Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.cer
File:                     B7FA9366533E2602BAC37087160B1B7CCB115AEA.cer (raw, json)
Hash identifier:          SKYXAdJGZFoNzMuA+Ao3GlRxDMqaurGCeIy9408B96U=
Subject key identifier:   B7:FA:93:66:53:3E:26:02:BA:C3:70:87:16:0B:1B:7C:CB:11:5A:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2652AE85FF2CC0A5F50BFC1D24F9D6989F70AA55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:06:47 +0000
Certificate not after:    Thu 03 Apr 2025 15:11:47 +0000
Subordinate resources:    AS: 273592
                          IP: 2804:8940::/32

Validation:               Failed, certificate revoked on Mon 13 May 2024 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:52:ae:85:ff:2c:c0:a5:f5:0b:fc:1d:24:f9:d6:98:9f:70:aa:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:06:47 2024 GMT
            Not After : Apr  3 15:11:47 2025 GMT
        Subject: CN=B7FA9366533E2602BAC37087160B1B7CCB115AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:d4:0c:5e:f6:46:19:91:1a:ea:c3:33:43:
                    be:1b:89:10:cd:6f:b8:0a:82:d2:11:98:8d:6a:ce:
                    8e:24:f8:ad:32:f4:1d:45:25:fe:f2:fb:ed:d6:18:
                    54:82:c1:38:9a:7c:87:e7:6d:fa:c0:1a:97:03:24:
                    61:24:b3:d1:c0:ab:bb:48:79:22:98:d1:73:73:4c:
                    6c:65:73:3c:87:70:46:08:96:fa:e7:ff:8b:e0:ff:
                    5a:0c:fe:86:ca:9a:1d:9a:aa:a6:ae:78:4c:4d:aa:
                    b8:f4:5c:6e:05:fc:85:35:2c:4a:06:1a:9c:a7:5f:
                    45:39:e0:c8:dd:f7:d7:4c:9c:92:dd:b2:a7:57:36:
                    bd:d9:f8:7d:2f:67:dc:35:79:47:0c:1a:e1:31:77:
                    c1:05:01:32:05:4f:f8:77:47:7f:5e:a8:19:0a:65:
                    bf:ea:bc:6a:b6:87:09:93:b0:dc:22:a4:c1:a7:33:
                    56:a5:0e:bf:a3:99:8c:af:78:f1:21:95:e9:0d:e9:
                    45:ca:8a:73:c6:25:e4:a4:b8:67:95:fb:39:06:22:
                    9c:34:a0:c2:85:a2:20:07:b7:65:fb:43:93:06:78:
                    13:5d:50:93:7e:b4:a5:35:6c:41:a3:84:3e:72:46:
                    6b:44:f8:8c:d0:44:cc:01:ad:0e:f5:73:bd:38:45:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:FA:93:66:53:3E:26:02:BA:C3:70:87:16:0B:1B:7C:CB:11:5A:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273592

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:02:67:cd:8c:60:d4:66:0a:79:0a:46:3f:ae:87:10:2f:
         de:b6:b7:01:ec:b0:ec:00:28:3a:16:c2:c5:73:07:11:4b:3b:
         a4:02:8a:84:a8:af:9a:00:9e:8c:2e:ab:af:00:bb:fc:b6:2a:
         f4:49:42:b3:cf:af:03:04:e3:d4:bd:35:ea:ee:da:20:d1:16:
         dd:0d:49:73:4b:fd:5a:73:04:d9:d6:0f:be:c2:20:5d:c0:92:
         22:68:fc:8e:05:1d:a2:e4:a6:a6:6b:e4:7d:e3:cb:6f:e5:d1:
         43:c2:f3:9e:b9:91:ee:25:25:2d:3e:12:95:69:11:d1:01:52:
         38:9f:08:63:b9:6e:76:0a:85:41:65:47:ae:5f:f6:56:59:bd:
         43:0d:a0:72:97:31:0b:08:44:df:ca:72:5e:af:95:12:39:30:
         7e:9c:9e:cc:1a:b7:54:89:e5:1a:af:f0:83:f5:ea:d8:06:12:
         42:7f:88:3d:73:e5:35:a0:d4:18:68:28:44:e7:5d:2e:2f:03:
         cb:cb:66:1f:d0:9f:c4:dc:2f:bf:97:1b:6f:00:05:49:e3:2c:
         65:ea:88:bb:b2:33:44:f0:67:70:99:48:5d:bc:87:b2:16:d3:
         5a:76:ea:73:7a:32:df:ba:70:5d:d6:58:18:56:cc:30:cb:a3:
         16:e7:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org