Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/383390424A7444F4BB72EC22891162863735FF97.cer
File:                     383390424A7444F4BB72EC22891162863735FF97.cer (raw, json)
Hash identifier:          RpETKxCgeYn7QxkO4cEO+HBOwdAQELKIc+EBsLFaXi8=
Subject key identifier:   38:33:90:42:4A:74:44:F4:BB:72:EC:22:89:11:62:86:37:35:FF:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B01B2CC25FE8400E2DA4F8FEE4E7CAA12B2AF99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/1/383390424A7444F4BB72EC22891162863735FF97.mft
caRepository:             rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:57:08 +0000
Certificate not after:    Wed 02 Apr 2025 19:02:08 +0000
Subordinate resources:    AS: 271656
                          IP: 45.186.232.0/22
                          IP: 2804:7ef0::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:01:b2:cc:25:fe:84:00:e2:da:4f:8f:ee:4e:7c:aa:12:b2:af:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:57:08 2024 GMT
            Not After : Apr  2 19:02:08 2025 GMT
        Subject: CN=383390424A7444F4BB72EC22891162863735FF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dc:7e:26:02:6a:09:29:32:f4:b4:11:b2:32:
                    6b:71:c5:60:c5:70:3d:90:3e:c4:c2:a4:ae:98:d0:
                    58:18:ff:91:4b:14:64:1a:63:2e:5e:2e:bf:47:3b:
                    dd:e9:99:b3:a3:5c:61:f1:69:68:92:ea:26:ea:c5:
                    4d:9a:d9:f3:61:93:da:3d:4f:24:c9:48:0e:ef:91:
                    c5:c5:c5:6e:c6:fe:1b:9f:7f:bf:92:8d:96:60:bb:
                    a1:b7:92:d0:12:d2:c7:0d:1d:f9:eb:73:07:3c:a9:
                    33:16:a1:40:a7:c5:f3:91:52:54:49:66:fa:5f:84:
                    07:32:ba:b1:3d:fe:4a:2f:20:cd:bd:f0:56:ee:22:
                    86:46:0e:b8:c7:82:5e:3d:f6:08:58:52:92:90:3e:
                    ae:23:a9:db:0e:2a:01:8a:0e:8e:cf:80:a5:e7:01:
                    4f:60:86:2c:1f:a0:0d:89:ec:9e:86:5f:49:b8:c2:
                    59:56:96:57:44:74:39:16:3d:57:5c:10:b6:95:73:
                    bb:53:a1:23:42:f7:f9:11:f1:b0:a2:24:13:c0:ca:
                    26:78:fb:60:40:81:02:51:e2:df:9f:0e:bd:1f:7f:
                    1d:b2:5a:39:85:00:50:97:39:80:76:40:12:aa:8b:
                    dd:48:77:b9:72:c1:f0:d0:35:67:99:45:32:67:85:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:33:90:42:4A:74:44:F4:BB:72:EC:22:89:11:62:86:37:35:FF:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/1/383390424A7444F4BB72EC22891162863735FF97.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.232.0/22
                IPv6:
                  2804:7ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271656

    Signature Algorithm: sha256WithRSAEncryption
         b4:7a:b3:92:18:7f:eb:07:a3:23:5b:24:d4:b0:17:c4:6d:66:
         f0:84:df:83:2d:b1:24:e8:81:f6:26:e0:ce:4d:b4:38:20:15:
         b3:b6:06:b5:77:a4:e3:06:23:9a:f3:c6:35:da:15:5b:98:84:
         73:77:e6:91:80:3a:55:95:14:c2:61:f6:de:7a:19:4c:d4:a1:
         72:d6:50:0c:bf:c3:26:c3:64:c2:de:36:d3:83:e7:61:04:b7:
         d3:50:7d:ab:95:a0:06:fd:07:2e:08:af:bc:bf:ab:6b:23:75:
         23:eb:f6:96:51:47:30:e4:2b:28:8e:2d:cc:ae:cb:0f:61:87:
         93:e0:a1:11:91:72:e2:2e:1b:40:3f:e9:07:16:ea:50:1b:e0:
         0f:4e:d5:23:1b:c5:43:2a:54:a9:39:c5:9a:58:19:d1:14:f9:
         9f:4d:e6:06:27:8a:15:21:ae:c2:3d:6d:db:52:c3:43:91:25:
         89:06:1e:b9:50:53:e9:85:e1:78:82:9a:c6:ab:6b:1a:4f:2a:
         3d:83:04:2d:52:c5:47:e9:d4:13:03:59:9f:b7:db:20:ff:93:
         65:05:fe:61:c8:a5:29:58:e6:30:df:4d:15:47:ec:46:31:ca:
         dd:f9:30:2d:cb:26:0d:23:c8:8a:b4:1f:84:c2:4d:cb:bf:01:
         6a:cd:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org