Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer
File:                     29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer (raw, json)
Hash identifier:          u/HRgdiR0Z/KLM/nKATLVMMLTT/eCi35egNxEPdXJx0=
Subject key identifier:   29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AA90154D200FCF63EC13ADFF6941B5518FA18EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:45:10 +0000
Certificate not after:    Thu 03 Apr 2025 08:50:10 +0000
Subordinate resources:    AS: 262801
                          IP: 186.250.0.0/21
                          IP: 187.17.48.0/20
                          IP: 2804:244::/32

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 08:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a9:01:54:d2:00:fc:f6:3e:c1:3a:df:f6:94:1b:55:18:fa:18:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:45:10 2024 GMT
            Not After : Apr  3 08:50:10 2025 GMT
        Subject: CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:0c:48:9d:ff:48:1c:c0:42:ae:80:f7:72:
                    ae:f9:ef:65:6c:63:c1:21:ab:5c:aa:e0:d1:a1:81:
                    76:9d:9d:e8:9a:54:02:d0:6b:23:90:ab:90:8e:f5:
                    bb:bd:4c:93:4a:65:d0:98:d8:45:f5:87:09:a2:63:
                    43:13:2c:40:9c:48:86:68:52:36:78:ae:03:3a:72:
                    fa:87:26:e8:3b:e5:34:c2:89:de:a7:27:ef:f2:60:
                    ac:dc:61:5d:c1:ab:f1:de:01:1c:cb:2a:7c:c5:f1:
                    ca:b5:f8:c2:84:52:fe:1d:4b:f7:a0:7e:71:e7:a2:
                    6c:65:20:bc:36:e7:33:b7:99:b6:2e:e8:43:35:b3:
                    ce:df:35:53:f3:53:e7:ec:1a:5f:a8:d9:f4:0b:37:
                    b8:70:8c:46:df:c7:e4:94:43:ab:ed:ef:7d:88:f0:
                    42:a4:c9:5f:c7:4f:49:a8:ff:0f:80:c8:2e:01:b8:
                    20:b3:da:34:4b:82:03:5e:15:7f:59:58:ec:16:27:
                    e1:ad:d4:83:d3:01:4b:5b:5b:fa:f8:98:0d:58:37:
                    02:96:c6:a2:cf:cc:f6:a7:aa:db:64:c6:26:af:ee:
                    e5:5e:ff:58:9f:1d:16:1d:14:54:a5:53:ed:ec:c7:
                    3f:69:26:04:5d:6f:22:da:f0:59:de:b6:ff:35:74:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.0.0/21
                  187.17.48.0/20
                IPv6:
                  2804:244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262801

    Signature Algorithm: sha256WithRSAEncryption
         b3:9f:0f:02:cb:1f:69:97:5e:57:a3:ba:b6:be:50:13:97:76:
         c9:56:1a:dd:9d:c5:71:15:b7:da:92:52:aa:1e:41:53:38:b4:
         eb:a5:97:b6:ac:0d:45:9d:ad:75:ba:ac:1b:7c:9b:80:3a:38:
         0c:04:87:d1:f1:f3:ca:76:ef:bd:e8:99:a8:61:0a:99:1e:6f:
         08:48:44:30:23:53:0d:61:b4:20:06:75:7a:fc:b2:93:27:50:
         de:89:71:1b:cd:d4:b4:af:dd:9d:a3:5a:33:1e:37:ea:1b:a7:
         c7:8e:66:c7:3b:6e:b0:20:f6:4c:19:f5:68:68:42:0d:35:2b:
         26:d8:3f:cd:52:41:8b:2b:11:72:23:aa:81:b4:9e:bd:2f:85:
         c0:95:d2:40:24:15:30:d2:b6:ef:15:1e:22:ef:76:b4:e9:e2:
         49:c1:5e:c0:d3:34:e3:98:46:ba:e8:6d:c5:79:87:dd:96:ab:
         0d:f7:ad:f6:31:ac:9f:00:dc:bf:a7:2c:67:88:7f:89:11:78:
         a0:7a:a5:62:bd:ac:53:a9:f2:04:a1:72:59:22:4d:8c:de:47:
         22:7d:6e:f6:f6:a8:3e:2c:c5:2c:27:d7:70:be:7f:1d:b0:5a:
         26:af:49:50:3b:75:e2:03:a2:f5:56:cc:0a:b8:fd:03:cd:a3:
         5e:73:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org