Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B2656F33069A7B169CAFB7DD6A5A568D125227E3.cer
File:                     B2656F33069A7B169CAFB7DD6A5A568D125227E3.cer (raw, json)
Hash identifier:          aOUtJ4HbKGJzoCkOmsy9hcKdMImlrKArO4uzCuovNgo=
Subject key identifier:   B2:65:6F:33:06:9A:7B:16:9C:AF:B7:DD:6A:5A:56:8D:12:52:27:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5036B8436B8B47F0F0E27F98D718303D62432C36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/B2656F33069A7B169CAFB7DD6A5A568D125227E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jul 2024 01:16:58 +0000
Certificate not after:    Wed 23 Jul 2025 01:21:58 +0000
Subordinate resources:    AS: 52973
                          IP: 186.216.192.0/20
                          IP: 2804:3b00::/32

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 14:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:36:b8:43:6b:8b:47:f0:f0:e2:7f:98:d7:18:30:3d:62:43:2c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 01:16:58 2024 GMT
            Not After : Jul 23 01:21:58 2025 GMT
        Subject: CN=B2656F33069A7B169CAFB7DD6A5A568D125227E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:e9:d9:67:bd:4f:db:e7:e3:68:d8:b5:0f:
                    ec:ed:6f:e4:9e:57:b8:4d:72:ef:38:d4:56:10:92:
                    4a:7d:9e:80:3f:e8:2f:72:5d:67:37:a1:e8:47:c6:
                    98:4d:96:8e:57:03:03:ad:82:90:a7:53:be:c6:7d:
                    36:ee:1f:09:32:16:c9:36:7b:51:bc:45:3c:50:b0:
                    ae:b1:a9:1c:18:d7:97:5b:ff:21:99:c6:86:a5:d5:
                    97:fb:2e:4f:5a:d9:d5:29:0e:a2:7d:17:cc:c1:8c:
                    50:98:aa:79:3f:be:bc:48:51:ed:85:2f:34:14:86:
                    03:47:0d:fe:12:54:05:f6:86:7f:11:9d:e2:6f:e4:
                    07:14:07:28:5e:69:c0:0c:59:d3:cc:5c:dc:b0:3b:
                    d0:98:2f:5f:4e:4d:61:6a:e7:3c:33:19:d8:c1:57:
                    b4:09:a5:96:4a:8e:6d:be:2d:3d:08:c0:0f:04:df:
                    b5:a2:9d:9f:56:e5:1f:a2:22:e4:3d:61:40:10:db:
                    b3:f6:02:ca:92:59:93:b7:1f:05:a8:30:f0:62:23:
                    ce:22:36:c7:27:b0:48:d3:10:3b:a3:65:e4:af:78:
                    bc:cd:db:30:8b:a4:30:e4:ca:ed:63:f7:7f:1b:1f:
                    82:92:eb:4e:22:dc:f3:0a:e9:92:d4:47:b5:c0:94:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:65:6F:33:06:9A:7B:16:9C:AF:B7:DD:6A:5A:56:8D:12:52:27:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/B2656F33069A7B169CAFB7DD6A5A568D125227E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.192.0/20
                IPv6:
                  2804:3b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52973

    Signature Algorithm: sha256WithRSAEncryption
         c6:5a:19:09:a5:11:69:fd:91:52:20:62:78:f0:ef:fd:77:15:
         84:56:48:3e:57:3d:fa:c4:02:7e:36:e7:3e:24:aa:bc:4b:30:
         82:0f:5d:95:95:70:51:7a:07:72:e3:00:c7:c6:23:ab:fe:79:
         3a:ed:fc:ba:b4:f4:23:14:f0:3f:65:3e:a0:d2:b4:db:b7:f1:
         92:cc:07:b5:2d:6e:9b:fe:16:18:9f:ab:00:d4:29:3b:96:dd:
         68:68:1d:70:70:12:2c:8d:79:3d:17:7a:dd:32:83:a3:74:4a:
         04:e0:6f:d3:11:83:79:46:5b:79:fa:8d:90:82:d3:7c:ab:f8:
         90:80:bd:bf:3b:aa:42:fb:3e:a2:52:0e:16:ff:f2:ef:d6:dc:
         3b:3a:de:60:cc:93:bf:73:02:fb:a4:15:fb:68:35:82:ca:26:
         60:2e:5f:60:78:ce:3c:32:cb:67:6a:27:9d:2d:5f:81:7f:32:
         73:ef:3a:c0:da:88:bf:81:d6:57:7e:7d:c8:f6:79:3a:e7:0f:
         77:27:6f:88:e5:c0:ab:d5:d8:27:86:1f:c5:b6:92:46:a3:4b:
         1d:58:ef:9c:de:25:d2:fa:d9:bd:76:62:28:f2:40:59:01:88:
         84:2f:98:1b:fd:d3:e5:0c:ad:48:42:a2:b2:bf:50:e9:6e:b8:
         a6:69:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 17:14:22 2024 by rpki-client on console-ams.rpki-client.org