Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7276DA98695E83F16983416A246B0D7FF78D5CB.cer
File:                     B7276DA98695E83F16983416A246B0D7FF78D5CB.cer (raw, json)
Hash identifier:          TZxr+IXjuSy/Gu3ZK3tKuIqtsoahrlZNT49aJJIgu34=
Subject key identifier:   B7:27:6D:A9:86:95:E8:3F:16:98:34:16:A2:46:B0:D7:FF:78:D5:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37588FA994A2C44451838D08B5AFD2B58272CDDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/1/B7276DA98695E83F16983416A246B0D7FF78D5CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 May 2024 19:35:13 +0000
Certificate not after:    Thu 29 May 2025 19:40:13 +0000
Subordinate resources:    AS: 61573
                          IP: 138.122.60.0/22
                          IP: 2804:25e4::/32

Validation:               Failed, certificate revoked on Fri 31 May 2024 22:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:58:8f:a9:94:a2:c4:44:51:83:8d:08:b5:af:d2:b5:82:72:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 30 19:35:13 2024 GMT
            Not After : May 29 19:40:13 2025 GMT
        Subject: CN=B7276DA98695E83F16983416A246B0D7FF78D5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:63:de:5b:d7:bf:f1:6e:35:55:8b:15:a3:
                    32:a4:d8:d6:f3:af:11:e1:3c:07:1b:a0:98:9f:a9:
                    06:5e:be:fa:05:ed:9c:6f:1b:64:ea:a0:8d:fb:f4:
                    d4:b8:4b:0f:da:5a:b8:b5:c5:10:66:4e:9a:73:af:
                    51:06:8d:5c:b5:a5:93:e7:aa:05:e6:65:75:a7:77:
                    0a:7e:33:c9:5e:79:65:29:c5:d1:ca:65:bb:57:14:
                    5c:e9:e4:e1:31:e8:49:dd:59:09:83:fa:19:30:20:
                    92:b9:9d:d4:a3:b0:99:39:d0:57:d9:f4:c3:1a:cc:
                    fc:ac:17:55:2e:62:ee:75:0d:91:a5:59:e0:98:6d:
                    18:83:35:ec:85:2d:48:18:f7:6b:3c:99:18:ce:82:
                    f5:58:b1:2a:7a:e9:ae:e0:c8:37:bd:10:11:d8:7e:
                    a4:87:79:cc:51:0b:90:55:c1:d2:d1:11:a1:8e:ab:
                    3d:9e:03:be:5d:bf:8b:49:ca:9e:c5:56:d2:d4:e3:
                    4b:f9:3c:23:24:e5:b6:08:61:df:24:dd:f7:b4:12:
                    56:52:1a:9b:71:fe:97:16:47:7a:e1:a8:57:e0:73:
                    5c:31:f0:18:ae:ac:b9:ed:f9:29:dc:b6:3f:c7:cc:
                    b1:24:34:e3:96:a0:ed:11:47:94:9f:4f:ae:f0:58:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:27:6D:A9:86:95:E8:3F:16:98:34:16:A2:46:B0:D7:FF:78:D5:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/1/B7276DA98695E83F16983416A246B0D7FF78D5CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.60.0/22
                IPv6:
                  2804:25e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61573

    Signature Algorithm: sha256WithRSAEncryption
         25:95:54:d2:0d:43:26:04:3c:48:5e:19:d9:f0:6d:cd:33:71:
         6a:6a:40:c3:a4:f9:35:9b:f4:45:84:e3:a5:a5:f0:48:2d:ee:
         a2:d9:67:d2:30:9f:4b:36:34:c8:7a:2d:00:81:13:d4:66:6b:
         54:e0:40:9f:64:70:bd:97:09:45:e0:6f:8b:40:53:a7:9a:8b:
         9c:8e:ab:6a:37:c4:83:b5:b8:3b:aa:4f:95:6b:ca:92:d4:32:
         96:41:18:ae:a3:31:7b:8f:7d:35:ee:a5:71:af:a7:71:0b:b0:
         97:62:9c:cf:cc:51:b3:c8:96:4f:5d:56:ac:58:48:4c:13:d3:
         02:d4:2b:8b:d0:e0:c5:b2:a6:25:09:7d:b9:c8:61:f4:78:01:
         9d:aa:f6:1e:78:24:56:da:d4:87:d6:e0:71:1c:36:f3:79:06:
         d5:59:75:e6:79:2c:bb:20:94:bd:c6:f1:47:62:b8:b5:4c:ba:
         42:4d:1e:0d:48:30:0a:99:bb:ea:f1:5c:d8:c0:29:85:9a:ca:
         a6:3c:6f:e4:31:da:e8:d2:65:c3:17:ee:08:0d:7f:15:e2:0c:
         49:71:44:77:9c:6e:c3:37:f3:7f:bc:30:09:33:e4:7d:f8:01:
         82:5d:56:03:be:4c:03:cd:b2:67:08:7a:44:bb:57:3c:66:b3:
         a8:c4:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org