Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/26DD24449D370E7F778306DEEE21D278E001677A.cer
File:                     26DD24449D370E7F778306DEEE21D278E001677A.cer (raw, json)
Hash identifier:          Ly/Pj5KLkKKIEWUebA3XIP6AEbUU5xoa/M983clqjsw=
Subject key identifier:   26:DD:24:44:9D:37:0E:7F:77:83:06:DE:EE:21:D2:78:E0:01:67:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C25A34D9D39938E3D8303EC5D7E14E2E2FC41CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/1/26DD24449D370E7F778306DEEE21D278E001677A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:59:52 +0000
Certificate not after:    Wed 02 Apr 2025 19:04:52 +0000
Subordinate resources:    AS: 269115
                          IP: 45.178.240.0/23
                          IP: 2804:5fa8::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:25:a3:4d:9d:39:93:8e:3d:83:03:ec:5d:7e:14:e2:e2:fc:41:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:59:52 2024 GMT
            Not After : Apr  2 19:04:52 2025 GMT
        Subject: CN=26DD24449D370E7F778306DEEE21D278E001677A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:47:66:1c:f1:f4:30:5b:24:3c:5d:83:9c:
                    b2:99:4b:db:d6:4f:7e:f6:4d:d0:8a:66:a8:10:ae:
                    72:43:5c:0b:a8:7c:31:42:b3:09:28:5e:2b:fa:18:
                    f8:0c:7c:13:f0:75:62:81:7e:80:b5:44:45:c0:43:
                    01:e5:61:49:34:b1:44:b5:67:2c:a6:2b:88:1d:2a:
                    40:83:7a:c0:7e:7f:d3:44:97:17:c1:1c:22:cb:34:
                    6c:95:77:99:e9:fd:fe:ec:38:21:29:40:78:67:d7:
                    57:2d:81:b5:d3:f3:ec:0e:80:06:56:23:80:45:c8:
                    9b:8a:b5:9a:35:cb:70:e3:3c:8b:d7:9b:38:25:87:
                    ec:6d:d1:00:d8:88:a6:1c:22:df:b3:8a:2d:04:39:
                    f4:79:56:7d:8e:6d:53:db:ca:d1:b7:6b:cf:6f:ed:
                    e2:7a:a9:a3:2e:b6:f1:97:4a:d3:7f:32:cc:24:39:
                    e9:e2:d3:d7:3d:4c:b7:23:27:ae:31:6f:04:bb:c0:
                    e4:f8:12:c5:d5:4d:26:b9:33:f0:05:64:64:29:f4:
                    a1:bd:98:a5:5e:d2:a5:86:35:7e:51:f1:06:72:d0:
                    06:74:53:c8:5b:17:d2:44:94:88:c5:04:31:6b:2d:
                    ef:b7:03:cb:cf:cd:e2:df:40:df:e0:e7:51:f5:07:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:DD:24:44:9D:37:0E:7F:77:83:06:DE:EE:21:D2:78:E0:01:67:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/1/26DD24449D370E7F778306DEEE21D278E001677A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.240.0/23
                IPv6:
                  2804:5fa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269115

    Signature Algorithm: sha256WithRSAEncryption
         d4:70:60:6f:99:41:06:0d:6c:fb:a6:23:96:81:94:55:5f:82:
         e3:af:00:4c:c3:bf:27:66:57:c1:62:19:d1:2d:0c:7e:81:4d:
         6b:e5:0d:77:fd:4b:ab:81:87:4a:d4:64:2e:65:f3:07:d4:46:
         0b:10:f9:e7:cf:a8:a8:38:48:77:07:5a:28:8e:1c:b9:71:99:
         38:bf:c0:34:21:6c:d4:d3:7c:20:5e:da:4f:f4:06:92:5c:48:
         ef:11:71:a5:2d:8d:67:d1:8e:86:4b:ac:af:a2:07:c3:b9:ac:
         74:a9:9b:08:14:08:9c:77:62:a1:13:da:0e:db:6a:8c:0a:d2:
         06:99:71:fa:20:15:4f:0d:8b:f6:ec:b8:15:f0:55:cb:c5:21:
         bc:5c:a6:dc:ad:dd:70:0a:42:47:39:6b:0a:08:29:8e:5a:40:
         b3:e1:04:b2:dd:07:dc:64:10:57:9d:2e:c0:15:9b:ac:01:57:
         80:69:41:a2:ce:9e:46:ad:db:ac:64:66:1e:50:92:26:86:6a:
         69:a5:dc:f5:fa:d4:a3:f6:04:c1:f9:d5:d9:eb:4a:c0:e7:b4:
         6f:70:b8:8f:b1:eb:25:4a:5b:6a:85:8e:71:d3:c2:14:8a:89:
         11:72:fb:43:77:af:98:fc:32:4e:49:c2:a4:5f:3b:86:54:bd:
         b5:a5:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org