Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.cer
File:                     B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.cer (raw, json)
Hash identifier:          9AP+iCPhRdyj1NUGiTh7QhFtcZZoL/K+b3khmJVkXC4=
Subject key identifier:   B1:9C:21:AC:72:1B:DB:A8:D3:EE:C4:A7:0A:33:FB:77:8A:84:14:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42A8D5016A43C63AD0137A047C9AD98DA50C173D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:33:57 +0000
Certificate not after:    Wed 02 Apr 2025 22:38:57 +0000
Subordinate resources:    AS: 263362
                          IP: 191.37.152.0/21
                          IP: 2804:14f8::/32

Validation:               Failed, certificate revoked on Thu 02 May 2024 14:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a8:d5:01:6a:43:c6:3a:d0:13:7a:04:7c:9a:d9:8d:a5:0c:17:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:33:57 2024 GMT
            Not After : Apr  2 22:38:57 2025 GMT
        Subject: CN=B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:39:4e:78:a9:b7:88:b1:5f:29:e7:97:dd:
                    51:40:f8:48:54:d5:19:69:be:5d:11:55:d1:fa:00:
                    21:a3:95:1a:02:58:66:98:65:f1:6d:46:7f:d5:01:
                    18:cc:5b:1b:e0:57:a1:a0:3d:80:04:98:46:d7:00:
                    85:d6:b1:65:48:9a:cf:33:84:85:49:9d:5e:53:2c:
                    21:6f:d1:b1:9d:50:ba:66:f4:50:69:0e:00:e8:d7:
                    41:dc:fe:a4:92:ab:f4:80:4b:56:2b:7b:22:d1:5f:
                    a8:22:be:bf:12:7d:5d:aa:89:9b:10:46:88:c4:e7:
                    60:58:89:85:c2:8b:10:c4:38:0a:f4:4b:e0:2a:48:
                    bd:f3:65:e4:a2:dd:4e:50:27:ef:22:67:68:5b:c8:
                    98:38:da:6d:68:c2:fe:70:0e:7e:37:f6:46:08:67:
                    36:2d:3f:f2:f5:c1:d7:30:63:01:9c:bf:e4:5f:2f:
                    07:b3:bc:14:f1:6d:93:74:ba:ce:ad:20:19:d3:d3:
                    fa:3c:ad:5a:15:b9:95:9b:ce:54:14:fd:17:9b:aa:
                    05:66:c0:d2:75:72:7a:50:51:d9:b3:34:17:94:5e:
                    1e:5a:80:7f:2a:52:a0:4c:c0:5e:fb:33:ea:5e:be:
                    3b:57:54:59:43:54:2c:0a:31:f0:bc:50:46:5c:9e:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:9C:21:AC:72:1B:DB:A8:D3:EE:C4:A7:0A:33:FB:77:8A:84:14:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.152.0/21
                IPv6:
                  2804:14f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263362

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:dd:08:7e:51:e6:6f:6b:df:1f:12:94:cb:d2:a1:2f:74:
         9a:69:3a:e0:e7:ab:c8:dc:24:6f:3f:39:1f:56:5e:da:f2:02:
         bb:d8:94:36:60:c0:8a:e9:e1:bd:5d:48:59:54:da:86:0d:28:
         0b:35:5b:3c:ab:7a:3c:05:df:0b:6b:67:11:b9:cd:14:45:f5:
         20:5c:48:d3:74:b6:1a:7f:91:47:fb:33:2a:51:d2:20:75:ae:
         d7:48:12:88:7a:e4:83:f5:35:56:5d:13:35:17:c5:96:a9:27:
         70:e8:68:c6:38:b1:33:1b:76:af:53:d4:24:18:89:48:e0:dc:
         dd:31:be:f0:bd:6d:d6:64:f8:f7:6f:a8:8c:10:23:b8:7c:20:
         f2:60:6e:b3:11:f2:36:95:2b:21:d0:c4:18:28:79:a7:35:65:
         72:00:bb:43:3a:81:37:ab:84:0a:e4:d1:a6:95:92:71:09:7c:
         d0:f0:e9:a9:8a:23:aa:74:cf:2e:b4:45:e0:23:5e:52:e9:db:
         4c:54:85:91:33:33:de:d8:86:de:45:72:f0:22:c5:43:f3:e4:
         fb:68:0a:e9:08:10:fd:ff:cf:0b:69:3d:4f:d1:0a:e7:54:4a:
         e8:45:79:a2:64:44:01:d2:e6:ba:ce:9c:ed:42:b9:d8:20:52:
         ee:3f:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org