Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96105F190DDE9234922D5C3A990E469D1CB41394.cer
File:                     96105F190DDE9234922D5C3A990E469D1CB41394.cer (raw, json)
Hash identifier:          GZf1VXURRXBiY+53Ulnv7MBoZdcUcjPJ78e6WQYbkK0=
Subject key identifier:   96:10:5F:19:0D:DE:92:34:92:2D:5C:3A:99:0E:46:9D:1C:B4:13:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14A167620B78CDA918E1C96D2C70BCDD016AD18B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:55:37 +0000
Certificate not after:    Thu 03 Apr 2025 15:00:37 +0000
Subordinate resources:    AS: 271626
                          IP: 181.189.80.0/22
                          IP: 2804:7e78::/32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:67:62:0b:78:cd:a9:18:e1:c9:6d:2c:70:bc:dd:01:6a:d1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:55:37 2024 GMT
            Not After : Apr  3 15:00:37 2025 GMT
        Subject: CN=96105F190DDE9234922D5C3A990E469D1CB41394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:cb:69:df:b0:66:4b:3b:11:bc:44:43:e6:
                    02:c5:6f:07:2e:69:6f:36:91:22:6f:7b:92:58:55:
                    cd:b2:37:86:3a:40:1b:8a:29:c4:31:14:b3:17:4b:
                    c9:57:28:05:17:a5:dc:48:af:2c:46:a2:2c:0d:1a:
                    1d:a5:85:16:9d:c1:f5:f2:3c:7d:6e:57:e4:82:75:
                    b0:41:42:af:89:e4:d7:95:57:90:6a:7e:ec:2b:f9:
                    08:82:63:75:8b:6c:ce:39:b6:5f:2f:90:1e:f9:45:
                    b5:77:54:3a:9c:10:f7:12:e1:df:fc:18:8e:e3:c9:
                    ff:51:7e:16:d7:50:d9:36:70:b7:a1:cb:e3:12:eb:
                    f7:68:d7:8f:49:24:31:92:81:c8:7a:e4:fc:f5:e1:
                    1b:7d:43:d3:a5:35:d9:4b:16:98:ae:2e:a1:4c:d3:
                    9d:96:58:3d:c9:25:a2:60:b7:17:bb:d3:39:c4:a2:
                    9c:d1:99:51:d5:df:d6:ba:11:9f:00:ab:13:d6:00:
                    9e:51:9e:60:7e:b6:38:72:31:0f:ba:d9:3d:22:fd:
                    ce:65:a6:cb:eb:3c:cb:8d:d4:2f:35:a4:2c:27:fb:
                    7a:f4:07:f7:7f:9b:85:a8:c1:e6:67:19:a5:ba:85:
                    fc:b5:32:87:76:bd:19:88:ef:06:f6:97:f8:f1:db:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:10:5F:19:0D:DE:92:34:92:2D:5C:3A:99:0E:46:9D:1C:B4:13:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22
                IPv6:
                  2804:7e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271626

    Signature Algorithm: sha256WithRSAEncryption
         bc:be:da:40:79:56:f5:29:e8:78:13:8e:f8:94:0e:4f:f2:5f:
         f1:7c:6b:8a:89:1d:db:21:01:6b:55:58:74:d2:25:1a:17:70:
         c6:bf:e9:86:d3:0b:b3:04:bc:38:c8:99:b3:48:ac:f1:81:58:
         9e:3a:85:79:84:64:87:eb:d8:ce:35:72:af:7c:c3:3c:9b:ea:
         fb:9c:39:5a:03:1c:ed:a7:0f:fb:e3:ee:c4:c0:73:e5:6f:1a:
         02:69:33:4a:d8:9d:51:bf:b0:71:b0:b0:87:fe:e6:a6:f3:a9:
         85:2d:2a:78:5c:46:75:32:02:59:0b:72:73:ed:07:e0:3d:58:
         c2:a3:94:52:c8:9e:9a:8a:26:ce:f2:05:09:9e:d3:03:a3:d4:
         89:a2:b1:84:80:4b:9a:35:48:a7:fe:bd:21:5f:88:5d:c6:22:
         b3:2c:82:e9:53:87:11:1b:02:8c:da:29:63:01:81:83:58:7b:
         c7:75:30:39:29:2b:73:de:64:c8:9f:5a:80:63:62:8b:d3:e9:
         23:9a:26:aa:ca:43:c6:a7:28:f8:e0:87:32:e9:6d:10:3f:2c:
         d9:f3:02:14:16:1e:db:22:05:98:36:19:6a:26:d2:e9:19:b3:
         aa:75:b8:1d:bd:52:7e:3c:dd:12:1f:64:f5:dc:86:74:00:64:
         72:8f:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org