Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer
File:                     9B51B15273976450E1F7907A02174B498E4E9C95.cer (raw, json)
Hash identifier:          X8zDGsDFmAoki+42CQkqzuS/4TsO6g70VP+cCDZlgDQ=
Subject key identifier:   9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E79EA762DF722D830939A829C20645C834007D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/9B51B15273976450E1F7907A02174B498E4E9C95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:07 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:07 +0000
Subordinate resources:    AS: 269425
                          IP: 45.186.32.0/22
                          IP: 2804:6464::/32

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 16:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:79:ea:76:2d:f7:22:d8:30:93:9a:82:9c:20:64:5c:83:40:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=9B51B15273976450E1F7907A02174B498E4E9C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a5:22:4a:43:31:63:36:22:d0:4a:99:af:ce:
                    cd:39:84:0d:d0:e5:4e:8d:16:28:e5:90:6d:b6:a9:
                    cf:4b:55:6b:a5:ca:2f:72:90:29:b2:86:9e:97:32:
                    6d:5e:96:fa:56:86:91:76:80:55:1b:d8:ee:ee:72:
                    c6:07:e1:cf:e9:1c:e0:fd:d1:48:e0:05:6b:ca:90:
                    ea:41:77:b2:71:45:84:cc:c2:48:91:7d:e8:50:0e:
                    60:f4:e7:33:c1:08:b6:da:9e:a0:62:71:d3:72:10:
                    75:d3:2d:43:43:70:54:5c:f7:df:c0:fe:45:e5:8b:
                    e2:12:a9:5d:88:24:0f:a1:e6:73:0d:e1:e1:3e:d5:
                    c7:95:5c:da:9b:7f:e9:c1:09:1e:ca:8c:ed:32:77:
                    46:7a:54:dd:b0:cd:1a:7b:86:ac:7c:33:8f:0e:87:
                    ca:1f:65:12:f6:77:a2:c4:fe:3e:ef:08:e8:38:bf:
                    dc:18:bf:9c:fc:7f:65:16:0e:79:03:68:76:c7:07:
                    da:b9:47:8b:0d:02:48:96:93:cc:ef:dc:1e:f9:8a:
                    03:3d:8b:37:2a:d7:1c:7d:b2:68:d3:65:fc:46:09:
                    66:fa:cb:af:4c:9f:ae:51:bd:8f:bb:90:ea:90:6c:
                    2d:a7:25:cf:f8:30:cb:52:f4:19:e9:0f:f0:71:53:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/9B51B15273976450E1F7907A02174B498E4E9C95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22
                IPv6:
                  2804:6464::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269425

    Signature Algorithm: sha256WithRSAEncryption
         72:df:8f:35:a8:84:b4:a1:43:fd:e6:40:6a:cd:af:f1:7f:4b:
         39:c8:d2:d9:d5:02:1a:1c:d6:d3:ee:be:bc:87:54:51:cf:d4:
         66:7c:25:37:78:4d:a4:5a:eb:bc:13:71:4e:23:73:2b:96:8f:
         20:1c:2d:4e:2f:7e:df:e2:a4:f5:9b:39:ef:a7:ac:5f:0c:9b:
         9e:6e:45:18:e0:80:3b:8b:e3:d1:41:d6:41:8c:53:ca:cd:c3:
         87:b0:23:33:a5:3f:0a:f5:f8:99:eb:f9:db:d5:19:91:f2:b2:
         97:46:3b:25:6c:7b:3f:06:e2:8b:7b:eb:e7:42:91:95:6a:3f:
         c9:7e:96:09:d8:93:75:dd:80:5b:fc:65:f7:4c:80:c6:7c:54:
         a8:de:13:56:24:3c:e3:15:22:70:20:b6:20:a6:47:be:af:4b:
         f1:07:d5:ba:88:36:ac:66:a0:b6:cb:61:57:38:a2:61:eb:95:
         e2:1d:b8:62:5c:6b:c5:60:2a:31:5b:dd:1b:39:57:ca:53:dc:
         aa:11:a9:86:e9:1f:19:17:3c:bc:2d:8d:c0:79:5f:1f:6d:22:
         7a:92:8e:13:20:82:33:ac:6e:3a:fa:f5:ca:d5:8c:8c:61:75:
         70:3e:c9:80:c6:1d:a4:1f:43:8b:81:7c:88:46:4c:cd:0a:ba:
         5e:9f:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:59 2024 by rpki-client on console-ams.rpki-client.org