Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/81BB9CB131A8B833014B4EC90332F3E55F721374.cer
File:                     81BB9CB131A8B833014B4EC90332F3E55F721374.cer (raw, json)
Hash identifier:          BbnXpJ3xuxkPhDoQ/wGFbWHKKWjLZfPPpCff84+A5n8=
Subject key identifier:   81:BB:9C:B1:31:A8:B8:33:01:4B:4E:C9:03:32:F3:E5:5F:72:13:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1191FB3FA6A70D75FB3DBE40A3E1C00E9BD8B2C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/81BB9CB131A8B833014B4EC90332F3E55F721374.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 01:51:12 +0000
Certificate not after:    Fri 30 May 2025 01:56:12 +0000
Subordinate resources:    AS: 269377
                          IP: 45.185.136.0/22
                          IP: 2804:63b0::/32

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 06:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:fb:3f:a6:a7:0d:75:fb:3d:be:40:a3:e1:c0:0e:9b:d8:b2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 01:51:12 2024 GMT
            Not After : May 30 01:56:12 2025 GMT
        Subject: CN=81BB9CB131A8B833014B4EC90332F3E55F721374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:55:80:15:b2:f6:e1:65:74:92:68:e6:35:
                    bb:58:8a:18:f0:57:ae:51:d2:a8:00:0d:b5:19:62:
                    04:dd:05:60:a7:e3:ea:d6:a6:ef:00:7a:c0:f0:6c:
                    14:5e:fa:5a:78:4d:d3:94:3e:e5:8f:38:32:6d:4a:
                    91:f1:d0:1a:de:d2:26:7e:4b:b6:f1:f6:0a:21:5f:
                    4f:7a:48:10:2d:d7:d0:de:12:23:1d:ad:04:65:95:
                    a1:d4:cd:85:b7:6c:f9:63:d3:49:44:bf:b2:0f:15:
                    bf:f1:68:d4:0d:51:28:a3:2c:97:4a:38:e5:4d:10:
                    27:9e:e5:04:3d:3f:5a:51:56:5c:99:9b:b2:e3:5b:
                    75:70:67:a8:2f:59:43:e2:ed:a8:8c:b4:06:b1:f3:
                    08:57:6d:6c:cf:a2:8d:56:8b:a1:c8:9c:8b:15:a2:
                    11:39:d1:34:b2:ff:52:ca:b8:65:b7:bc:4b:81:63:
                    58:c6:30:3a:bd:ce:8f:a5:23:62:a1:f0:a3:b5:77:
                    b0:cb:23:0b:59:6e:a7:89:bb:d5:42:cd:0b:bf:10:
                    61:66:8e:50:c1:15:8a:75:16:86:2a:de:9b:00:c6:
                    f8:62:fa:25:0e:2e:f1:d4:4f:d5:86:80:bc:ab:58:
                    cb:37:78:d0:96:01:7e:96:45:d2:1d:e0:8c:43:b5:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:BB:9C:B1:31:A8:B8:33:01:4B:4E:C9:03:32:F3:E5:5F:72:13:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/81BB9CB131A8B833014B4EC90332F3E55F721374.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.136.0/22
                IPv6:
                  2804:63b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269377

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:02:14:ad:2f:92:28:6f:b9:8f:27:e5:06:99:65:11:5a:
         2f:c5:1c:a4:a5:ff:84:d7:b5:f0:ff:98:69:2f:2b:24:3a:a0:
         da:51:ca:95:6d:33:37:7d:84:3c:e0:b9:04:9c:26:29:2f:09:
         eb:9a:8c:4f:ae:d8:eb:79:32:cc:07:41:c2:4f:7b:d8:50:46:
         10:de:8c:99:9a:a6:73:ba:ce:1e:e7:33:73:37:58:0c:a0:c5:
         bd:ea:cc:10:fa:b2:a4:97:f1:78:b4:26:d2:4a:32:39:34:8b:
         22:b0:79:dd:7a:d3:33:e1:76:8e:55:da:36:f2:1a:de:8a:a6:
         eb:b6:6c:33:93:5f:04:e1:9a:8d:e4:df:98:12:32:49:a3:7b:
         13:9b:7f:58:09:35:2d:6c:aa:29:0f:f7:34:bc:a3:af:cd:30:
         e9:ff:44:a5:09:de:54:33:be:dd:80:ae:e3:05:39:6e:ba:53:
         0d:fb:c0:5e:f7:64:bc:60:3d:1f:a6:8f:74:24:3f:05:34:f2:
         24:e8:24:9a:b8:31:db:12:e8:39:ac:2b:22:6d:81:7e:8b:08:
         2e:24:a3:46:1b:8a:cd:1f:3d:49:63:56:38:91:01:4c:58:38:
         23:a5:ad:1f:ba:69:30:4f:9f:12:12:e5:0f:c5:00:80:c8:3d:
         f3:86:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 08:48:11 2024 by rpki-client on console-fra.rpki-client.org