Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B143098A1B44489C70A871CE36309BA60CDA855D.cer
File:                     B143098A1B44489C70A871CE36309BA60CDA855D.cer (raw, json)
Hash identifier:          kMadxidkzeib9tyDMugjwK62CqscBQpl1VhckbE6uQs=
Subject key identifier:   B1:43:09:8A:1B:44:48:9C:70:A8:71:CE:36:30:9B:A6:0C:DA:85:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79E78D0CF863FEF317C8DCEE9D9928A9BFD1B167
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jun 2024 12:54:42 +0000
Certificate not after:    Wed 04 Jun 2025 12:59:42 +0000
Subordinate resources:    AS: 265470
                          IP: 168.196.204.0/22
                          IP: 2804:34a4::/32

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 19:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e7:8d:0c:f8:63:fe:f3:17:c8:dc:ee:9d:99:28:a9:bf:d1:b1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 12:54:42 2024 GMT
            Not After : Jun  4 12:59:42 2025 GMT
        Subject: CN=B143098A1B44489C70A871CE36309BA60CDA855D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:9a:a5:a1:f2:c7:42:d0:8e:9d:ed:db:5a:
                    87:f8:e2:47:bc:7b:c2:82:42:de:95:55:0c:2d:28:
                    b6:05:c4:51:95:a0:39:d5:54:6f:ac:e1:e5:73:e7:
                    3c:aa:9a:15:5d:0a:0f:31:47:38:cb:ef:63:c2:cc:
                    2a:05:ed:6c:12:5f:f4:cb:e1:6a:c8:74:ed:30:1b:
                    97:1d:ba:2b:e7:67:8f:2d:4b:b3:ba:83:9d:40:16:
                    97:9c:f3:3f:21:f4:c1:5d:64:a2:da:7a:e4:26:55:
                    84:a0:00:1f:a4:e0:58:fc:2b:74:f7:22:d1:b1:29:
                    95:0d:40:9f:fb:23:76:fd:c5:96:24:cd:a0:a2:c5:
                    11:1a:49:47:4a:85:ba:1c:07:e1:6d:6c:0b:fb:64:
                    8d:23:73:d8:d9:c6:ef:f3:63:fe:a0:b5:d8:16:d4:
                    a5:22:28:3f:b6:4e:b5:77:ce:d9:ab:20:79:63:b3:
                    4d:ae:98:35:ba:18:2f:29:cf:69:47:d2:a5:62:5a:
                    d2:2f:68:78:1a:98:b3:05:a3:e0:c4:2e:85:8a:d4:
                    cf:a5:06:67:00:f3:02:15:b8:e3:85:eb:b6:b7:ad:
                    75:a7:ee:21:47:13:77:72:24:17:9e:a3:92:b6:9f:
                    9f:83:51:2a:c0:95:79:9b:88:9a:3b:70:dc:36:b6:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:43:09:8A:1B:44:48:9C:70:A8:71:CE:36:30:9B:A6:0C:DA:85:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/22
                IPv6:
                  2804:34a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265470

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:86:db:6c:30:37:09:82:cf:08:d5:e4:d9:5c:a1:5c:8c:
         af:e4:cc:01:98:aa:ce:ac:e8:fa:e9:d7:f2:9f:24:77:16:58:
         02:1d:8c:2f:89:7d:f4:4f:46:ca:7e:f1:d5:b0:e7:bb:7e:9a:
         84:93:a1:d8:f1:74:df:99:dc:e2:7d:12:52:e1:01:f5:13:63:
         51:d3:c2:e2:c1:59:44:06:99:f7:aa:79:76:81:d1:dc:42:a8:
         ab:01:00:96:df:73:d7:0c:24:fd:30:a2:c8:39:6d:4f:32:04:
         c0:d7:9e:dc:2c:4e:d5:a0:2a:61:08:f7:ab:84:bb:e4:16:df:
         49:28:6e:18:30:ea:0b:3c:17:88:d2:24:5c:db:ac:40:f8:78:
         87:98:09:76:39:fc:96:30:74:04:8f:1a:c3:a0:8d:4b:2b:f4:
         b7:74:f4:0f:d5:0a:40:e8:75:52:78:42:f2:41:83:67:84:80:
         df:f8:64:5f:48:98:69:7b:84:f6:93:25:58:f6:11:e0:2b:fa:
         4c:a9:dd:1c:13:42:f5:03:0d:e1:f5:03:23:ce:4a:af:02:04:
         22:68:31:7c:4a:b1:06:e1:04:4f:d9:68:0b:88:d6:9f:82:4a:
         3b:b2:29:b2:3c:aa:b7:eb:9f:02:10:e7:1a:42:69:f2:bb:05:
         63:db:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:36:08 2024 by rpki-client on console-ams.rpki-client.org