Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer
File:                     B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer (raw, json)
Hash identifier:          wXVZ+jUyfY0m64d+uUZ04n0RlEzCSkr2CsN4mLXsLVE=
Subject key identifier:   B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       738D24823D39656218BF0CD07D0FF6FDF42A734F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:49:04 +0000
Certificate not after:    Thu 03 Apr 2025 13:54:04 +0000
Subordinate resources:    AS: 267610
                          IP: 45.70.248.0/22
                          IP: 2804:4438::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 13:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8d:24:82:3d:39:65:62:18:bf:0c:d0:7d:0f:f6:fd:f4:2a:73:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:49:04 2024 GMT
            Not After : Apr  3 13:54:04 2025 GMT
        Subject: CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:3a:4d:cb:0f:ec:fe:cd:33:64:b1:aa:bc:
                    d6:ad:79:93:43:14:e7:5e:5a:77:1e:c1:0d:67:5d:
                    fc:7c:f0:9d:cd:9b:23:7b:f4:30:bb:ab:7b:b3:87:
                    9e:50:de:53:66:dd:76:3e:cc:2f:92:12:d6:0c:12:
                    e4:eb:a9:3a:07:85:98:ab:8a:98:1f:cf:ab:c6:5e:
                    0e:e8:d7:59:64:e6:2b:6f:cd:a2:54:f5:7b:f3:c9:
                    0e:12:8e:0b:66:85:d5:2b:cf:ce:9e:22:5f:33:c5:
                    07:44:dd:35:17:d5:52:81:89:94:b3:c9:7e:ac:27:
                    2e:97:02:18:ce:77:28:5c:51:1f:28:af:55:14:50:
                    23:fb:98:6c:8e:11:2a:2e:f6:00:e1:9e:a3:19:4e:
                    b0:a4:a0:a4:34:65:06:ab:fc:19:b4:33:8a:0d:26:
                    10:aa:cc:e1:30:5c:06:30:e5:73:dc:bd:85:2a:8a:
                    12:b5:b6:9f:4d:e2:41:c3:4a:45:16:ea:1f:65:c6:
                    04:99:ac:54:02:de:b4:5f:c4:d9:c3:4c:2e:d5:66:
                    54:01:69:50:ec:17:08:8a:5d:d2:a2:25:83:f1:df:
                    e9:a0:da:9e:58:26:04:41:23:d1:a0:ec:4b:08:15:
                    0a:45:f8:b9:7a:26:c4:9c:fe:d8:ad:0d:ed:5b:ff:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/22
                IPv6:
                  2804:4438::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267610

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:59:4b:3c:4e:ac:c8:21:77:3e:a8:1a:86:3e:3d:2c:b1:
         ab:19:ea:17:eb:c6:b6:74:19:72:a9:11:81:6c:9e:94:8d:8d:
         95:21:80:e2:6a:85:84:29:cb:69:3c:54:ce:5c:25:40:23:2f:
         e9:4c:93:c5:e8:06:38:44:d9:a2:7c:58:b2:39:78:cb:8a:11:
         24:6b:31:e9:99:45:9a:ac:1e:01:a8:9b:98:28:97:56:b8:3d:
         d1:12:81:48:84:e4:c0:be:d6:15:50:ea:e7:4b:0a:c1:59:3c:
         d8:19:0e:66:80:37:da:0f:b3:34:21:f4:df:b4:7b:c5:f5:f2:
         17:8e:4a:01:97:26:b9:43:d6:84:87:0f:8a:00:7c:1d:f9:0e:
         04:33:61:b2:94:5c:45:82:0d:c1:89:69:f2:d0:cc:10:cd:72:
         96:64:6d:ca:44:e6:7d:2b:54:92:3c:fb:82:fc:56:72:d4:af:
         65:5c:5e:17:b1:3d:ea:89:8b:cf:9d:5c:45:09:bd:f1:59:b2:
         ae:7b:95:8d:50:17:f5:a7:28:29:be:ec:14:bc:05:ce:62:9a:
         ff:ca:09:4c:b3:12:33:5a:b6:d8:81:b9:33:de:4a:9b:04:69:
         6f:13:64:76:9f:81:39:13:e9:d7:76:02:d7:d2:3f:ea:3d:96:
         8f:08:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:13 2024 by rpki-client on console-ams.rpki-client.org