26:5b:37:2b:84:4a:b5:c8:6a:dd:63:f1:dc:c5:8e:
                    bd:d1:3e:c3:4c:6a:8d:6d:38:81:d1:11:90:d4:b0:
                    17:b3:ef:5b:03:83:84:b2:18:9c:e9:90:69:9e:ea:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/22
                IPv6:
                  2804:68bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269712

    Signature Algorithm: sha256WithRSAEncryption
         35:77:57:ab:91:f0:57:2b:12:bd:e4:08:e7:5d:51:5a:86:07:
         b8:4a:e5:90:92:20:e1:f4:d8:54:64:34:6d:89:6a:16:77:ad:
         84:80:62:86:2c:43:b7:8e:4f:61:32:bf:42:42:2f:29:7a:29:
         ae:9e:aa:44:bb:72:a5:dc:65:12:f4:06:55:95:d1:f5:4e:fa:
         6d:5c:84:86:6d:b6:da:2d:1c:c3:bd:d1:2d:1b:e1:c8:c7:92:
         78:1e:88:86:c6:88:04:38:fa:70:af:55:7c:e2:01:0c:dc:f4:
         4d:25:44:c4:28:59:c0:75:42:fe:f0:cd:e1:56:90:d1:e2:3a:
         79:bd:69:1c:69:4e:85:ca:4f:85:ff:df:c1:75:12:32:4c:87:
         58:6a:1b:ed:ea:df:6c:ee:b6:fb:7c:1d:26:16:7c:fd:be:33:
         a5:2f:ad:27:c6:95:6b:2b:1d:57:62:15:ac:b7:59:79:77:f6:
         6a:d9:03:e0:4a:16:82:cb:75:e5:c5:a7:62:b7:72:01:d3:34:
         1a:a0:0c:3a:67:fb:c9:48:1c:29:3c:e5:72:6c:9c:de:4d:30:
         60:28:73:b3:bb:7e:d3:81:1e:77:87:87:76:86:e9:1c:e7:b8:
         37:e4:97:72:d9:8d:3f:ae:0f:08:3e:fe:61:0e:ac:2e:37:45:
         80:e2:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org