Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer
File:                     891C68CB622D162913FED257108AE6F48235EE16.cer (raw, json)
Hash identifier:          AX14H95lFJHyDAYLTG/bYG1NoqaWq+CVTBV+3zMKUfQ=
Subject key identifier:   89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04CFCFBEFF59F870DB30ECD0FF436BBC0F9BCB99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:46:30 +0000
Certificate not after:    Wed 02 Apr 2025 19:51:30 +0000
Subordinate resources:    AS: 267347
                          IP: 45.233.180.0/22
                          IP: 2804:4c10::/32

Validation:               Failed, certificate revoked on Fri 10 May 2024 18:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cf:cf:be:ff:59:f8:70:db:30:ec:d0:ff:43:6b:bc:0f:9b:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:46:30 2024 GMT
            Not After : Apr  2 19:51:30 2025 GMT
        Subject: CN=891C68CB622D162913FED257108AE6F48235EE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:28:f1:f6:ac:1f:4b:70:2c:26:93:6e:0e:
                    c6:80:c9:56:87:c8:16:51:9b:50:63:6a:bd:b7:5c:
                    45:c5:15:f9:b9:8d:3e:04:11:07:3a:ca:8f:5b:07:
                    dd:c7:b4:10:ba:8d:c2:c2:d5:55:65:e1:e4:40:34:
                    e9:b4:0d:19:b9:70:fd:1a:29:ad:5c:7e:7e:6a:3a:
                    14:15:12:01:25:0a:26:24:5c:5a:d2:2b:70:dd:58:
                    7c:b1:77:af:fe:eb:dd:0c:d4:bb:31:df:c8:d0:11:
                    6c:14:b3:77:b8:da:d1:29:d5:61:64:77:6d:d5:9d:
                    10:d0:86:7c:86:97:2a:f8:26:e0:d0:7b:ac:ba:1b:
                    7f:fe:a7:27:5d:c5:a4:91:ce:38:d0:79:2f:6e:36:
                    33:39:65:b3:62:c1:e5:10:f0:97:e4:65:17:a2:71:
                    aa:35:5c:0b:97:dc:f6:23:d3:a7:dd:66:2b:ce:b7:
                    ec:c0:ee:50:6e:20:0a:06:c1:47:1b:b9:d0:bd:e8:
                    a4:6d:07:29:1f:08:b4:54:7f:cb:88:59:22:9d:a6:
                    da:9e:86:12:5a:e2:fc:06:7f:de:55:ea:aa:17:f1:
                    51:0e:ba:be:25:99:05:9a:ab:a9:97:01:98:ba:3a:
                    d9:7a:9b:53:04:3e:6f:a2:fe:da:36:29:67:21:80:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/22
                IPv6:
                  2804:4c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267347

    Signature Algorithm: sha256WithRSAEncryption
         65:bd:0e:2e:61:7f:37:7b:ad:80:e0:f2:c1:c1:37:8a:bd:ec:
         22:57:7b:29:f3:25:f2:43:a7:5a:ce:40:5f:05:ac:fa:55:40:
         19:b3:6a:c7:42:e4:1c:45:b1:e9:a0:7d:27:50:c2:06:ad:b2:
         4a:8a:f5:08:84:1d:76:90:cf:aa:e4:5e:8e:bb:93:53:83:d2:
         f9:26:9e:d1:95:46:13:6a:4e:46:41:2b:05:d0:30:4e:12:82:
         76:1e:b2:16:e3:a7:47:5f:57:1d:ec:13:24:a4:f2:55:82:35:
         ae:2b:6e:61:2b:93:86:c2:2e:c1:56:08:b2:00:e6:ae:b0:d6:
         e3:e1:71:b4:da:bb:1a:5a:5e:c0:d2:e6:f8:24:9f:a7:9c:39:
         07:68:5b:cd:e5:34:bb:5e:d0:8c:96:58:89:14:74:17:36:1f:
         13:07:de:b9:a2:14:58:e8:ac:e5:ec:2d:52:62:02:a8:d4:e0:
         e1:14:98:27:83:cd:21:0a:35:ee:ea:94:b0:2d:3f:7a:d7:7c:
         95:6e:53:08:3b:42:29:d5:77:6b:03:1d:17:c4:1c:c0:62:3d:
         af:97:64:9b:5d:40:59:ca:f4:70:86:14:5e:e1:f4:38:a3:80:
         12:e7:86:4a:2e:0b:42:f2:c8:2d:ad:77:39:c2:74:18:b6:ba:
         52:c9:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org