Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.cer
File:                     91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.cer (raw, json)
Hash identifier:          1zdJCt+2enqJwX1a13zLXDITrw9CJqLyTlJuhjPHVQk=
Subject key identifier:   91:BF:6A:31:0C:0A:22:67:BB:E5:54:68:ED:38:ED:DA:B9:BD:AC:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06652EC78E393E8516CF38F5B1DA688D040F86BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jun 2024 20:54:10 +0000
Certificate not after:    Mon 09 Jun 2025 20:59:10 +0000
Subordinate resources:    AS: 271631
                          IP: 201.218.188.0/23
                          IP: 2804:7e8c::/32

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 13:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:2e:c7:8e:39:3e:85:16:cf:38:f5:b1:da:68:8d:04:0f:86:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 10 20:54:10 2024 GMT
            Not After : Jun  9 20:59:10 2025 GMT
        Subject: CN=91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:6f:7f:4f:a0:95:a3:8b:b4:5a:ce:a3:ad:
                    75:40:cc:5b:d7:a5:ba:b2:19:7c:8c:b8:a2:55:e1:
                    c3:d7:97:c7:78:6c:41:3d:98:59:02:5b:99:9e:70:
                    77:83:02:5c:f6:dd:40:a6:c4:1f:b0:20:87:81:45:
                    1d:4c:b6:38:4a:40:0b:da:10:7e:1c:cf:d1:a9:20:
                    22:3b:30:12:fc:4f:d5:99:be:a7:7b:92:c3:b0:c5:
                    60:07:84:2b:2e:06:d2:f9:b0:f3:9e:60:64:b4:92:
                    b4:55:d4:52:8b:b0:61:d4:67:6f:68:9c:94:df:d8:
                    04:a0:bc:3d:78:a5:f4:b1:e0:40:26:66:05:69:bb:
                    97:29:30:6e:26:41:3c:25:ad:46:96:ac:46:24:8f:
                    c4:6c:14:81:2e:7f:93:f0:42:45:55:1c:58:72:0b:
                    59:e0:ca:cb:1c:65:78:73:7d:68:5f:ab:9c:12:89:
                    ec:f5:11:66:d3:9a:2d:82:00:2f:50:56:93:22:9d:
                    ad:91:b8:59:10:6d:f8:4d:7e:8e:36:43:f3:3f:27:
                    10:8e:53:32:e3:8e:4b:66:1c:8e:70:aa:20:a2:8d:
                    5e:3f:32:18:fc:cc:d0:10:97:34:2f:9a:21:79:44:
                    9b:3a:33:22:e3:dc:e3:e5:66:a9:14:53:ab:df:a9:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:BF:6A:31:0C:0A:22:67:BB:E5:54:68:ED:38:ED:DA:B9:BD:AC:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.188.0/23
                IPv6:
                  2804:7e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271631

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:82:f6:9e:e9:e2:f1:8d:db:47:0d:30:cc:03:c1:be:94:
         07:e0:15:a9:fa:6e:0a:1d:b4:ae:ed:52:b8:bf:6d:d2:de:94:
         ae:42:64:be:c5:ab:48:cb:79:8e:16:7b:be:10:78:30:c9:ac:
         3f:04:ca:94:d6:17:c7:6b:1b:b1:ff:9c:f0:79:ed:cd:68:b7:
         c5:6d:75:03:dc:63:98:8d:73:d5:89:a8:73:d5:3e:73:df:8b:
         3c:ab:e6:04:2f:af:75:66:03:06:5c:b4:c5:9e:d1:8e:96:63:
         51:fd:1c:2f:6b:7a:2a:79:98:ec:fa:58:de:2d:7f:31:6d:9b:
         35:d5:ef:08:ee:4f:dd:d4:a9:c2:76:63:55:b1:6e:21:fa:18:
         a1:44:7f:65:e0:80:92:c6:e9:6b:20:36:35:3d:bc:2d:b7:55:
         61:42:ae:99:34:ac:19:90:38:34:05:34:8a:32:87:e0:e2:2e:
         1d:ec:b8:25:ba:7a:93:57:cd:19:4c:b7:41:49:e2:61:80:e8:
         8a:aa:66:ce:af:f2:0a:d7:20:82:d7:1c:fd:5e:b3:6d:a1:d9:
         f0:89:5a:36:c5:b1:5e:03:b1:78:7d:b0:39:8b:35:26:78:de:
         b9:c0:9c:6c:79:60:26:43:07:d5:d1:f1:e2:af:3e:8a:f0:bd:
         da:4f:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org