Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B2929E5492924B465205088A6A13DA79D2244CF7.cer
File:                     B2929E5492924B465205088A6A13DA79D2244CF7.cer (raw, json)
Hash identifier:          rTfK27/RkcstKEsYBT8Ti7cs96edEvE4MR1zkaZ9I1k=
Subject key identifier:   B2:92:9E:54:92:92:4B:46:52:05:08:8A:6A:13:DA:79:D2:24:4C:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03C75864651C93826E63AE33A338A20391584F1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/B2929E5492924B465205088A6A13DA79D2244CF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 May 2024 18:01:11 +0000
Certificate not after:    Thu 01 May 2025 18:06:11 +0000
Subordinate resources:    AS: 265239
                          IP: 167.250.252.0/22
                          IP: 170.239.176.0/22
                          IP: 2804:2cb8::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c7:58:64:65:1c:93:82:6e:63:ae:33:a3:38:a2:03:91:58:4f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 18:01:11 2024 GMT
            Not After : May  1 18:06:11 2025 GMT
        Subject: CN=B2929E5492924B465205088A6A13DA79D2244CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:db:ea:f7:23:59:4b:c1:de:a2:3d:35:2d:
                    8a:49:bb:7d:87:54:46:f1:65:b3:88:5d:5a:ee:9c:
                    d8:c4:d3:6a:f8:f8:2d:c2:6b:4c:51:8b:38:67:e1:
                    87:2e:e9:98:92:c4:98:29:09:2d:2e:6a:3e:62:1b:
                    b1:98:6b:73:85:e3:39:59:f6:d6:35:23:d5:69:c9:
                    3d:6b:eb:9e:ce:05:b9:29:1a:4a:51:e9:da:c1:fb:
                    79:9e:fe:ac:28:5f:27:de:7e:79:e7:c2:d1:4d:6c:
                    50:65:64:fb:e7:0b:d2:8c:34:04:17:00:20:47:fa:
                    dc:ee:88:55:84:cc:7b:0c:58:5e:7d:3a:86:ca:2d:
                    79:ce:a7:f2:5f:06:6c:6e:93:42:21:a7:e2:8b:bb:
                    ac:9f:14:af:97:76:08:fe:06:c5:7f:2a:95:58:4d:
                    58:7d:9b:62:a8:48:7c:52:4a:f9:71:a1:fd:eb:92:
                    f7:ed:5b:d7:a0:e6:ec:9e:27:5c:41:09:8a:ad:55:
                    1f:0e:f0:f2:80:05:05:3f:cd:a6:08:ef:85:c7:21:
                    35:cc:52:ba:01:57:e9:f3:35:90:2c:76:91:78:b1:
                    45:3a:2b:4f:e3:30:32:54:d0:f3:e3:f9:b0:b5:e0:
                    29:78:bc:05:01:e2:20:95:65:bb:b3:7c:b9:99:c8:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:92:9E:54:92:92:4B:46:52:05:08:8A:6A:13:DA:79:D2:24:4C:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/B2929E5492924B465205088A6A13DA79D2244CF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.252.0/22
                  170.239.176.0/22
                IPv6:
                  2804:2cb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265239

    Signature Algorithm: sha256WithRSAEncryption
         d3:82:2c:a1:89:58:9a:45:a2:06:77:f9:39:b5:6c:62:02:5f:
         8d:e8:fe:c0:e3:b5:f3:1a:03:09:56:9f:aa:61:0c:39:d7:eb:
         fa:e8:ab:2c:db:5c:12:f4:3f:81:71:73:75:74:18:7d:e8:16:
         c4:22:77:13:1c:23:2b:82:56:2d:5a:80:dd:47:22:7e:8f:19:
         7f:4c:dd:c8:95:0b:4c:9d:4f:48:a6:0b:fa:7c:4b:a5:4e:97:
         52:92:f7:0b:ac:27:1d:ac:89:c0:58:14:06:6a:50:18:0e:43:
         dd:6e:b6:bc:fc:c2:04:a0:87:60:47:5d:14:aa:23:89:a2:23:
         05:a5:ec:86:71:7b:8b:99:66:51:d8:62:4f:82:60:ad:c2:17:
         d3:d1:c7:76:2e:b8:70:38:31:01:9c:09:b3:10:32:96:03:44:
         9b:dc:cb:32:d9:3f:a5:33:13:a3:e2:ec:4e:93:7f:16:b5:72:
         d8:c1:e2:2a:7b:30:f6:9a:e9:fc:ef:dd:a7:82:19:69:ed:43:
         8a:91:fa:95:f6:36:98:84:12:00:f1:8f:69:30:70:06:43:f9:
         e5:6b:ab:29:3c:b5:31:93:34:ce:5c:f0:55:1e:48:0c:31:c5:
         3b:1f:9b:df:92:ad:e0:f5:c1:79:43:d7:05:77:24:b6:de:36:
         82:23:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 14:54:57 2024 by rpki-client on console-fra.rpki-client.org