Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/936646F4A3854B083054C7AF4A170781B153A0F2.cer
File:                     936646F4A3854B083054C7AF4A170781B153A0F2.cer (raw, json)
Hash identifier:          60WaWBOGznbxuQLIJW2wDcG4RfYyvaGQucXszNRNPdw=
Subject key identifier:   93:66:46:F4:A3:85:4B:08:30:54:C7:AF:4A:17:07:81:B1:53:A0:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C18B97B9E57F148CCA1A95F4BC59ACBB1BE1752
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/1/936646F4A3854B083054C7AF4A170781B153A0F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:57:47 +0000
Certificate not after:    Wed 02 Apr 2025 19:02:47 +0000
Subordinate resources:    AS: 265482
                          IP: 168.197.140.0/22
                          IP: 2804:34d0::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:b9:7b:9e:57:f1:48:cc:a1:a9:5f:4b:c5:9a:cb:b1:be:17:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:57:47 2024 GMT
            Not After : Apr  2 19:02:47 2025 GMT
        Subject: CN=936646F4A3854B083054C7AF4A170781B153A0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:1a:80:4e:34:5b:41:9a:09:26:13:fd:19:
                    45:cd:1a:54:62:d6:86:03:7b:99:43:37:89:bf:0c:
                    50:c4:56:0a:65:ee:67:7f:0a:37:70:4f:91:7e:dd:
                    b4:62:d1:0a:a9:f0:ae:19:4e:b2:92:fa:a2:e0:ac:
                    9d:1e:88:47:38:d8:d3:46:b0:7e:ae:0b:11:11:88:
                    ac:f1:07:b8:17:e8:50:16:c7:3c:25:ca:59:f1:b9:
                    85:32:25:d6:31:e8:25:d8:58:f1:79:2d:4d:06:4c:
                    8e:fe:6e:bd:49:90:4b:0a:ce:91:a8:f8:33:d1:62:
                    4e:73:8a:aa:08:2c:49:71:56:89:b7:93:b2:df:80:
                    38:2c:d8:3c:e8:17:fe:b4:cc:86:89:c0:3a:e9:a5:
                    cf:e4:64:6e:7f:69:e1:a9:f0:e0:55:f3:cf:c6:34:
                    3a:57:b1:60:b7:65:34:b3:93:68:fe:5d:1e:d5:57:
                    94:d5:5b:96:da:d7:7a:9f:e5:ba:b5:0c:45:00:0f:
                    89:15:3a:88:1b:74:5c:0e:9c:97:2a:80:e6:b3:fc:
                    a0:fd:b5:2f:99:24:57:2a:73:27:ad:c8:fe:c5:9f:
                    92:00:22:91:13:8f:7c:0f:69:3a:a4:3a:43:3d:28:
                    0a:f8:0f:8f:4c:c1:f8:26:45:be:86:12:62:19:02:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:66:46:F4:A3:85:4B:08:30:54:C7:AF:4A:17:07:81:B1:53:A0:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/1/936646F4A3854B083054C7AF4A170781B153A0F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22
                IPv6:
                  2804:34d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265482

    Signature Algorithm: sha256WithRSAEncryption
         bb:f1:85:da:59:92:22:e9:f4:f5:54:8e:21:ef:6a:fd:72:eb:
         47:34:6d:15:86:e4:2e:92:c4:ef:07:fd:81:9a:23:b7:5d:e4:
         1e:8b:60:22:f5:16:5e:ba:4b:c7:47:67:f2:23:aa:ae:74:1d:
         fd:f9:58:04:19:b7:fe:ec:63:ce:c5:a5:7a:bd:b8:fe:e2:37:
         50:0a:3d:92:0c:55:c5:42:eb:67:d2:8f:9f:9c:17:3b:04:ff:
         f2:dc:e7:00:c5:09:5c:73:60:a2:01:82:f7:48:c7:a9:9a:6a:
         09:99:45:bf:bb:16:6c:d7:14:95:f8:ba:76:5a:33:74:0e:f1:
         b6:70:1b:23:26:95:a0:2d:6b:13:c8:3e:32:6b:80:bc:22:0b:
         6e:d0:33:58:aa:17:43:03:f7:46:ef:e3:84:21:48:a0:c3:ba:
         0d:27:3e:8a:ae:f8:4d:47:08:d1:bc:0e:fe:75:71:c2:8d:eb:
         bf:f4:aa:89:b9:12:11:88:17:bb:f5:59:c1:34:d4:01:6a:15:
         7a:b0:ff:0e:7c:f8:d3:0a:83:34:45:1a:1c:a1:d5:7a:11:b9:
         53:01:25:55:cf:ca:4a:81:cf:67:51:15:13:e9:f7:59:04:cd:
         d2:f7:39:dd:58:57:a0:17:69:45:e4:ef:ca:d2:1e:eb:19:09:
         7c:5d:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org