Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/435F07EA00073886381C39126AB1AE280041F253.cer
File:                     435F07EA00073886381C39126AB1AE280041F253.cer (raw, json)
Hash identifier:          3unpqA49O9Edn19wf7RYJVrVMNQTS/SlyQy8gVkvcEk=
Subject key identifier:   43:5F:07:EA:00:07:38:86:38:1C:39:12:6A:B1:AE:28:00:41:F2:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66ED6DA89149B21DA431C2E74D95DBE7E591B237
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/435F07EA00073886381C39126AB1AE280041F253.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:37:37 +0000
Certificate not after:    Thu 03 Apr 2025 20:42:37 +0000
Subordinate resources:    AS: 263855
                          IP: 138.186.84.0/22
                          IP: 2804:26c4::/32

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ed:6d:a8:91:49:b2:1d:a4:31:c2:e7:4d:95:db:e7:e5:91:b2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:37:37 2024 GMT
            Not After : Apr  3 20:42:37 2025 GMT
        Subject: CN=435F07EA00073886381C39126AB1AE280041F253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:65:16:f3:e2:71:7a:84:56:99:22:44:b2:
                    a0:87:9a:e5:79:ef:b7:2b:2d:13:97:9c:3a:9e:b7:
                    7f:dd:2b:72:a2:12:60:86:00:f4:fb:3d:22:8f:f9:
                    12:90:d5:ba:87:52:82:38:50:d0:38:58:5a:3f:7d:
                    3f:cf:dc:0e:e8:dc:46:84:e6:db:c4:4e:f4:31:f2:
                    1e:14:1b:7b:64:16:c2:cd:b3:d3:6c:ac:ce:4e:a6:
                    0e:e7:6e:9a:14:a1:1c:17:16:f7:e9:0c:c1:f3:18:
                    4e:02:e3:88:4e:bc:8e:f0:ef:84:28:e1:09:0a:39:
                    89:59:47:9b:99:5d:b1:87:a9:2f:4d:eb:58:b5:76:
                    26:8f:92:28:bc:f7:88:86:f9:46:cb:67:14:5a:bf:
                    cd:7e:a2:9f:a5:af:56:92:f2:be:64:ed:47:28:67:
                    9c:23:17:05:6d:87:0e:1a:18:72:f5:b9:34:72:58:
                    9a:80:34:30:8e:aa:8e:f4:6c:6f:2b:ca:08:67:72:
                    3a:07:d2:41:b1:13:f1:00:8e:35:ba:1d:51:00:96:
                    1a:82:7d:1f:02:b2:99:ce:fe:51:9b:a6:67:46:cc:
                    13:ae:35:28:fd:a0:d2:c9:b1:8e:46:60:40:4b:a1:
                    05:2a:7d:cf:0a:be:f9:4a:43:ad:74:70:ea:f5:7c:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:5F:07:EA:00:07:38:86:38:1C:39:12:6A:B1:AE:28:00:41:F2:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/435F07EA00073886381C39126AB1AE280041F253.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22
                IPv6:
                  2804:26c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263855

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:09:de:1b:58:a8:1a:77:52:9a:0e:df:9a:9c:89:ee:a9:
         67:90:6d:4f:3a:5c:a7:a2:63:0f:04:a5:08:e8:b6:f0:1d:51:
         71:40:51:3c:42:a8:5e:6f:71:29:ad:68:5a:fd:62:34:ee:64:
         a4:b8:99:13:70:0f:77:08:af:1f:d4:a6:57:f9:ed:10:89:68:
         6e:06:be:0a:2b:dc:29:51:11:b1:e0:8e:62:8d:59:ab:50:0d:
         60:bf:b8:d2:1a:5d:b3:8f:1d:7c:3d:c1:7b:b6:a4:15:1b:24:
         a8:be:f2:70:d9:d3:55:b5:0a:67:ca:5a:18:81:a5:1d:86:96:
         16:d1:51:35:4b:d2:28:9a:42:3a:c2:ff:7a:e2:f6:67:fb:3e:
         11:84:a5:2b:a4:64:08:f0:a5:d0:7c:b4:41:97:30:b3:60:d6:
         b9:11:31:47:f9:ab:91:fb:24:6d:e6:9c:a5:1d:df:d5:36:a2:
         0d:14:17:ca:dd:95:31:86:a9:1d:44:34:b5:6a:aa:03:91:38:
         6c:cd:35:50:b2:40:2d:81:1c:be:86:ef:7e:97:b4:3d:1f:7f:
         04:be:a5:c5:6f:7b:48:09:d3:52:af:ac:b2:ce:e1:0c:80:b0:
         44:71:a5:ef:a3:e5:17:ff:81:55:c1:92:39:b0:4f:07:92:84:
         65:98:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org