Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95E1612933DCEF309A9D449A17E9464AC4807933.cer
File:                     95E1612933DCEF309A9D449A17E9464AC4807933.cer (raw, json)
Hash identifier:          ybIt7PH94M55mzrGU1GPExehwA5LsdpKXQhYbO3Dau0=
Subject key identifier:   95:E1:61:29:33:DC:EF:30:9A:9D:44:9A:17:E9:46:4A:C4:80:79:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       223CD0CBE7E706C9B9C5307D5DAB210F196E1949
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/1/95E1612933DCEF309A9D449A17E9464AC4807933.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:40 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:40 +0000
Subordinate resources:    AS: 268829
                          IP: 45.173.220.0/22
                          IP: 2804:5b40::/32

Validation:               Failed, certificate revoked on Wed 15 May 2024 08:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3c:d0:cb:e7:e7:06:c9:b9:c5:30:7d:5d:ab:21:0f:19:6e:19:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:40 2024 GMT
            Not After : Apr  2 18:30:40 2025 GMT
        Subject: CN=95E1612933DCEF309A9D449A17E9464AC4807933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:be:04:b2:cc:ba:f1:d8:82:9c:4f:c5:51:
                    8c:d7:78:a8:33:29:e2:b3:da:c1:df:e8:d0:cf:10:
                    6a:17:bc:4d:fa:d6:e8:9f:64:1b:88:42:09:b2:99:
                    90:89:3d:2b:ed:92:b7:99:e4:18:9e:03:0c:a2:be:
                    28:d0:e2:5a:24:dd:46:7e:52:c2:f1:f1:4a:55:e1:
                    63:34:46:9c:ac:34:f6:ae:f4:34:3e:0d:29:21:f9:
                    bb:46:4d:a0:05:87:08:6a:8c:d9:45:c6:ff:6e:f2:
                    fe:90:56:a0:20:69:6c:38:54:0e:ca:e0:b6:22:0c:
                    c3:80:ac:91:f4:f5:3a:64:2e:db:5e:1e:f1:20:19:
                    41:c7:e7:20:4b:f2:46:73:d4:08:25:52:55:07:04:
                    38:0f:69:16:b4:d1:34:7e:b4:b2:7a:16:1b:f8:5f:
                    6b:61:30:1c:3d:60:49:7d:db:aa:b7:07:38:9e:06:
                    0f:69:40:ff:74:f9:f4:60:19:e8:41:8e:52:8c:a6:
                    95:34:f4:d7:66:ed:98:28:1e:17:c1:ae:9f:d8:5a:
                    60:54:a4:5a:b1:d5:cf:36:3f:85:88:73:84:69:f7:
                    1e:e9:6c:a8:c5:82:3a:9f:99:59:58:21:03:38:95:
                    18:6b:03:0b:5c:76:bc:8d:8a:af:a0:77:28:4c:0d:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:E1:61:29:33:DC:EF:30:9A:9D:44:9A:17:E9:46:4A:C4:80:79:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/1/95E1612933DCEF309A9D449A17E9464AC4807933.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.220.0/22
                IPv6:
                  2804:5b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268829

    Signature Algorithm: sha256WithRSAEncryption
         40:05:33:e9:1a:90:20:5e:66:ef:e2:15:27:46:19:eb:b2:40:
         8f:3a:f1:dc:4a:43:ac:ad:be:16:6f:ec:fc:e2:fd:5b:26:32:
         e6:5e:90:99:fc:51:59:25:31:53:5e:da:59:23:ab:17:61:05:
         68:60:df:2a:15:50:4c:d2:9d:22:c9:7e:47:37:67:cd:c6:14:
         f2:d1:66:ca:7b:9f:1b:59:5e:03:9b:95:24:16:af:81:27:af:
         af:95:6f:4d:d9:32:95:01:b6:e7:42:61:a6:4e:d7:5a:03:33:
         20:47:da:54:e2:e1:4a:67:ad:5f:b3:0a:96:1d:ec:08:42:32:
         b9:d8:3c:18:5a:d4:7a:6c:50:a8:81:48:38:fd:2d:fd:84:ff:
         d2:86:ea:38:6b:39:db:a3:41:47:6f:13:7e:7a:21:9e:32:f2:
         ee:b6:e0:57:2c:1a:6f:56:ba:16:6a:36:c8:4c:d0:e2:61:1a:
         77:a6:ef:79:6a:9c:1d:a3:c3:08:c6:c4:b9:cf:01:cb:3b:4f:
         79:e7:d7:55:2f:5f:91:01:3e:19:ec:fc:5b:5d:85:4d:fa:f2:
         e8:cf:dd:c6:d6:cb:a9:c5:51:e3:22:a0:e9:9c:77:1f:c1:9f:
         3e:56:25:ba:01:73:e6:69:66:3e:2a:a5:0a:13:b5:a4:0e:78:
         01:b5:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org