Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.cer
File:                     99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.cer (raw, json)
Hash identifier:          FV16HJQVibNKm3oKp8tdM0He/LZi5QzX15wZi81wXfc=
Subject key identifier:   99:D9:1B:7B:67:34:CF:F6:2B:36:4E:11:AA:B9:A9:56:FA:A5:E1:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F60FF7E992A3CA4BB2155375FC48DA0A5BCF169
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:22:28 +0000
Certificate not after:    Thu 03 Apr 2025 04:27:28 +0000
Subordinate resources:    AS: 268413
                          IP: 45.160.180.0/22
                          IP: 2804:50d4::/32

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:60:ff:7e:99:2a:3c:a4:bb:21:55:37:5f:c4:8d:a0:a5:bc:f1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:22:28 2024 GMT
            Not After : Apr  3 04:27:28 2025 GMT
        Subject: CN=99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:78:c1:69:c8:1a:f6:18:a6:46:92:3b:38:
                    82:ef:bb:24:c5:6a:19:2a:89:83:51:dc:72:6d:b3:
                    d2:60:30:3e:08:2b:c0:bd:a6:7c:f4:88:5d:bc:cd:
                    3e:27:2d:57:db:a6:7c:34:eb:3b:21:66:e9:18:83:
                    ba:9d:5c:5b:7c:36:53:f2:4b:8a:47:8c:99:02:fd:
                    76:be:c5:b9:d0:0d:15:eb:59:b9:01:f4:86:0d:bd:
                    74:5a:9c:6a:45:98:8f:2c:ee:cd:6a:eb:7b:bc:ad:
                    23:ff:af:88:a7:18:77:11:06:1b:a1:bd:d3:26:ec:
                    07:84:e4:3c:66:f6:7e:8e:4b:18:cd:1a:27:fd:39:
                    d2:a5:a7:72:df:e4:e6:46:e7:b4:56:df:2d:0b:c4:
                    cc:a1:1c:fb:e0:5a:fc:90:ed:03:d6:98:b1:2b:b7:
                    e3:d1:9a:a1:c1:2d:65:3a:0c:7b:6d:3a:ae:b4:fe:
                    cd:4a:23:67:c8:53:bf:f9:a5:89:3d:da:bd:1e:f9:
                    72:20:26:93:84:18:23:33:c2:24:49:d5:fe:89:3f:
                    bd:37:5d:14:38:50:1a:8b:5b:75:6c:d7:27:c4:ef:
                    f6:8a:38:17:1f:3a:cf:fd:e7:0c:b3:97:f0:e6:2f:
                    12:fe:39:2f:79:4e:ca:82:44:8b:54:e5:a1:9f:5c:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:D9:1B:7B:67:34:CF:F6:2B:36:4E:11:AA:B9:A9:56:FA:A5:E1:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.180.0/22
                IPv6:
                  2804:50d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268413

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:1f:43:05:61:09:83:73:d2:fe:48:2c:cb:9c:52:0b:46:
         9d:c4:19:a2:62:e9:b1:b0:f2:75:7b:a0:fe:fb:a5:ba:00:1f:
         46:db:e8:ae:3b:5b:66:07:d9:62:38:c2:66:d0:77:5b:f5:9c:
         54:ca:2f:2a:c0:2c:89:7f:86:71:a0:c1:5b:dd:a9:78:cd:61:
         59:50:39:34:71:ee:bf:49:db:b1:46:84:36:43:08:33:6e:17:
         d0:79:53:74:74:7e:8d:cc:54:84:36:40:73:da:e6:d2:27:12:
         4c:67:90:9e:40:ae:66:a5:8e:27:02:97:1e:7b:10:d6:fc:d1:
         06:30:05:72:eb:67:bb:eb:e7:94:d0:8f:79:ec:48:06:c0:e2:
         48:e0:1a:2c:1b:e5:99:ce:c0:b3:79:2f:62:42:4d:51:52:3c:
         d7:fc:50:03:a9:ae:61:c7:b1:6f:fe:f5:33:0d:ad:10:9e:dd:
         e9:ee:2f:fa:bf:11:5a:50:3d:2b:a4:bf:d9:cb:b7:5a:9d:ec:
         77:af:a4:34:ce:3b:4d:38:f0:9b:8a:20:60:92:c4:15:15:6c:
         4c:13:e1:11:29:d7:77:aa:3a:b0:8c:b7:4a:01:34:0a:ed:16:
         d4:60:ac:bb:3e:0c:4c:d1:39:a4:4e:7f:a5:55:a6:00:28:0e:
         6a:27:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org