Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
File:                     AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer (raw, json)
Hash identifier:          AOuNnAdWCPgMsDSJo1FojV30NomKYNLGK5X7ha+YGj0=
Subject key identifier:   AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0590EA64DFAED575F81B4D41ED9115511E110AA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:15:50 +0000
Certificate not after:    Thu 03 Apr 2025 15:20:50 +0000
Subordinate resources:    AS: 265140
                          IP: 143.255.0.0/22
                          IP: 2804:2b34::/32

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 14:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:90:ea:64:df:ae:d5:75:f8:1b:4d:41:ed:91:15:51:1e:11:0a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:15:50 2024 GMT
            Not After : Apr  3 15:20:50 2025 GMT
        Subject: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:12:32:44:b2:c9:63:6e:e0:f7:6a:e0:56:
                    ab:4a:fa:0f:de:e4:85:be:e6:65:67:5b:c6:57:ed:
                    74:93:49:d4:9d:7a:9e:44:7f:bc:5e:f5:6e:9e:f0:
                    40:c2:b0:88:0f:d4:c2:f7:ba:2a:90:fa:ff:64:0d:
                    7a:4f:07:39:2b:b8:c1:1c:aa:ca:15:5f:ed:61:80:
                    df:c6:91:06:8e:76:df:85:be:36:88:4c:e8:48:d9:
                    b4:9a:88:e3:49:7f:35:b8:77:c8:f5:97:73:39:b4:
                    c1:84:59:65:7b:40:ac:64:b9:1f:16:6b:0c:cc:b3:
                    dd:14:49:f2:e6:0c:da:d9:d4:6d:47:b4:f4:06:74:
                    1a:94:61:9e:12:b3:5e:e0:73:e5:e2:f9:40:ac:6a:
                    b2:23:41:06:a0:f1:97:2f:44:be:a9:b3:56:a2:c1:
                    a1:e7:80:72:bd:fe:db:e0:64:22:5f:2e:11:dd:41:
                    3e:52:b8:2a:32:99:50:08:0b:1e:bc:24:2e:59:2b:
                    5b:79:18:6c:49:0f:e1:3e:46:8b:12:f2:3f:10:57:
                    f7:0e:df:b2:df:22:22:ed:76:0b:ef:f3:f5:ee:66:
                    42:0f:16:2d:0f:ac:f1:a0:ab:cc:a4:8d:e1:fd:f6:
                    2a:b8:3b:b1:13:18:1f:0d:cc:49:95:6a:ea:6a:bc:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22
                IPv6:
                  2804:2b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265140

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:a4:3b:b3:1d:a5:37:3c:33:d3:b8:1a:13:0b:b6:f9:41:
         cf:58:bd:08:18:22:3f:31:4f:cc:9a:fe:a6:42:4a:a0:69:c4:
         f6:ec:c5:6a:24:ac:b4:ca:23:e9:ac:26:fe:1b:c7:5e:06:c2:
         f9:9c:56:8a:31:53:f2:e9:a4:d4:fb:4a:d4:3c:d9:86:8d:fd:
         2a:73:99:bf:67:2b:86:68:7d:cd:8b:cd:3f:ca:a4:8a:0e:ba:
         01:be:97:f7:67:81:74:f9:79:4f:06:45:e3:cd:48:9c:a6:60:
         dd:0f:5f:fc:eb:5d:91:83:70:b0:69:75:f4:c8:ba:7c:38:2f:
         3a:3e:7b:5d:f6:a7:11:22:1f:2e:d4:b6:20:5b:4b:33:00:14:
         82:93:6f:de:7d:0e:51:93:90:fe:24:4a:70:95:ec:39:2c:a6:
         08:3a:b0:14:1b:7c:82:66:a6:d9:7d:fb:45:0c:05:98:61:f4:
         53:04:4b:59:7d:ad:36:32:f3:aa:c0:60:f4:54:57:65:ec:55:
         58:24:a1:2a:bb:46:4f:78:b5:b8:42:63:d6:13:92:3d:ea:64:
         0b:46:ee:fc:b3:5f:42:98:c5:5c:31:2a:c9:e9:b0:d2:38:d5:
         b3:a7:ce:86:f8:05:33:d4:ab:ac:ef:31:df:13:fd:c6:73:78:
         60:17:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org