Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.cer
File:                     B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.cer (raw, json)
Hash identifier:          oJILpoiaTze2i7uUXQLF2WVphdBSYhUg7lhYgoQ/fAk=
Subject key identifier:   B7:42:2E:6B:51:CC:8D:9B:50:F1:B9:00:AC:91:C6:CC:B0:16:6D:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B153B93A4B584C02F9058E9C1500D5E958A4C7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 19:32:52 +0000
Certificate not after:    Mon 04 Aug 2025 19:37:52 +0000
Subordinate resources:    AS: 270703
                          IP: 186.209.124.0/22
                          IP: 2804:700c::/32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 17:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:15:3b:93:a4:b5:84:c0:2f:90:58:e9:c1:50:0d:5e:95:8a:4c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 19:32:52 2024 GMT
            Not After : Aug  4 19:37:52 2025 GMT
        Subject: CN=B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:7b:4b:ed:d7:0a:6d:95:74:0f:0c:da:32:
                    bf:0c:62:76:07:ac:5b:a8:95:0b:bf:b6:30:eb:c3:
                    27:e3:e8:26:61:8b:c6:2b:a1:96:7f:0f:dd:6c:02:
                    88:cb:98:5b:22:04:35:46:86:ad:a9:b7:9e:7e:65:
                    a9:9c:8d:ec:c6:6d:4a:89:71:cb:09:1e:d0:1f:62:
                    58:f1:b5:c3:3e:01:84:06:e7:28:77:17:5e:2f:0d:
                    50:92:2e:4f:8b:15:41:44:1c:bb:d5:c2:65:02:50:
                    cd:5c:0c:55:f8:8c:12:38:d1:8c:d1:ee:0d:18:95:
                    d1:4f:6d:90:0f:ea:ca:d5:ba:54:e6:4c:34:db:0b:
                    55:a9:76:c7:29:3c:37:11:bc:3b:2d:40:c3:2a:8e:
                    53:b2:13:e2:00:bd:66:69:a4:36:0e:a7:ab:a2:2e:
                    c0:27:82:6a:31:d9:01:39:db:0c:d0:b7:5a:6a:5d:
                    37:23:df:1c:00:85:9e:2c:e2:98:be:21:cf:a1:27:
                    5c:8c:f4:be:40:5d:ea:65:51:f6:15:d7:09:72:db:
                    26:4b:7d:df:09:9a:1a:28:bb:40:99:a7:2c:d5:97:
                    f1:aa:f1:7e:f7:fe:92:2b:93:b5:21:ce:f9:72:d7:
                    1a:59:b3:e7:96:a1:37:81:fb:69:51:45:b3:6f:4b:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:42:2E:6B:51:CC:8D:9B:50:F1:B9:00:AC:91:C6:CC:B0:16:6D:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.124.0/22
                IPv6:
                  2804:700c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270703

    Signature Algorithm: sha256WithRSAEncryption
         be:a5:fe:61:9b:10:9f:ba:07:3b:f3:83:a7:8f:4e:13:6b:56:
         8e:95:75:3f:a4:9d:23:f3:df:1f:60:5a:e4:c7:29:8f:63:af:
         7d:31:41:c3:00:39:4c:b5:91:80:7d:b8:57:32:4e:11:f5:8e:
         7b:f1:01:a4:f8:07:7a:63:68:b7:c8:b7:c5:20:4e:fb:36:06:
         75:40:d7:40:75:f6:a4:9c:94:37:25:03:1f:e8:2c:0b:c9:7e:
         c3:7d:8a:42:6d:48:10:38:e1:f7:96:0b:ce:5e:77:1f:41:77:
         ad:d8:a0:d9:89:70:06:9c:2f:b5:32:dd:23:d4:01:14:59:73:
         43:31:0c:78:e4:5a:ea:2b:62:7b:11:b6:f5:ee:fd:46:09:eb:
         00:11:7f:cb:b2:43:0f:45:c5:80:10:62:33:d3:7c:f7:f7:9d:
         8a:ef:66:71:5a:ab:76:ac:6d:c0:9c:21:37:15:b6:dd:04:98:
         09:b3:c8:2a:cf:2c:75:fc:70:e3:23:d0:ce:d6:b4:c7:37:92:
         dc:3d:fe:54:7f:34:76:bd:1d:0a:1f:0b:8d:4f:34:3e:ea:0c:
         6c:aa:e0:64:b1:b8:c5:4c:b1:4b:f2:c5:98:c4:43:c0:4c:4a:
         74:8b:d1:e0:38:0c:19:ed:40:81:20:50:37:62:ed:74:35:dd:
         9f:04:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:38:01 2024 by rpki-client on console-ams.rpki-client.org