Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B533566E1B9C7D7268D9FCCE146F4F1D33AD9395.cer
File:                     B533566E1B9C7D7268D9FCCE146F4F1D33AD9395.cer (raw, json)
Hash identifier:          jKQN4LqHgfIPpTc2fHeOs+e/RpPhcvOXt1Ib3d9W0SU=
Subject key identifier:   B5:33:56:6E:1B:9C:7D:72:68:D9:FC:CE:14:6F:4F:1D:33:AD:93:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18AA967ED48D04EBAB93067774109D44409A00B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/1/B533566E1B9C7D7268D9FCCE146F4F1D33AD9395.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:58 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:58 +0000
Subordinate resources:    AS: 271304
                          IP: 200.53.68.0/22
                          IP: 2804:796c::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 17:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:96:7e:d4:8d:04:eb:ab:93:06:77:74:10:9d:44:40:9a:00:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:58 2024 GMT
            Not After : Apr  2 18:32:58 2025 GMT
        Subject: CN=B533566E1B9C7D7268D9FCCE146F4F1D33AD9395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f1:26:53:29:70:cc:03:26:24:5b:f2:84:6b:
                    69:9d:a5:6d:cf:d0:de:ac:8c:17:f1:1c:98:7d:e4:
                    d9:4e:87:3b:50:26:90:3e:f0:d6:9a:58:81:74:de:
                    eb:4d:1d:c6:0d:b5:97:02:05:d5:17:4e:ba:70:78:
                    7f:97:72:8b:05:07:71:fe:1f:80:87:f8:fa:18:5b:
                    94:92:fa:bc:0d:0d:ca:ef:d2:c1:6f:83:cf:30:3f:
                    e6:4b:f5:eb:33:9a:d9:fc:4c:f8:98:2c:67:aa:ed:
                    3f:eb:cf:50:cb:8a:57:5f:76:e5:5c:7a:34:32:0d:
                    b0:0a:df:41:48:74:1b:9c:e2:3f:3f:89:ce:f3:00:
                    1c:8b:97:2a:6f:61:2e:ba:55:e1:2e:31:9e:b4:5c:
                    cc:1b:5e:ab:d3:d2:e4:3d:5e:27:99:3e:98:a5:37:
                    c5:a9:95:dd:00:25:02:03:fb:94:7a:2a:55:32:1e:
                    a3:c7:e2:8d:22:f6:56:b6:cc:62:fc:84:bd:c8:79:
                    fa:e6:3c:69:bd:25:69:1f:da:67:85:2d:dc:f5:82:
                    01:7f:3a:0b:24:b4:31:d2:71:9d:b2:27:cd:a9:98:
                    a4:f3:d5:f4:8b:99:c4:51:d4:1e:3f:ea:fe:3b:bd:
                    8a:7f:6c:58:91:98:a8:15:6b:00:f0:76:dc:a0:da:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:33:56:6E:1B:9C:7D:72:68:D9:FC:CE:14:6F:4F:1D:33:AD:93:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/1/B533566E1B9C7D7268D9FCCE146F4F1D33AD9395.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/22
                IPv6:
                  2804:796c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271304

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:26:05:08:82:2b:42:4a:17:16:2c:99:be:26:61:d7:5a:
         8b:ed:71:ef:2b:99:21:c7:b8:fe:90:dd:9d:ec:e3:86:b7:c3:
         5c:87:ef:64:27:5c:bc:dd:92:3a:3d:6d:ac:f9:27:d8:ae:b6:
         6e:65:cc:9f:12:b7:29:9c:21:49:b5:62:39:b7:ba:f8:4c:7e:
         8b:f3:26:25:9c:0c:a8:55:f8:f7:aa:17:35:a7:a1:d0:71:92:
         e4:53:6e:0c:d8:01:72:d4:1a:ae:b5:fe:26:86:d4:ed:a1:2c:
         78:7b:74:17:08:cc:c1:23:95:17:25:8e:fc:08:96:66:fe:ea:
         4d:c5:80:59:ae:e4:4d:f4:7f:76:fe:9f:29:fb:dd:68:e6:42:
         fc:b4:ef:dc:ed:57:dd:84:c2:4b:6f:5c:51:f4:49:59:63:fb:
         82:57:46:4b:a5:b7:ad:7a:20:0a:d1:73:b5:2d:b7:39:00:cd:
         6a:1b:b9:c2:1c:57:51:50:f7:d9:62:e0:fe:ed:bf:ab:af:04:
         ba:04:0d:7f:3e:b7:17:b2:83:28:f4:00:7d:a3:32:78:a9:7f:
         1e:e5:4a:77:60:17:11:13:43:78:07:a1:6c:8b:43:ee:0e:50:
         8f:06:cc:91:a8:05:8b:09:cc:db:98:b6:33:55:74:0c:73:5b:
         e8:bc:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 18:59:58 2024 by rpki-client on console-fra.rpki-client.org