Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91D31804F77F5B3F40D5BD715C57C812F835E0FA.cer
File:                     91D31804F77F5B3F40D5BD715C57C812F835E0FA.cer (raw, json)
Hash identifier:          7rm8UcIRzp7OWrMSSd5IKcOsvGYBXv1TjaMsSP0Ywkc=
Subject key identifier:   91:D3:18:04:F7:7F:5B:3F:40:D5:BD:71:5C:57:C8:12:F8:35:E0:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F1242874D7A6926EE72F70E9350FF768E71098C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/91D31804F77F5B3F40D5BD715C57C812F835E0FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jun 2024 21:38:29 +0000
Certificate not after:    Fri 06 Jun 2025 21:43:29 +0000
Subordinate resources:    AS: 273472
                          IP: 2804:8f28::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 23:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:12:42:87:4d:7a:69:26:ee:72:f7:0e:93:50:ff:76:8e:71:09:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  7 21:38:29 2024 GMT
            Not After : Jun  6 21:43:29 2025 GMT
        Subject: CN=91D31804F77F5B3F40D5BD715C57C812F835E0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:54:3e:fa:f6:54:9a:4e:9d:aa:f7:33:a7:
                    98:2a:b3:68:7c:ac:5e:7f:3a:f4:c1:f5:3a:c3:4f:
                    db:08:dd:7a:91:44:4e:e4:67:19:ca:b3:ac:76:a9:
                    c5:a4:c7:85:eb:a0:ae:dd:af:d8:7e:1b:09:31:cb:
                    d9:f6:31:0e:75:81:f4:7f:db:b8:39:4b:13:f7:b5:
                    54:6e:82:f0:05:9d:ce:62:7b:1d:d1:05:69:0e:71:
                    53:ae:4a:95:9a:66:52:5d:03:4b:2d:27:b3:a5:82:
                    b3:65:a5:c1:f8:0e:91:e3:d3:75:91:38:48:23:92:
                    56:27:46:12:af:0d:6c:3c:16:3f:48:51:56:48:c0:
                    2b:e7:2b:39:69:0d:a0:59:e9:8b:35:63:b2:65:85:
                    43:32:01:ea:d0:f3:9a:d2:a5:a0:66:19:e1:11:e2:
                    a1:76:fa:c7:5f:02:30:84:83:02:03:7b:f5:c7:84:
                    bb:fd:3a:21:be:55:91:54:07:bb:c2:08:c9:c3:9f:
                    28:fb:b7:7c:d1:9b:a4:ba:72:b6:a9:c7:e7:a4:00:
                    49:5c:4f:e1:e4:dd:01:b2:01:28:a3:08:2b:58:22:
                    cb:45:f3:f6:17:f4:a0:a0:53:20:41:cc:29:a0:e6:
                    c4:fe:1f:47:1b:45:6e:37:52:c5:03:33:65:9f:03:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:D3:18:04:F7:7F:5B:3F:40:D5:BD:71:5C:57:C8:12:F8:35:E0:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/91D31804F77F5B3F40D5BD715C57C812F835E0FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273472

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:e2:fd:39:ea:4a:2c:06:6e:88:ae:5a:7f:28:fa:56:4d:
         92:54:c4:32:8a:8c:a9:71:13:c2:aa:fa:49:2f:92:37:af:ac:
         73:f7:4b:41:44:30:14:bd:02:d4:40:d8:d1:04:49:04:b4:e0:
         99:c1:1b:cf:df:b4:62:f0:d1:77:da:13:8c:bd:a4:63:d5:65:
         1e:4d:9a:cf:50:de:13:bc:6a:3a:0f:cf:86:8d:d6:ed:1e:bd:
         57:6b:0a:01:bf:39:5d:15:6e:3c:68:99:da:34:7c:ca:30:f2:
         b8:a4:34:f5:0c:a1:19:1c:fe:88:a1:41:64:16:81:87:e8:f5:
         7c:cb:5b:bc:a2:3f:71:54:b4:9a:93:50:08:69:b6:8b:84:5e:
         e6:3c:79:70:6e:ee:9e:71:95:db:be:b7:77:35:b9:de:48:a1:
         64:9c:0c:1f:b6:fd:bb:e3:71:a6:23:81:5b:c2:65:dd:87:91:
         13:a3:fb:34:ad:2e:0b:1a:a0:dc:a3:1e:e0:33:bf:fb:8a:5d:
         76:0b:95:5a:ac:4a:d3:22:3c:04:00:6f:bb:ab:cc:34:68:40:
         5b:da:a7:d7:bd:eb:9c:2e:58:f3:0b:ec:03:2b:5a:cc:ba:49:
         e1:ea:a7:21:ce:ee:c3:cc:db:46:c7:f9:49:62:b5:a2:90:13:
         9b:4a:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 01:30:07 2024 by rpki-client on console-ams.rpki-client.org