Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
File:                     B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer (raw, json)
Hash identifier:          tClWasscacF9Yeg1kcIXjBURrZIpON75jUHkLOUeyyE=
Subject key identifier:   B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BBDE75BE63D768A2BDDD34B4CE9C669B5234075
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:28:45 +0000
Certificate not after:    Thu 03 Apr 2025 12:33:45 +0000
Subordinate resources:    AS: 262502
                          IP: 167.250.80.0/22
                          IP: 177.66.184.0/21
                          IP: 190.7.176.0/20
                          IP: 2804:18a8::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 18:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bd:e7:5b:e6:3d:76:8a:2b:dd:d3:4b:4c:e9:c6:69:b5:23:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:28:45 2024 GMT
            Not After : Apr  3 12:33:45 2025 GMT
        Subject: CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:e9:5b:f7:2d:4e:71:60:95:84:4c:c6:f7:
                    e6:ed:be:2f:4d:94:27:71:c1:84:4c:6e:96:d0:a5:
                    fa:ae:0a:83:a2:f0:7c:2d:d8:9e:ea:7d:b6:74:1a:
                    87:ed:ec:83:98:4c:13:c0:b5:3c:45:1a:e1:56:e2:
                    5b:58:ab:4f:68:bc:7d:4e:c3:df:99:66:7e:ce:70:
                    e0:62:aa:2a:4e:09:eb:46:86:df:02:30:b1:44:0e:
                    6b:76:26:c7:24:8b:aa:10:83:fa:b1:20:99:38:b0:
                    95:6b:e2:92:fa:3e:62:c7:69:e3:b9:c8:27:97:46:
                    f8:74:f9:79:a8:ea:1e:2e:ba:20:41:bd:7a:20:a2:
                    ec:9f:ee:52:73:a1:0a:11:d4:a2:5f:44:be:39:c3:
                    1c:66:fc:b1:9a:e1:ba:51:c5:71:97:d8:13:fd:60:
                    8f:e4:6f:09:99:6d:a3:b7:f8:71:cf:84:b3:2b:b4:
                    3f:02:bc:6d:db:27:75:bd:09:01:5f:bd:da:e3:da:
                    8d:92:00:79:6b:c3:aa:64:00:ed:e8:7a:94:e4:d7:
                    77:8d:59:47:2c:0b:d7:b3:c6:b2:3e:4a:62:ac:35:
                    3b:e0:10:73:ec:e4:72:46:46:af:5d:0b:f2:51:23:
                    2d:47:f7:b7:1c:86:04:08:c1:60:74:7c:f7:0a:e5:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.80.0/22
                  177.66.184.0/21
                  190.7.176.0/20
                IPv6:
                  2804:18a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262502

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:5c:2a:aa:23:59:39:35:88:37:00:8d:7c:f7:10:c7:2b:
         65:fc:3b:ac:04:64:72:d7:26:9d:16:8a:b5:4f:1f:9b:e9:5c:
         68:e5:d2:0d:9c:27:f1:d7:1f:9f:be:03:6e:c5:15:1d:15:8d:
         cd:13:65:e7:43:18:06:36:f8:aa:38:be:89:12:1e:55:3d:a8:
         5b:08:8c:c4:07:2f:6b:b3:bb:13:1e:54:72:28:ee:52:30:69:
         23:75:03:47:21:0b:b1:5b:70:73:73:91:fc:7c:3a:dd:7b:85:
         27:57:76:fc:9d:05:4a:51:a5:a7:38:2d:a8:3e:7a:f4:64:89:
         ef:2c:3f:c7:ee:9e:b2:14:07:78:97:c6:df:06:31:46:31:be:
         8e:4e:eb:65:b4:8f:d2:ae:2f:5c:fa:16:77:f3:6d:4f:c2:38:
         6b:de:d9:46:4d:37:98:ba:56:95:f8:4b:c2:31:d2:82:40:95:
         8a:7f:4b:15:35:90:5c:7f:28:7e:1e:65:48:c3:88:f9:6d:48:
         6c:4c:4b:bf:b2:48:7a:1e:11:71:6d:f1:cc:71:05:4e:27:9d:
         66:09:41:85:cb:83:03:75:99:63:a6:65:6c:72:d5:24:49:29:
         c4:f8:27:15:51:56:e2:ab:c7:f1:90:b1:ff:98:9c:99:64:2e:
         7a:c1:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org