Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CB027AE1BD919835115690373E042C5FECD871B.cer
File:                     9CB027AE1BD919835115690373E042C5FECD871B.cer (raw, json)
Hash identifier:          BHv8VEUbjwPgkyUEUOsa9TFTrZ9CyPiFqCMbtjZGJRk=
Subject key identifier:   9C:B0:27:AE:1B:D9:19:83:51:15:69:03:73:E0:42:C5:FE:CD:87:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       722205930F9BADE71E9D442ED59D000AD1789421
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/9CB027AE1BD919835115690373E042C5FECD871B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:14:25 +0000
Certificate not after:    Thu 03 Apr 2025 06:19:25 +0000
Subordinate resources:    AS: 52999
                          IP: 168.195.68.0/22
                          IP: 177.66.32.0/21
                          IP: 186.216.216.0/21
                          IP: 186.226.96.0/20
                          IP: 2804:508::/32

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:05:93:0f:9b:ad:e7:1e:9d:44:2e:d5:9d:00:0a:d1:78:94:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:14:25 2024 GMT
            Not After : Apr  3 06:19:25 2025 GMT
        Subject: CN=9CB027AE1BD919835115690373E042C5FECD871B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:d7:a4:4c:ca:c0:85:c8:a0:3f:3a:d0:2f:
                    35:3d:c4:be:f9:cd:82:68:73:12:8a:93:c3:80:e7:
                    ab:a1:74:99:87:f8:5b:f0:b7:71:47:22:5c:6f:ce:
                    d2:8d:13:85:0b:46:07:c8:fa:25:3d:81:2e:d3:89:
                    9c:f5:ed:1f:10:21:ed:68:b2:a9:1f:67:3b:26:28:
                    2c:0a:97:70:3d:ee:70:0b:95:72:b9:db:7b:59:a4:
                    20:ac:61:26:e7:e9:86:92:68:0d:01:07:ee:2e:ff:
                    95:eb:c0:0f:9c:68:87:30:93:73:f5:51:e6:d7:b1:
                    ea:f2:e9:a3:c0:e2:f9:f1:54:1b:82:c2:2a:1a:e9:
                    10:21:69:64:c7:a8:48:40:7e:1e:f9:03:91:39:fe:
                    2d:db:4f:e2:80:71:e3:56:b0:77:f0:ba:af:57:e3:
                    d9:1e:0b:b1:88:bd:ef:20:67:06:fe:b2:83:fc:05:
                    49:66:a7:7a:2d:1c:d4:9c:a8:69:dd:5a:ce:9a:00:
                    70:1d:f7:48:b4:f3:43:06:69:db:6d:5e:fa:a8:5e:
                    30:84:84:ea:50:dd:e3:a6:11:46:98:63:77:18:89:
                    8e:1b:57:a6:ec:0b:1f:d1:41:c9:ee:d2:46:2a:a7:
                    40:1d:00:db:ea:59:65:7c:43:73:b8:9a:ea:32:50:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:B0:27:AE:1B:D9:19:83:51:15:69:03:73:E0:42:C5:FE:CD:87:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/9CB027AE1BD919835115690373E042C5FECD871B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.68.0/22
                  177.66.32.0/21
                  186.216.216.0/21
                  186.226.96.0/20
                IPv6:
                  2804:508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52999

    Signature Algorithm: sha256WithRSAEncryption
         04:21:aa:c7:3f:ab:25:5a:8f:be:d3:b2:48:82:b8:7c:57:99:
         c3:fa:27:9e:3c:89:e3:06:52:b8:75:42:e5:74:0a:64:d7:f6:
         3d:11:15:55:da:75:86:bf:88:b3:ab:09:b0:c5:77:f7:fe:27:
         80:af:e2:f9:46:52:97:4f:e1:2b:79:c2:b2:52:88:92:84:4f:
         b3:ce:c1:d2:2c:1b:b4:c8:0f:a0:6e:16:ef:7e:63:19:b5:92:
         8a:a5:d9:3c:61:8d:e9:8c:fd:e0:b7:08:08:0f:39:07:c1:b4:
         e1:ca:7b:85:86:d9:7a:9e:73:11:79:1c:86:12:04:53:53:d7:
         40:51:d8:df:92:37:20:cb:23:80:9a:53:f8:6a:bb:ee:7c:14:
         33:54:75:56:da:2e:30:05:63:3b:66:f6:f3:a4:b8:3e:e0:28:
         08:5a:d8:61:15:92:9f:48:14:2a:81:ef:39:38:48:38:00:a9:
         8d:38:82:08:98:4d:ad:75:58:bd:ac:0f:4c:49:b7:15:9e:e5:
         45:1e:03:c9:7c:94:a0:08:77:d5:34:aa:71:73:44:d7:2e:26:
         7d:be:2a:c1:1c:be:62:96:28:8e:b2:a8:5f:47:30:8b:90:1d:
         7d:f6:54:30:ef:46:09:5a:f9:4a:76:eb:a9:69:0f:c8:4a:1f:
         f2:fa:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org