Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B66437A37DEE2030B9591E13F375DFABA59D375.cer
File:                     2B66437A37DEE2030B9591E13F375DFABA59D375.cer (raw, json)
Hash identifier:          /M04NoReZuZJPe4UV4bCawgb8EL8DN5btSI4zFhr6YU=
Subject key identifier:   2B:66:43:7A:37:DE:E2:03:0B:95:91:E1:3F:37:5D:FA:BA:59:D3:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B1E23EF1A4008A804951F436665326B575AD688
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/2B66437A37DEE2030B9591E13F375DFABA59D375.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:32:36 +0000
Certificate not after:    Thu 03 Apr 2025 06:37:36 +0000
Subordinate resources:    AS: 265943
                          IP: 131.196.160.0/22
                          IP: 2804:4030::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 02:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1e:23:ef:1a:40:08:a8:04:95:1f:43:66:65:32:6b:57:5a:d6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:32:36 2024 GMT
            Not After : Apr  3 06:37:36 2025 GMT
        Subject: CN=2B66437A37DEE2030B9591E13F375DFABA59D375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:15:47:4f:64:bc:f0:06:5c:2e:0c:ad:8f:
                    81:44:d8:d6:37:82:ba:64:bf:3e:30:9d:60:03:7c:
                    62:1d:cb:ff:b9:69:b3:be:c6:13:05:8c:17:4d:74:
                    ec:94:0d:54:51:86:a8:ad:b8:83:ff:f0:14:65:88:
                    c2:9c:34:a3:7f:62:06:33:08:58:34:73:75:82:73:
                    5a:a2:98:0f:f5:cd:22:b4:55:dc:25:15:4a:b2:9c:
                    85:c6:e7:0a:f9:f9:4c:9b:43:f1:84:c7:86:d0:13:
                    ce:d5:36:ea:84:cc:74:62:c5:f9:a2:a0:f8:8e:92:
                    e8:1c:d7:4a:14:17:47:44:ef:4c:e0:2b:1d:14:56:
                    11:08:09:24:43:b1:57:4d:4a:64:99:09:26:9f:12:
                    8e:f7:96:f5:07:e5:2b:d8:37:8e:bb:0c:54:14:39:
                    06:a4:95:ae:dd:74:6c:bc:6d:78:13:7a:bb:c0:dc:
                    2d:e8:33:db:f9:ff:d0:f0:e8:8f:97:b0:4d:22:9d:
                    dc:83:d4:c6:eb:ef:b6:12:14:f0:35:a9:92:75:37:
                    9d:25:e4:07:55:fc:12:a0:c3:aa:6f:70:87:16:58:
                    40:93:70:4c:8c:18:e3:58:de:07:3d:db:ef:02:7a:
                    1d:7b:38:53:93:5e:4f:6a:ad:9e:37:be:7a:77:b0:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:66:43:7A:37:DE:E2:03:0B:95:91:E1:3F:37:5D:FA:BA:59:D3:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/2B66437A37DEE2030B9591E13F375DFABA59D375.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/22
                IPv6:
                  2804:4030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265943

    Signature Algorithm: sha256WithRSAEncryption
         70:03:fa:48:ff:4a:be:32:d0:f9:32:1a:09:ef:95:e0:27:b7:
         b8:0b:9e:9b:e5:39:c1:f9:3a:75:90:3f:6d:5f:41:ec:ab:c6:
         04:ff:3d:aa:ee:38:a1:18:65:dc:c1:72:34:97:16:ea:d5:c8:
         b2:1e:4e:bd:7c:ae:49:fd:26:24:07:dd:a6:8c:1b:04:22:1c:
         b2:8a:80:8f:bc:a1:7e:36:4a:1a:4b:20:99:d1:cc:73:c9:c8:
         bd:b4:2a:88:57:1a:0a:ed:dc:46:1b:b7:2e:ac:66:c3:c8:48:
         05:58:6f:1e:77:a5:6e:ff:6d:98:54:3f:c0:4c:55:d0:b2:f4:
         69:33:83:bf:b8:d0:65:43:9b:ee:1e:d1:00:5c:8c:77:d1:39:
         99:6f:35:2f:3f:08:c7:af:f4:2d:ab:a4:09:4f:e1:bd:2d:59:
         c8:fc:9d:96:37:75:b6:0f:87:a8:13:dc:a9:60:e4:20:e5:64:
         e0:c1:f6:6f:dd:0e:7e:c7:d7:a4:1c:24:a0:60:f8:2b:19:f0:
         e4:e1:c2:22:e5:15:b8:24:d4:ad:e7:21:ed:79:dd:e3:fa:96:
         11:9a:1f:8d:6e:5e:0f:9c:d3:68:9f:3d:75:c1:2d:a0:d4:88:
         38:66:56:ec:69:c1:ca:96:64:77:e0:c9:85:29:d5:19:13:0f:
         52:bf:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org