Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer
File:                     51F43471391884073640DD1CEA3309A015FDE379.cer (raw, json)
Hash identifier:          9I44dA+ZWk5HqbHtPvOl08ComdK4MVE8kPchaDxqvZ4=
Subject key identifier:   51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D8E51B291B47C1F9C2E8C672D1067E6D8AC9D21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 17:20:55 +0000
Certificate not after:    Thu 15 May 2025 17:25:55 +0000
Subordinate resources:    AS: 266166
                          IP: 72.44.20.0/22
                          IP: 2804:3bb4::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 11:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8e:51:b2:91:b4:7c:1f:9c:2e:8c:67:2d:10:67:e6:d8:ac:9d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 17:20:55 2024 GMT
            Not After : May 15 17:25:55 2025 GMT
        Subject: CN=51F43471391884073640DD1CEA3309A015FDE379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:0a:3e:a3:b9:00:11:c8:c3:ef:21:bf:67:
                    96:63:ab:54:9f:cc:42:2a:ac:8c:1e:f5:1a:c6:bc:
                    a0:b5:a2:27:fe:fb:84:b9:10:23:19:4f:3d:98:7b:
                    d4:24:8f:8f:77:5d:02:a4:3f:6c:fe:01:f0:81:d8:
                    ed:6f:c9:15:fd:4f:16:ec:5a:0c:e4:45:3b:b7:35:
                    7f:f0:e9:e7:55:37:52:07:ec:dc:58:f7:fe:c8:ad:
                    c4:ad:89:45:72:7e:1c:b2:43:5e:40:83:f9:29:a5:
                    54:df:f9:f4:b5:b5:77:33:8b:32:be:c6:1d:ad:46:
                    a9:7c:8a:0c:c8:3d:48:8b:ce:c6:29:68:19:a6:e2:
                    cc:54:e5:6e:ea:61:09:cc:24:e7:f4:e8:52:0f:21:
                    db:98:bc:c4:ae:19:e8:61:09:14:08:36:2d:c8:85:
                    42:cb:e9:f9:f4:20:e5:f6:bd:63:67:0f:8c:ac:47:
                    06:61:f1:01:c0:06:16:fd:dc:c3:c2:20:cf:56:10:
                    0c:4f:56:cd:1f:68:2d:7b:25:5b:d4:ca:4b:df:39:
                    cf:ca:0f:43:33:93:80:4e:55:38:15:c9:f9:6b:17:
                    df:0a:57:2a:c6:19:8d:76:75:04:d7:84:55:90:24:
                    79:69:2f:8b:f8:ff:a6:a5:3a:17:10:61:ab:5f:27:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/22
                IPv6:
                  2804:3bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266166

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:ab:f7:b9:17:3e:21:8f:c8:27:76:f2:76:a0:f7:06:5a:
         66:0b:88:d9:f2:ef:f5:9c:fd:37:6b:80:d2:37:39:7a:cd:6f:
         19:dc:ff:00:f6:2a:98:40:55:4a:94:11:4f:09:9e:0a:99:47:
         08:0c:86:6b:18:03:9a:5a:7d:b6:ed:5a:49:78:f5:bd:c8:d1:
         2c:bd:9d:24:51:d5:27:83:65:b4:ca:47:28:38:60:1e:af:f6:
         6d:d9:08:7c:c7:96:d0:0b:7d:84:ab:93:15:93:e8:97:f2:0b:
         c0:08:27:85:22:d6:6f:fd:2e:da:d1:84:f3:9c:8a:9f:99:74:
         ad:f5:a8:e9:a8:3e:78:1e:9a:ac:de:6f:cc:be:a6:60:fb:91:
         23:14:db:0c:3b:32:a6:25:00:90:83:fe:ea:7f:bf:7e:f3:e7:
         99:51:08:a7:e5:16:cd:10:d0:46:bf:9c:b5:65:b1:0d:6e:3a:
         d2:18:d2:cc:7e:b8:fc:61:ff:b0:58:fb:67:f1:1c:1e:fd:0c:
         1f:ec:08:3b:bd:0c:52:ba:78:66:71:a3:fc:c9:62:60:31:c8:
         36:70:fd:60:e8:61:88:47:47:fc:d4:92:74:67:2f:35:f4:0b:
         9d:76:de:8f:7d:61:2e:6d:fa:cc:04:12:a0:49:b9:6d:a2:63:
         61:be:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 15:33:21 2024 by rpki-client on console-fra.rpki-client.org