Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27257FAB056E557C3D901BADAFD4FF6D497E033E.cer
File:                     27257FAB056E557C3D901BADAFD4FF6D497E033E.cer (raw, json)
Hash identifier:          3BNSUubbJAN1XKXWMUyLlH1Bqmm322gAQKZT/E8dEUc=
Subject key identifier:   27:25:7F:AB:05:6E:55:7C:3D:90:1B:AD:AF:D4:FF:6D:49:7E:03:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11CE8E9756DB641EEE19E5CD9345AA1B5C2EAD83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/1/27257FAB056E557C3D901BADAFD4FF6D497E033E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jun 2024 13:48:38 +0000
Certificate not after:    Sat 21 Jun 2025 13:53:38 +0000
Subordinate resources:    AS: 270984
                          IP: 131.221.140.0/22
                          IP: 2804:747c::/32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 14:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ce:8e:97:56:db:64:1e:ee:19:e5:cd:93:45:aa:1b:5c:2e:ad:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 22 13:48:38 2024 GMT
            Not After : Jun 21 13:53:38 2025 GMT
        Subject: CN=27257FAB056E557C3D901BADAFD4FF6D497E033E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:71:44:d7:85:9e:7c:42:1e:47:09:72:49:
                    25:4f:b3:a0:9e:4d:a3:48:a4:45:26:c5:06:d6:18:
                    e6:1a:ea:b1:5a:65:66:1b:f6:f4:6d:56:d2:c1:6c:
                    12:3c:fa:b3:ad:3c:31:8f:f6:d1:00:c4:97:10:92:
                    81:74:3a:47:ba:6a:b8:85:e3:23:27:c8:9b:8f:cb:
                    51:62:83:94:d2:03:58:8b:e9:2a:de:95:41:38:ad:
                    70:24:8d:2a:97:66:46:c6:49:6a:96:62:b4:86:61:
                    dc:7c:70:4c:41:42:e6:29:79:46:1c:bb:c2:eb:5f:
                    1c:c3:57:9a:0c:1b:e2:52:60:f9:f6:60:4e:42:e3:
                    64:f4:41:60:56:d6:9b:36:ed:8f:40:ae:8a:d3:29:
                    c1:da:ac:ef:e4:16:c9:ac:69:a8:84:c8:d3:75:89:
                    d0:7d:c3:6b:6f:43:41:d5:1b:7a:76:ad:a0:f3:97:
                    b6:6b:74:8b:64:e4:e4:b1:93:0a:19:93:81:87:b1:
                    1c:37:bc:75:af:ec:9e:02:18:1f:2c:93:43:15:16:
                    36:c3:93:54:5f:c6:f5:6d:cc:20:68:db:c3:fe:57:
                    91:71:17:73:0c:73:45:98:e5:18:3b:89:7a:11:00:
                    b0:1d:a9:c2:96:2f:cd:fa:6e:4c:7b:3a:71:38:c9:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:25:7F:AB:05:6E:55:7C:3D:90:1B:AD:AF:D4:FF:6D:49:7E:03:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/1/27257FAB056E557C3D901BADAFD4FF6D497E033E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.140.0/22
                IPv6:
                  2804:747c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270984

    Signature Algorithm: sha256WithRSAEncryption
         c4:24:e3:25:85:02:dd:38:8b:47:b1:c9:51:21:00:8f:db:86:
         fe:e0:3c:9f:d4:c7:42:49:72:87:fc:5e:3f:20:3a:7d:2c:29:
         30:00:f8:4b:95:2c:22:d1:06:6f:09:c4:de:52:df:ce:06:c2:
         8d:05:8e:11:ec:5c:59:89:c5:74:b0:dc:1c:b4:b4:07:55:55:
         6a:c2:1d:80:63:f9:26:22:a1:9e:70:7b:e7:84:9b:cc:7f:6b:
         f9:fa:b0:16:93:f4:8e:c9:89:14:48:57:cc:bd:fc:8e:7e:10:
         24:b7:04:b4:7f:49:5a:12:bf:05:4d:7d:fa:f4:8b:ac:9b:91:
         0c:d0:da:14:60:22:31:e0:dd:1c:af:2e:f7:11:b1:9d:81:8e:
         38:f4:f4:ec:21:47:d7:e6:47:9a:0c:58:c6:8a:15:45:e5:73:
         53:ab:c8:6e:e6:bc:a2:b0:e1:bb:dd:78:b0:83:3c:53:76:75:
         a6:43:c7:9a:98:e1:6e:93:74:82:1b:f3:17:c1:1c:e3:db:85:
         9e:43:65:88:0c:13:e0:de:b1:53:98:4e:03:6d:0c:a5:05:8a:
         cb:b8:08:77:56:7e:93:98:19:43:e6:ea:3e:a4:fc:23:42:b2:
         06:17:09:d7:68:6d:7b:40:3d:4f:74:ce:d1:33:08:57:a2:4c:
         9d:ec:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 20:23:53 2024 by rpki-client on console-ams.rpki-client.org