Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer
File:                     96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer (raw, json)
Hash identifier:          HRGmXaZ0xjVD9y58Et2YssW0D5azJU630rrYI/CBP8s=
Subject key identifier:   96:BA:82:DF:52:06:55:9F:C2:C8:96:3D:B2:92:E3:2E:9C:D3:7E:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AC111930E1C7DAF9BBE07D501E4671AF3BCE003
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jun 2024 13:08:45 +0000
Certificate not after:    Thu 05 Jun 2025 13:13:45 +0000
Subordinate resources:    AS: 267086
                          IP: 45.224.185.0/24
                          IP: 2801:80:22e0::/48

Validation:               Failed, certificate revoked on Mon 19 Aug 2024 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:11:93:0e:1c:7d:af:9b:be:07:d5:01:e4:67:1a:f3:bc:e0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  6 13:08:45 2024 GMT
            Not After : Jun  5 13:13:45 2025 GMT
        Subject: CN=96BA82DF5206559FC2C8963DB292E32E9CD37E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:5d:75:23:e8:dc:cd:e7:f8:bc:3c:f5:ee:
                    9b:9e:6e:ac:90:b6:3a:1b:15:1e:ae:a8:34:a8:90:
                    09:06:2b:30:a8:ee:9c:b1:92:6d:2e:7a:2a:2a:9e:
                    64:7a:1e:5b:c6:6a:69:e2:bc:15:77:fa:10:05:d0:
                    c5:24:d1:50:4a:97:f3:05:b8:9d:fe:8f:b5:e8:8c:
                    c4:37:3f:1a:5c:9f:b9:34:32:b4:e6:d8:e2:c8:01:
                    e2:56:60:30:62:da:ea:3a:8d:86:ae:e2:48:38:7f:
                    d3:33:95:11:44:0e:6b:8e:a9:5c:2e:2b:be:29:ac:
                    1e:35:9c:bd:ca:32:ce:90:da:c7:49:64:6e:f0:76:
                    32:dd:ee:ea:e8:61:c9:24:51:2e:65:dc:48:f2:a3:
                    7c:18:5c:4c:7d:70:e2:14:b9:ab:92:10:df:f2:93:
                    ff:9c:0f:de:62:ae:13:87:57:52:0b:de:bf:ee:a0:
                    be:6f:30:51:f7:86:c8:db:7c:51:b9:97:af:63:fe:
                    09:ed:33:bb:cd:b6:88:6d:28:5f:0f:7e:75:55:28:
                    87:dd:57:f7:40:d6:8e:37:fa:5b:68:e8:7f:16:a8:
                    e9:88:20:3a:9a:48:f5:aa:b7:80:05:81:ba:98:fe:
                    3a:54:2d:70:4a:79:ab:15:51:a9:4e:73:ad:12:3d:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:BA:82:DF:52:06:55:9F:C2:C8:96:3D:B2:92:E3:2E:9C:D3:7E:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.185.0/24
                IPv6:
                  2801:80:22e0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267086

    Signature Algorithm: sha256WithRSAEncryption
         81:35:a1:92:0a:25:d9:4a:9b:c4:a0:93:02:fb:5f:0f:6a:cc:
         d7:89:b8:3c:a6:d7:45:ca:d1:15:84:e8:ee:c1:9e:3a:56:80:
         14:9d:4f:a3:82:5f:1e:29:8e:5f:16:76:4d:5d:64:a2:7a:c3:
         05:de:41:1b:a0:c5:37:c9:bf:43:e9:0f:45:e6:df:e9:b4:96:
         df:29:ab:7f:3b:54:40:00:ec:66:4b:15:3c:48:1c:68:56:2b:
         43:a2:aa:a1:54:2f:0a:c7:c2:04:7e:02:2e:ee:bd:83:7f:c9:
         1a:a4:e0:e5:0f:8a:ff:55:ac:de:43:55:80:44:dc:9c:c4:4d:
         f9:5d:23:c9:88:e9:40:5b:7f:18:ff:e8:36:9f:c5:78:cd:7e:
         87:6e:c9:e6:db:e3:a6:28:26:6d:2b:48:4f:60:fc:25:5f:f0:
         3c:18:83:d5:87:67:f1:46:65:91:a7:62:34:eb:dd:a7:f0:1f:
         b5:43:67:3a:58:23:cb:27:6e:a1:e1:03:08:c6:5a:93:de:0f:
         63:87:72:3f:d5:28:af:91:7f:d0:30:d1:d3:f7:ed:ed:08:ee:
         1f:88:44:9e:a9:9c:dd:5d:3e:22:f7:a2:9d:0e:c4:af:a6:e7:
         f0:0b:76:67:95:0f:03:40:b7:9c:e5:e8:17:3d:95:9b:56:ca:
         e1:3c:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 19:09:13 2024 by rpki-client on console-ams.rpki-client.org