Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.cer
File:                     B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.cer (raw, json)
Hash identifier:          iYwMJ8Tu5kb9pcUuUT5fTvF9+Jmhd7Anwri3gw+RUZ4=
Subject key identifier:   B7:B1:CA:D9:85:E4:4B:57:BA:78:E5:A3:F7:0F:A3:A8:C7:B2:8A:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F73C306DC9B03AC3C9D351372A3C04A2F1FF48B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2024 16:50:54 +0000
Certificate not after:    Tue 02 Sep 2025 16:55:54 +0000
Subordinate resources:    AS: 273561
                          IP: 2804:9094::/32

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 03:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:c3:06:dc:9b:03:ac:3c:9d:35:13:72:a3:c0:4a:2f:1f:f4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  3 16:50:54 2024 GMT
            Not After : Sep  2 16:55:54 2025 GMT
        Subject: CN=B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:0a:35:b0:52:21:de:c4:64:c5:97:29:37:
                    d0:d2:10:80:b6:36:a5:f7:06:9a:55:18:ed:69:8c:
                    7d:9d:71:22:2d:47:69:53:0e:0e:f6:a6:17:80:ba:
                    4c:64:b4:1f:78:0e:dd:c0:2c:b2:60:99:92:68:cd:
                    de:76:91:40:6d:95:07:89:54:86:5e:a9:50:33:ad:
                    69:4e:47:09:48:08:8e:d5:56:f6:88:be:2b:ea:f1:
                    39:de:b9:c1:a1:23:a8:24:05:b4:07:63:87:86:7a:
                    f9:2f:7d:d4:2a:00:67:83:aa:ed:38:ce:ab:44:d1:
                    cd:63:c6:0c:ad:3e:31:21:9b:88:96:98:fd:e3:ab:
                    b2:8a:ce:ac:03:4a:e1:a0:de:2b:2f:22:46:5f:d2:
                    a5:14:c1:62:d5:fa:5e:cc:dc:27:9e:d2:9b:5d:c2:
                    47:8d:ef:ee:32:36:9a:89:af:4c:ed:42:5d:59:e1:
                    6c:8c:b4:48:70:af:a4:ea:ac:a9:3f:eb:40:75:f0:
                    f3:6c:4d:94:19:d2:d5:62:86:af:5b:38:2d:8c:ab:
                    aa:22:95:de:8c:32:d9:99:81:34:9a:cf:91:53:fa:
                    24:60:55:90:35:bd:7f:86:36:74:cd:34:4e:e1:8a:
                    5c:d0:d4:5d:8b:85:b4:05:fc:5c:e4:8d:62:8f:03:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:B1:CA:D9:85:E4:4B:57:BA:78:E5:A3:F7:0F:A3:A8:C7:B2:8A:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9094::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273561

    Signature Algorithm: sha256WithRSAEncryption
         c5:8d:4f:2e:25:ce:7e:18:af:d2:60:b0:d3:2f:60:e6:bd:5c:
         bb:10:b7:e1:58:98:cf:9f:b6:41:20:6e:06:63:8a:94:91:7f:
         62:2c:52:e3:3c:38:2f:4f:19:fd:26:a1:6b:71:ed:e7:04:e1:
         ec:9a:80:43:62:87:ce:e9:50:8a:cf:c6:8f:02:fb:f6:fc:42:
         93:c6:06:e8:12:9c:6b:f5:d7:98:07:86:22:8e:e8:e3:fc:ba:
         2a:31:2c:0a:32:00:4b:a5:73:7d:c8:75:3c:73:13:c2:5d:63:
         03:7a:17:38:2b:48:82:26:06:f0:c5:e2:c7:5b:88:5d:27:b8:
         b9:37:39:12:38:a9:72:e6:85:8d:69:f8:8b:46:d6:dc:b9:3a:
         5d:8a:18:38:e6:02:18:23:46:43:e2:5f:0f:c6:dd:33:dd:b0:
         be:04:35:79:98:80:42:0a:ec:4c:8d:c9:d4:f4:e3:46:08:2f:
         38:dd:f0:ec:1f:6b:7e:cb:dc:7d:23:ba:10:51:fe:c0:51:49:
         6e:40:ff:59:00:09:e0:8d:b2:9c:04:1e:15:0e:5a:50:5f:81:
         e3:a7:d3:f6:b2:5f:54:8e:a5:70:01:1f:15:20:11:88:28:c6:
         55:b1:aa:34:6f:31:2c:2c:81:86:b4:18:c2:59:d1:82:92:24:
         ba:d8:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:01:10 2024 by rpki-client on console-ams.rpki-client.org