Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B382367CD055F8A64B571DAE919C3F1ABE9F9243.cer
File:                     B382367CD055F8A64B571DAE919C3F1ABE9F9243.cer (raw, json)
Hash identifier:          jjAvMB+eVzs7JJ9H1ZjEQxjrOyo9iraPaqzxN/YkMn8=
Subject key identifier:   B3:82:36:7C:D0:55:F8:A6:4B:57:1D:AE:91:9C:3F:1A:BE:9F:92:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EB2C297B8C60D1C89CBDED1542C16F57BFFC31D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/1/B382367CD055F8A64B571DAE919C3F1ABE9F9243.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:25 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:25 +0000
Subordinate resources:    AS: 61948
                          IP: 143.255.120.0/22
                          IP: 201.150.12.0/22
                          IP: 2804:18b4::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 15:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:c2:97:b8:c6:0d:1c:89:cb:de:d1:54:2c:16:f5:7b:ff:c3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:25 2024 GMT
            Not After : Apr  2 18:30:25 2025 GMT
        Subject: CN=B382367CD055F8A64B571DAE919C3F1ABE9F9243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:76:57:1d:67:b1:d7:fd:c1:20:af:2c:3b:
                    31:64:82:74:d6:bb:14:bc:3d:61:68:5a:cc:ad:2e:
                    a7:fb:c3:30:59:b1:3e:11:09:47:0c:79:16:46:56:
                    32:fb:c4:ef:a5:68:5a:7c:61:be:c8:a8:df:ea:23:
                    a4:37:01:a2:96:f8:90:df:0a:cf:61:86:60:f9:2a:
                    64:18:06:3e:b6:79:48:05:35:77:32:71:b9:62:6a:
                    30:cf:0b:55:54:20:8a:7d:54:ef:8a:44:8d:54:ba:
                    04:d2:e7:d5:5f:a4:16:ff:f5:11:ef:09:b0:5d:b6:
                    96:ea:e2:fc:32:4b:7e:65:89:5d:08:9b:4b:44:da:
                    b4:2d:6b:b1:64:aa:ee:9c:c8:50:f8:c5:2e:f6:04:
                    71:ba:51:d4:2a:98:ee:e5:89:e6:34:a2:13:3e:c0:
                    49:99:5c:63:a5:ee:12:8a:a5:2d:46:48:d2:65:b4:
                    73:c4:f7:79:19:0f:53:03:3a:6a:e6:3e:87:c2:c7:
                    e6:57:0a:3b:19:8c:dc:68:59:50:02:fa:1d:08:31:
                    fe:f9:44:76:18:21:7c:c1:95:1b:ee:4b:99:c6:bb:
                    17:f0:a0:ec:c6:e0:b6:2e:73:a3:61:e6:55:c4:e7:
                    d9:52:e4:6a:80:e7:41:4a:e9:e7:4f:df:90:d7:72:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:82:36:7C:D0:55:F8:A6:4B:57:1D:AE:91:9C:3F:1A:BE:9F:92:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/1/B382367CD055F8A64B571DAE919C3F1ABE9F9243.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.120.0/22
                  201.150.12.0/22
                IPv6:
                  2804:18b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61948

    Signature Algorithm: sha256WithRSAEncryption
         be:a7:c6:a7:57:4f:cf:41:96:3b:e6:e4:84:07:cf:8c:6d:dc:
         ed:64:47:f7:f4:7a:0c:fa:7c:47:d6:c6:7e:d0:4f:9a:d1:72:
         68:e0:e6:8d:8b:6c:fc:d2:c5:f2:26:e4:37:db:9e:55:1c:03:
         74:7b:fe:56:5a:c9:12:3f:8a:94:a3:ee:12:95:92:11:0b:41:
         01:b8:5c:c9:c3:2b:ad:0a:5b:2c:8a:48:ec:88:41:92:82:b7:
         bd:b6:b6:33:f1:42:67:25:40:11:3e:26:99:2a:45:21:18:87:
         d3:9d:68:4a:cd:d4:bf:be:1b:06:e9:f2:71:36:d6:28:f1:27:
         9e:84:a9:e1:9d:a2:5b:19:30:5c:4e:5c:2c:5d:d6:88:9c:00:
         83:94:a1:4b:31:5c:13:42:09:95:41:30:f8:7c:b1:53:c2:8b:
         04:b9:45:21:44:06:3a:2c:94:f2:1f:b8:34:fc:1d:3f:4d:28:
         d3:3e:ec:f2:c5:bd:2c:c0:e6:ca:f9:5f:a9:f2:a6:b6:81:10:
         09:68:45:fa:9b:24:d3:17:ef:53:59:4e:9d:33:32:9a:39:0f:
         11:99:ab:e0:90:16:19:14:1f:e7:9b:9e:63:94:33:4a:9e:2b:
         7a:cb:bf:47:78:15:4d:db:8e:6a:a7:30:97:98:6e:03:39:86:
         ea:98:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org