Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5B2E670BF8CD958758B8BD135BB75F90E221A72.cer
File:                     B5B2E670BF8CD958758B8BD135BB75F90E221A72.cer (raw, json)
Hash identifier:          4wIqZFCmue4q6v1qtZN3LncY++8rYc3EajSTz/2HYTM=
Subject key identifier:   B5:B2:E6:70:BF:8C:D9:58:75:8B:8B:D1:35:BB:75:F9:0E:22:1A:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1EB9D5092113DF7BF97B6568EB90C775040B5EA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B5B2E670BF8CD958758B8BD135BB75F90E221A72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Aug 2024 12:35:25 +0000
Certificate not after:    Tue 05 Aug 2025 12:40:25 +0000
Subordinate resources:    AS: 265102
                          IP: 170.254.96.0/22
                          IP: 2804:32e0::/32

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 12:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b9:d5:09:21:13:df:7b:f9:7b:65:68:eb:90:c7:75:04:0b:5e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 12:35:25 2024 GMT
            Not After : Aug  5 12:40:25 2025 GMT
        Subject: CN=B5B2E670BF8CD958758B8BD135BB75F90E221A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:6d:3a:b0:8c:72:a3:77:be:f1:4f:8d:e2:
                    7b:87:e2:a4:13:f5:19:f5:2c:52:70:5a:55:7b:89:
                    17:5b:5a:fa:f7:52:ef:60:06:48:46:58:e5:40:b0:
                    16:9b:b9:6b:89:8a:ee:5f:97:5a:39:a9:74:10:a2:
                    fc:63:8b:98:8e:5d:2d:d8:b6:17:9f:43:ca:ac:88:
                    46:6f:01:4a:2c:c0:a5:a4:f6:10:dc:fa:70:e3:c5:
                    60:5b:81:1a:ff:62:cf:3c:2a:d8:6f:d8:c6:98:97:
                    7d:72:0e:5b:cc:c8:f6:f5:8a:67:81:69:33:f8:93:
                    4f:16:58:ff:5d:ea:e7:c2:5b:eb:b4:6e:35:88:27:
                    b9:7c:36:7f:05:61:a1:f1:1c:6c:f2:05:43:01:18:
                    e0:01:bb:88:5a:79:17:d0:f8:aa:36:d2:7d:6f:10:
                    12:02:b8:92:a6:a3:c1:c5:03:d5:01:02:15:6f:c5:
                    ba:29:6f:5d:2d:5a:96:61:54:60:d4:c1:22:22:04:
                    9a:02:7e:a2:c6:13:e9:bf:8c:b5:be:6c:7c:74:a9:
                    4c:ca:cf:ab:f4:9e:66:42:64:8a:39:15:4c:13:39:
                    b0:18:eb:ba:7d:c9:2a:dc:fb:a0:2e:9c:eb:2b:fe:
                    b7:28:f0:71:40:20:cb:5b:33:4d:55:24:9e:f3:76:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:B2:E6:70:BF:8C:D9:58:75:8B:8B:D1:35:BB:75:F9:0E:22:1A:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B5B2E670BF8CD958758B8BD135BB75F90E221A72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
                IPv6:
                  2804:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265102

    Signature Algorithm: sha256WithRSAEncryption
         44:40:f3:ab:55:f1:23:47:fb:71:a3:aa:a7:02:e8:5d:40:f6:
         6d:3d:9e:d7:af:e8:55:14:5d:cc:47:3c:cd:a5:15:43:e9:be:
         a2:10:47:b2:97:23:44:74:48:ab:73:46:f7:78:57:69:f3:9d:
         57:c6:f1:3a:4a:b1:39:85:66:a4:11:59:3e:dd:64:ce:dc:d4:
         b9:80:e3:48:bc:ed:f1:2d:24:df:81:20:20:91:99:e3:ad:60:
         39:e2:b6:ad:a7:26:4d:7f:82:cd:3a:86:6e:2a:8d:7f:97:55:
         5b:a6:ca:1d:25:f1:cb:56:4b:7c:f2:8e:cf:01:fc:c2:f9:ac:
         9b:f8:26:b4:9e:c6:f8:06:1d:c5:da:f1:55:63:bb:89:a9:80:
         d0:57:ba:f8:60:74:6a:fd:fd:5c:2c:30:f1:8e:8e:b1:30:08:
         f8:ec:5a:53:7a:67:e5:d1:00:e1:13:a2:a8:15:04:bc:54:de:
         a5:b6:8b:2e:82:55:cb:99:b3:61:68:35:8b:39:d5:12:43:5f:
         5f:cf:27:ce:2b:76:04:ba:a9:29:7c:ba:4e:b5:4d:18:a5:fc:
         39:a1:a8:6a:2d:26:e7:01:34:d3:ec:02:c2:84:9d:c0:38:4a:
         7b:8a:28:16:83:b8:0b:7d:05:4e:a4:a3:0d:4b:1d:54:b3:ca:
         ba:49:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org