Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/76ED990A0D81C259DA23D8A49177B1B69D58524C.cer
File:                     76ED990A0D81C259DA23D8A49177B1B69D58524C.cer (raw, json)
Hash identifier:          Vk0Vn12cqvf3K6Gdv1FFOWgFjCYQ70TCQ2I/Fcva4gM=
Subject key identifier:   76:ED:99:0A:0D:81:C2:59:DA:23:D8:A4:91:77:B1:B6:9D:58:52:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       73227A10AEB650B89367CCFD672931E5F595F47D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/3/76ED990A0D81C259DA23D8A49177B1B69D58524C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:00:25 +0000
Certificate not after:    Thu 03 Apr 2025 02:05:25 +0000
Subordinate resources:    AS: 264041
                          IP: 143.137.190.0/23
                          IP: 2804:29dc::/32

Validation:               Failed, certificate revoked on Sun 11 Aug 2024 00:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:7a:10:ae:b6:50:b8:93:67:cc:fd:67:29:31:e5:f5:95:f4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:00:25 2024 GMT
            Not After : Apr  3 02:05:25 2025 GMT
        Subject: CN=76ED990A0D81C259DA23D8A49177B1B69D58524C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:b8:78:9a:17:46:09:18:7b:82:7c:6d:28:
                    6d:5c:5f:79:a3:2c:0a:cd:7a:9b:aa:6b:a2:c8:77:
                    50:44:ad:97:7d:95:1d:9a:15:94:23:01:34:50:e4:
                    bb:22:1b:cd:c9:ce:1b:04:0d:68:b3:b9:71:83:a6:
                    0e:8b:a7:be:1a:1c:5e:1e:da:c1:39:2e:fb:ec:e1:
                    c8:18:a2:c5:9a:98:07:1c:aa:4d:f1:9e:67:a1:aa:
                    ef:a5:59:8f:3e:1e:c6:a8:2a:a2:66:f3:b2:28:e5:
                    77:2f:91:12:51:b6:10:05:93:43:bd:ce:d3:aa:58:
                    d4:32:25:c3:a1:da:57:a7:15:a9:1c:c5:d0:ee:79:
                    db:ae:0d:a7:29:00:6c:25:33:61:d7:7a:30:2c:2a:
                    9c:99:92:4d:74:7e:b6:d3:d5:45:b1:5e:8a:c3:db:
                    ca:0a:39:97:41:8a:77:ba:9a:4d:16:b6:21:71:99:
                    8f:21:75:9d:92:bf:6a:4f:68:66:ce:9b:f3:3a:63:
                    4d:76:d0:fa:60:91:b9:a6:d7:8a:d1:3b:ae:4b:75:
                    e6:82:e5:69:9b:39:35:7f:95:b0:ce:47:c4:cd:e6:
                    db:8d:8f:d3:f2:08:25:36:cb:f6:a2:e4:b0:46:8d:
                    5b:df:62:9f:90:af:1f:a5:1b:d5:21:4d:02:19:95:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:ED:99:0A:0D:81:C2:59:DA:23:D8:A4:91:77:B1:B6:9D:58:52:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/3/76ED990A0D81C259DA23D8A49177B1B69D58524C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.190.0/23
                IPv6:
                  2804:29dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264041

    Signature Algorithm: sha256WithRSAEncryption
         58:a3:9f:62:52:bd:55:e5:31:6c:ea:78:e9:ef:68:92:5a:94:
         b6:4e:eb:72:be:cd:12:78:c2:8b:7b:53:50:89:47:0a:5d:e9:
         e7:a7:83:07:06:96:82:84:94:5f:cf:df:96:9d:e2:15:7c:5e:
         fa:00:73:8c:3c:db:db:0d:48:73:38:e6:2b:36:f5:e2:a1:25:
         0a:57:37:5f:03:fe:06:1e:41:5b:0f:6d:c2:ab:bd:2b:49:95:
         f4:80:a8:87:0b:cb:63:ed:6c:6d:31:4e:b8:f5:89:c0:96:50:
         92:b6:d4:02:f1:82:bd:86:2a:8d:47:28:be:53:c9:30:e2:aa:
         58:4d:f0:6e:e3:aa:13:58:21:68:f9:e7:e0:68:be:19:3b:26:
         2a:42:be:f0:f2:05:01:15:24:a9:1d:ab:d3:6e:fc:82:20:d3:
         b1:a0:f4:53:4a:53:0e:f5:25:a3:af:86:ec:95:f2:11:a9:7f:
         43:c4:01:01:d1:1e:75:a6:97:de:fe:3c:a7:26:d0:a1:ed:70:
         c8:fd:81:9b:0d:13:b2:91:53:d1:82:ef:9d:30:c3:e4:dc:3d:
         c4:3a:9b:54:b3:00:9b:ae:43:af:82:83:4e:da:9e:b8:de:67:
         6d:4a:9f:60:35:cd:42:7e:58:bf:02:05:97:a7:0f:97:0b:56:
         b4:51:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:30 2024 by rpki-client on console-fra.rpki-client.org