Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.cer
File:                     B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.cer (raw, json)
Hash identifier:          1SCM/PhDWXQ8fEF1vNwUUXEihUH8sgJg2M+RwwN93p4=
Subject key identifier:   B4:1F:36:8E:1E:39:1C:8B:1F:C0:4F:D1:A1:0F:BB:0B:0B:43:D4:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A59A40BFC721B7FD44DA3D991E8E42723D46BBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 May 2024 19:10:51 +0000
Certificate not after:    Wed 14 May 2025 19:15:51 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 08:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:59:a4:0b:fc:72:1b:7f:d4:4d:a3:d9:91:e8:e4:27:23:d4:6b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 15 19:10:51 2024 GMT
            Not After : May 14 19:15:51 2025 GMT
        Subject: CN=B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:2c:f3:06:3a:c4:36:c5:03:db:77:88:92:
                    7b:e2:0e:bd:3e:24:95:eb:23:98:9d:08:ea:49:3b:
                    17:31:f8:f4:5c:98:1d:02:05:b7:64:07:79:ee:c3:
                    3d:e8:43:15:27:02:08:96:39:c9:ef:f4:cc:69:9d:
                    37:a9:48:f0:d3:78:5d:99:c9:6c:f1:df:49:54:0a:
                    93:6d:e4:65:82:ef:e4:89:eb:89:a9:84:7a:4e:ae:
                    05:12:57:df:55:1f:aa:e5:b9:3c:38:1f:a7:7c:ad:
                    82:24:89:ed:71:ec:4c:d3:7e:e2:52:c8:df:fb:92:
                    a6:55:d4:46:74:2b:04:ae:18:b3:9c:a2:66:df:18:
                    14:ac:7d:b9:fb:99:ff:4b:0e:39:9d:cb:d2:ff:a5:
                    31:5a:cf:eb:fe:88:6d:b7:74:ef:b6:a9:b8:94:d7:
                    9b:eb:12:e8:0c:1e:fb:c8:d2:c0:31:be:4f:ad:fb:
                    e9:e5:37:b0:5a:9d:e5:93:98:8e:ee:4e:23:19:b7:
                    cd:43:6c:63:51:2b:d2:01:56:55:c0:63:31:95:41:
                    ad:a9:75:04:c7:e7:35:80:40:7f:7c:89:5d:41:71:
                    7a:6e:20:5a:e2:b2:17:c7:0d:5a:e6:33:53:65:df:
                    c6:36:5d:d3:e1:2a:98:1a:26:15:df:62:f5:7d:1e:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:1F:36:8E:1E:39:1C:8B:1F:C0:4F:D1:A1:0F:BB:0B:0B:43:D4:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         b4:93:78:58:a2:ca:da:14:e9:8e:dc:60:eb:8f:ec:d6:fc:64:
         64:e0:15:05:fa:06:73:77:d2:5f:9e:f7:b1:90:1b:91:8a:89:
         e7:79:72:0a:6c:45:5d:78:63:61:50:f3:c5:75:69:78:58:e4:
         2f:53:49:af:e1:f8:48:9a:f3:27:93:05:0d:95:54:d6:6c:dd:
         13:10:71:61:a1:ce:89:6a:44:72:86:31:36:e9:9f:b7:f7:cc:
         ef:ae:c3:a4:1d:18:cd:37:3b:03:67:34:de:78:7d:ca:e7:d0:
         1b:53:3c:a9:63:e5:e0:42:dd:50:d9:77:23:af:01:56:b4:ff:
         d8:52:00:53:15:9e:0d:1b:54:46:43:7e:de:aa:5e:5a:65:2c:
         50:9a:ea:7b:1d:45:17:dd:5b:fb:c1:b9:42:bb:ad:02:d0:95:
         92:15:d7:46:75:df:f2:08:9f:c6:ef:98:8f:b9:91:0f:75:56:
         07:51:a1:ee:73:4a:2e:75:0c:be:10:76:34:f1:ac:2e:31:bd:
         01:20:4b:b5:2f:fe:38:e0:c5:e4:54:b1:7b:f2:93:d5:5f:e6:
         d3:3d:4b:07:36:dc:db:be:9a:33:96:e3:42:38:56:75:d7:44:
         8a:c5:d0:9a:c4:19:46:be:e4:62:91:30:6c:ba:99:24:c2:e5:
         f8:33:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 13:47:32 2024 by rpki-client on console-fra.rpki-client.org