Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
File:                     A68038F934F5E622FA09D5ED3CCBF64D92391162.cer (raw, json)
Hash identifier:          badufD1ygeUSIwkC87rVKEFIdHDFaJCEGQ7NQpEqXD4=
Subject key identifier:   A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EE0D328DCD487D171EB3E4993146319C315AB44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:20:56 +0000
Certificate not after:    Thu 03 Apr 2025 10:25:56 +0000
Subordinate resources:    AS: 268786
                          IP: 45.172.168.0/22
                          IP: 2804:5aa4::/32

Validation:               Failed, certificate revoked on Tue 21 May 2024 19:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e0:d3:28:dc:d4:87:d1:71:eb:3e:49:93:14:63:19:c3:15:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:20:56 2024 GMT
            Not After : Apr  3 10:25:56 2025 GMT
        Subject: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:98:fd:0c:1e:44:e5:27:6e:83:be:c6:ad:
                    00:38:bd:06:59:60:77:0e:56:63:ac:0d:b6:65:e1:
                    16:b9:72:75:01:9c:ff:59:23:13:b9:f0:ce:58:ba:
                    e1:a7:02:d9:1b:33:25:89:f0:ca:e2:e6:32:62:1a:
                    8b:d5:6b:ec:16:8a:8d:01:22:0b:a3:63:d6:44:8a:
                    8d:b8:3a:3e:24:dd:cf:1f:56:62:a5:2f:cf:5a:5f:
                    98:c0:f0:cd:b7:38:f8:ca:7b:3b:f1:ca:ce:c2:4d:
                    e2:4b:ab:9f:50:92:b8:cf:f7:82:0f:3e:77:bf:1f:
                    fc:25:80:13:fd:fb:f2:9f:6d:3f:3a:80:9a:99:c1:
                    26:5c:f2:83:b1:29:cb:58:b8:58:b7:89:24:fc:da:
                    44:f0:b4:b3:2b:3e:dd:37:4a:22:1d:be:7b:06:30:
                    d3:31:97:fe:c0:1d:b1:38:6d:dc:88:fa:fc:94:3d:
                    80:3a:ea:80:a9:b2:18:bd:3c:18:e8:a9:97:15:f4:
                    6d:9a:cf:5f:75:01:4c:d0:ab:c5:70:de:2e:94:3a:
                    f3:f5:11:40:06:1f:73:0d:f7:64:79:52:9e:e0:3b:
                    39:9d:fb:b2:28:81:83:05:44:2e:4d:97:8d:57:01:
                    f1:32:2e:49:77:72:8d:f8:90:f7:8d:9c:82:e6:1e:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/22
                IPv6:
                  2804:5aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268786

    Signature Algorithm: sha256WithRSAEncryption
         1d:9b:f1:9f:5e:e8:8a:8a:06:cb:0c:a9:8c:4b:7b:16:72:2a:
         55:35:0e:9b:81:48:8f:4f:85:46:7d:28:25:4c:0c:a8:34:12:
         1d:8a:f0:f6:6a:ae:69:84:f4:61:1c:0a:0c:6a:2a:a1:38:66:
         36:a6:7d:ab:38:b1:c5:31:2c:30:ea:80:7b:88:71:77:f5:be:
         f5:84:a2:c5:fe:74:ea:c2:9a:01:ce:5c:e0:86:28:c2:bc:04:
         37:9f:9e:14:9c:76:10:df:91:f8:33:ee:84:67:98:7a:02:29:
         6b:09:20:c1:a7:40:09:82:16:ab:4a:6d:f0:39:c2:57:eb:26:
         89:f0:d2:f1:5f:a0:08:b1:80:b4:a6:ac:3b:77:5e:de:ef:8d:
         d3:14:65:57:88:b4:9f:45:97:b6:fd:45:58:b8:ab:f4:d8:82:
         da:2b:d0:8e:d7:82:88:16:63:f3:8f:c8:0a:19:60:60:9f:f8:
         a1:d9:41:55:0b:94:79:51:9e:37:0a:a7:ae:29:ac:bb:7c:77:
         ec:7b:e8:dc:e0:d5:a4:c3:96:f1:de:a1:0d:a3:52:52:97:ee:
         2e:b3:c5:69:a0:8b:b4:6f:40:02:23:20:4f:ea:d8:0c:04:21:
         93:2d:b3:9d:6a:2d:14:16:1f:05:fc:98:9b:24:eb:f9:f5:c8:
         ec:f8:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:40 2024 by rpki-client on console-fra.rpki-client.org