Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28CB542702CFE330E20AB9139A8CC743D360ABD3.cer
File:                     28CB542702CFE330E20AB9139A8CC743D360ABD3.cer (raw, json)
Hash identifier:          KX/YD1y9fd6jgSXv4mkSR8CJxoj69SuA49hoOOJCJ6E=
Subject key identifier:   28:CB:54:27:02:CF:E3:30:E2:0A:B9:13:9A:8C:C7:43:D3:60:AB:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78EF6D06892D4A422EC8DE313C37DEE37C7E2437
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/28CB542702CFE330E20AB9139A8CC743D360ABD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 19:00:09 +0000
Certificate not after:    Mon 05 May 2025 19:05:09 +0000
Subordinate resources:    AS: 266376
                          IP: 170.80.112.0/22
                          IP: 2804:36d8::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 11:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ef:6d:06:89:2d:4a:42:2e:c8:de:31:3c:37:de:e3:7c:7e:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 19:00:09 2024 GMT
            Not After : May  5 19:05:09 2025 GMT
        Subject: CN=28CB542702CFE330E20AB9139A8CC743D360ABD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:29:81:6e:3e:67:4e:bc:70:a4:55:c9:24:
                    2a:74:0a:c8:9b:f8:41:77:9b:1a:e7:94:83:43:ce:
                    db:fb:bd:19:fa:ae:25:bd:3f:4b:ad:8c:fd:42:01:
                    b6:55:c9:de:f4:6a:90:b4:d2:df:56:65:c2:de:f4:
                    11:dc:d2:63:ad:8f:f0:db:4e:9e:1a:90:c6:4f:92:
                    94:d1:be:83:8a:ec:fd:e3:2d:de:45:8f:2e:d1:93:
                    d8:55:08:75:d4:48:cd:94:e3:51:51:0b:f0:b0:14:
                    6a:49:45:69:d7:00:a9:db:8c:4e:de:3a:51:a3:4f:
                    b2:77:04:d3:ad:7f:1a:68:ed:47:9d:ee:14:6e:0d:
                    50:eb:67:48:76:7c:de:b3:c0:34:e0:65:90:55:e2:
                    76:48:70:2a:90:6c:c7:cd:37:ed:3f:eb:f9:41:ce:
                    59:ad:46:46:c4:ff:e2:13:ab:0e:4f:e6:27:71:75:
                    9f:76:cd:f8:28:7e:33:61:66:47:8a:95:15:c9:ae:
                    fa:4a:9f:a4:8b:d3:ae:d1:0a:88:b6:fc:29:5f:6e:
                    5d:a3:10:42:ad:c0:14:7e:45:63:df:91:cb:91:a1:
                    e7:19:23:80:6a:ba:6a:9c:03:12:95:ff:84:bc:28:
                    49:b8:b2:6a:20:b6:b4:2b:58:b1:74:6c:8f:61:66:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:CB:54:27:02:CF:E3:30:E2:0A:B9:13:9A:8C:C7:43:D3:60:AB:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/28CB542702CFE330E20AB9139A8CC743D360ABD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22
                IPv6:
                  2804:36d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266376

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:58:7a:da:ee:c3:a0:00:e5:17:4f:7b:aa:4c:d0:2a:c3:
         15:27:7f:8a:89:35:c4:4c:a8:29:9b:6b:91:f9:4e:21:98:6d:
         24:a2:89:ff:bc:7b:79:00:b2:6a:81:c5:6c:ae:d6:72:12:42:
         71:f6:07:77:08:cc:10:00:b5:98:63:e1:33:33:f9:4e:6d:ff:
         43:42:64:88:e6:d1:ef:c6:dd:cc:5b:de:9b:fb:f2:de:9c:79:
         0d:cd:b6:db:c5:85:57:03:80:a7:52:8b:40:58:81:18:42:a8:
         64:03:53:5d:e5:af:a3:83:9e:7b:c2:30:45:b5:18:8c:4c:73:
         3b:f3:62:20:87:5f:c6:cf:ef:5a:ed:11:15:4e:5e:74:dd:80:
         1b:f8:1a:a3:ff:47:e0:a7:a3:c4:ea:81:d5:09:08:70:df:2f:
         2b:4a:30:8d:b9:6f:94:a1:88:f1:7d:e5:04:81:3e:26:3d:ff:
         fb:ff:e8:a8:8f:82:66:c4:73:69:a9:bb:7d:8c:0c:11:d3:dc:
         21:b4:70:93:b9:29:35:60:42:09:9f:99:28:eb:8b:e2:16:5b:
         7b:85:be:9f:62:a3:ea:cf:75:d6:0a:13:13:b7:dd:72:e6:65:
         e6:46:0c:c5:9a:c7:01:87:42:87:d2:fd:09:be:c0:f1:6e:e1:
         96:cb:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org