Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B402AC612FA99EC31B8782376B5A10E85097E6D6.cer
File:                     B402AC612FA99EC31B8782376B5A10E85097E6D6.cer (raw, json)
Hash identifier:          DhtCM5x38zhZ2gPJsemErcOn4W/j6QWyGGE8zIYnXRE=
Subject key identifier:   B4:02:AC:61:2F:A9:9E:C3:1B:87:82:37:6B:5A:10:E8:50:97:E6:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46DD19FF71B430E23C9188E2AF7D8BC50E5C3E7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/1/B402AC612FA99EC31B8782376B5A10E85097E6D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 May 2024 18:52:18 +0000
Certificate not after:    Tue 13 May 2025 18:57:18 +0000
Subordinate resources:    AS: 262424
                          IP: 177.44.128.0/20
                          IP: 2804:6164::/32

Validation:               Failed, certificate revoked on Wed 15 May 2024 13:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:19:ff:71:b4:30:e2:3c:91:88:e2:af:7d:8b:c5:0e:5c:3e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 14 18:52:18 2024 GMT
            Not After : May 13 18:57:18 2025 GMT
        Subject: CN=B402AC612FA99EC31B8782376B5A10E85097E6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:13:9b:ff:20:f9:2d:6f:e1:e5:5e:ce:8c:
                    31:5f:0e:e5:68:b6:71:fc:24:b0:37:9f:d6:b6:cc:
                    85:4c:e0:38:36:5a:78:8a:f0:0c:33:19:fa:ca:b4:
                    e9:bd:41:ba:17:c2:a6:00:22:50:a0:a9:47:a9:90:
                    51:3c:25:ae:2e:44:78:4b:57:09:45:d4:ae:f7:48:
                    bc:35:43:5a:34:20:6d:2b:5b:ad:bd:91:ae:0f:75:
                    01:32:ff:da:8d:ba:71:95:14:8b:a6:5d:7d:c5:12:
                    eb:d3:62:ef:29:76:5e:4f:85:1f:18:c5:42:73:40:
                    e7:03:bc:8a:c8:b7:0a:fd:74:ef:8b:fe:c9:e7:34:
                    02:ae:2c:05:ea:26:a8:57:45:7c:1d:4c:28:6d:1f:
                    fa:fe:b4:49:17:c7:d2:43:b4:8e:7e:cc:f4:ce:7f:
                    e6:a1:1f:86:7b:b5:b1:c6:d0:48:0b:49:a9:52:75:
                    e8:bd:db:ab:5e:50:3a:fa:38:60:5f:fe:a2:0e:57:
                    4a:d4:6e:d2:ed:df:7e:df:93:76:c5:1b:92:d0:16:
                    2f:1d:bc:fc:79:64:e2:1a:1a:b7:0a:91:ca:93:72:
                    ae:2c:85:9c:f4:31:fb:da:b0:77:45:72:96:65:38:
                    e7:3d:2c:51:a0:75:24:8b:7d:ce:31:33:99:26:41:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:02:AC:61:2F:A9:9E:C3:1B:87:82:37:6B:5A:10:E8:50:97:E6:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/1/B402AC612FA99EC31B8782376B5A10E85097E6D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.128.0/20
                IPv6:
                  2804:6164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262424

    Signature Algorithm: sha256WithRSAEncryption
         90:48:51:c8:d9:bc:6f:fc:90:90:dd:5f:a6:5d:6a:97:0d:75:
         c5:2f:06:f2:45:82:83:98:8e:52:64:7a:1e:32:e1:1e:c8:d5:
         d1:d3:b9:e4:23:e3:07:27:19:b4:23:79:b7:05:88:1c:3c:13:
         cf:f2:60:21:a1:6f:a6:9b:2a:4f:58:fd:e1:92:f5:d5:75:bd:
         b1:6d:12:68:fd:01:c9:5b:79:ce:b5:8a:0a:7e:7e:89:b5:46:
         75:ab:5f:65:85:13:8d:b5:00:7f:3a:f5:fb:55:ca:73:54:80:
         2b:d3:1b:c6:97:49:fe:c6:6f:33:27:2f:7c:ee:74:41:92:bb:
         40:65:7d:04:b3:13:44:16:d3:79:92:75:29:cf:7d:29:c0:dc:
         05:bb:0b:13:ee:63:8e:b5:cf:ce:f5:33:5f:e9:7e:d4:a6:9b:
         01:4d:05:d6:de:13:a9:0e:74:7a:1a:b7:be:ad:08:8e:e4:1d:
         02:90:51:f6:da:e8:bd:64:c8:c3:aa:cb:89:4a:bf:45:59:b4:
         8b:a4:d5:e7:63:6f:7d:7b:e5:27:eb:1f:a3:69:48:89:06:94:
         c7:c8:77:e4:ed:7e:d0:e5:66:6c:9d:ba:2c:7d:1a:77:79:ec:
         36:3f:f2:63:2d:b3:45:bd:c4:34:f7:92:ad:ee:c4:48:82:60:
         01:fe:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org