Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99D0561949CB18E3D49B747FF7D046F42CB2F06C.cer
File:                     99D0561949CB18E3D49B747FF7D046F42CB2F06C.cer (raw, json)
Hash identifier:          528bS0c5JJz9NJbhnVgQJ/oOu2gw3WNnleSN74+arck=
Subject key identifier:   99:D0:56:19:49:CB:18:E3:D4:9B:74:7F:F7:D0:46:F4:2C:B2:F0:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1EDBC33C1889ED3D465381303E3A3C892D1862B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/99D0561949CB18E3D49B747FF7D046F42CB2F06C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Apr 2024 12:38:18 +0000
Certificate not after:    Fri 25 Apr 2025 12:43:18 +0000
Subordinate resources:    AS: 270426
                          IP: 190.111.140.0/22
                          IP: 2804:6bcc::/32

Validation:               Failed, certificate revoked on Sat 06 Jul 2024 04:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:db:c3:3c:18:89:ed:3d:46:53:81:30:3e:3a:3c:89:2d:18:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 12:38:18 2024 GMT
            Not After : Apr 25 12:43:18 2025 GMT
        Subject: CN=99D0561949CB18E3D49B747FF7D046F42CB2F06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:7f:5b:bb:e8:0f:d2:63:a2:64:bd:92:67:
                    bc:a8:17:01:f8:f5:f2:52:ac:55:09:5a:d1:7f:35:
                    48:2f:9c:ae:89:cf:f6:33:71:6b:ec:22:99:a9:15:
                    3b:55:a7:05:e6:09:b1:41:61:26:29:f1:42:41:ab:
                    c4:ea:5d:72:85:a7:de:d9:0b:74:3b:d8:55:7e:e8:
                    fb:8b:02:9a:f6:b2:25:99:d8:f4:4a:ec:09:95:35:
                    c2:1e:b7:f9:e2:0f:43:2c:7a:42:f6:6f:ad:77:ef:
                    82:55:34:85:e2:fa:85:48:a8:b5:fe:0d:97:47:47:
                    ea:20:af:56:4f:67:1b:4e:27:d3:6a:09:06:d4:d6:
                    85:65:45:69:13:b2:7f:9a:ef:81:cb:88:80:b9:7b:
                    d6:a9:1d:b4:06:d0:85:f2:2e:1e:e9:87:05:59:c2:
                    a0:5b:70:75:2e:63:1b:bd:ed:ca:83:c6:9e:b1:ae:
                    1c:6e:01:1e:90:5b:ae:7d:82:6e:27:7f:93:6e:34:
                    3e:27:fd:6a:4f:60:f6:4e:fd:9b:f9:8a:39:db:2c:
                    11:eb:16:49:38:07:48:d3:7b:76:12:95:08:1a:ac:
                    32:51:63:35:64:45:7b:a5:05:bf:fe:9b:b1:74:fe:
                    d3:a8:c0:ef:a4:76:3a:49:60:c5:02:b9:02:21:07:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:D0:56:19:49:CB:18:E3:D4:9B:74:7F:F7:D0:46:F4:2C:B2:F0:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/99D0561949CB18E3D49B747FF7D046F42CB2F06C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22
                IPv6:
                  2804:6bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270426

    Signature Algorithm: sha256WithRSAEncryption
         82:17:d5:fd:9d:ba:af:60:42:ee:eb:8b:53:eb:ce:77:d8:44:
         89:6a:4e:4d:fb:51:fc:f9:c2:2b:92:39:c6:bd:52:6a:52:ad:
         40:ce:17:e8:5b:85:05:0f:50:d4:d6:93:37:a1:de:48:be:9e:
         56:84:80:ba:28:2f:d2:e8:31:71:3b:fc:07:16:b6:d3:23:9e:
         5e:58:f3:e0:37:9d:1f:f3:53:93:db:6d:7b:94:93:8c:99:05:
         67:a2:09:53:03:df:b0:12:85:6c:b4:7f:c3:40:bb:0b:20:ee:
         f5:fb:86:52:e7:27:40:99:f0:21:bb:5d:9b:6b:30:83:78:e2:
         15:af:09:2a:0a:9b:5f:d6:b7:bf:8f:75:ff:b9:39:d7:f1:20:
         ed:7f:e6:58:e4:7a:9a:2d:1a:ed:6b:79:cf:b8:f7:b6:29:4e:
         7f:21:ed:cd:4e:05:b9:27:c1:ed:a7:91:49:28:f8:5e:70:77:
         f6:f0:06:42:11:c4:ad:fb:d5:2f:f7:aa:69:be:64:62:b1:b5:
         df:d0:d1:95:b3:a3:ca:40:db:bf:c1:42:13:12:2e:fa:9b:ee:
         b6:94:ce:dd:37:3d:44:4b:da:72:5c:d8:77:5e:1e:16:44:fc:
         98:86:39:d2:86:cc:99:ab:86:64:9a:ac:0d:43:e2:d7:c9:c7:
         13:56:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org