Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B89763062F5BAA9E5BD4A7505B3701993C286AAC.cer
File:                     B89763062F5BAA9E5BD4A7505B3701993C286AAC.cer (raw, json)
Hash identifier:          DkzvTwhYl2FrVLImgOB0vqq7IhcSUzB3MddmFgLfj9A=
Subject key identifier:   B8:97:63:06:2F:5B:AA:9E:5B:D4:A7:50:5B:37:01:99:3C:28:6A:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30803F3F10381014D92CB51C661E19D5D24BFCE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/B89763062F5BAA9E5BD4A7505B3701993C286AAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:07:37 +0000
Certificate not after:    Thu 03 Apr 2025 06:12:37 +0000
Subordinate resources:    AS: 268080
                          IP: 45.169.4.0/22
                          IP: 2804:57b0::/32

Validation:               Failed, certificate revoked on Tue 14 May 2024 19:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:80:3f:3f:10:38:10:14:d9:2c:b5:1c:66:1e:19:d5:d2:4b:fc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:07:37 2024 GMT
            Not After : Apr  3 06:12:37 2025 GMT
        Subject: CN=B89763062F5BAA9E5BD4A7505B3701993C286AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d0:98:93:e7:54:b8:d4:fc:b1:04:f1:b9:a8:
                    21:f9:40:6e:f1:52:86:f3:9d:bc:cb:d6:af:27:3b:
                    5f:38:3f:98:41:09:34:73:07:ac:99:4d:5d:03:00:
                    d5:3b:e6:ce:4f:20:71:29:20:d0:76:3e:88:e4:5b:
                    eb:5b:18:94:92:a7:8f:a8:7c:30:5b:0b:4e:06:05:
                    72:6d:19:8f:7a:ed:d7:c4:c2:61:48:8c:6f:80:95:
                    8f:1f:14:cb:0e:5a:96:53:4e:4e:61:ab:db:b4:b2:
                    27:9f:8d:4b:48:d5:76:98:9a:8d:85:7e:25:b6:50:
                    10:32:c9:c1:46:dd:cb:58:a4:14:5d:8c:62:d2:76:
                    69:21:6f:0b:f3:45:16:37:ad:fd:cf:66:3c:57:f4:
                    76:59:87:09:22:31:b3:3d:fd:b1:63:45:de:ab:58:
                    cb:7c:6e:35:48:67:53:af:27:6f:4e:cc:11:c7:8e:
                    dd:fd:46:91:e4:73:e8:f7:7e:16:d3:1d:ad:c0:e6:
                    2b:3d:54:ba:75:93:2e:8d:f5:42:95:60:42:da:91:
                    be:11:8d:42:08:62:ba:64:77:f4:97:b6:0c:1a:15:
                    cf:6a:c0:4e:a2:dd:cc:9b:83:ea:e3:de:e2:ad:b9:
                    eb:c4:d6:04:03:47:1f:66:1a:9f:52:90:a2:75:ea:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:97:63:06:2F:5B:AA:9E:5B:D4:A7:50:5B:37:01:99:3C:28:6A:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/1/B89763062F5BAA9E5BD4A7505B3701993C286AAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/22
                IPv6:
                  2804:57b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268080

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:78:26:99:d8:1d:69:9d:eb:69:ee:3e:a3:41:80:aa:aa:
         61:77:10:4f:54:36:52:ef:50:3c:1d:32:e1:a7:e4:b6:03:b9:
         6e:15:1a:32:e3:16:93:86:a9:65:a3:5b:99:64:6c:6b:9e:15:
         37:cc:77:b3:6e:31:0c:28:e0:62:0d:d6:9e:87:d6:f9:c1:26:
         94:dc:04:51:e8:86:92:c3:02:aa:1a:54:74:3a:f4:bb:1f:34:
         c2:4b:75:fe:f2:62:e7:91:15:a7:fe:83:ba:17:09:b8:bf:40:
         93:21:e7:9a:d7:a4:62:1f:e5:25:16:8c:91:ab:c1:5e:38:98:
         04:12:91:ac:9c:11:5c:b7:c2:1c:58:41:7a:16:e1:4e:59:4c:
         8f:8c:8e:3d:9d:27:fa:f4:07:1e:05:19:69:4b:c3:ff:34:5a:
         1d:34:25:7e:81:fc:04:a2:54:ae:d8:0d:37:6b:2f:69:3c:08:
         d7:91:34:94:b0:32:82:e4:d1:54:c6:99:8b:63:60:ab:8c:a6:
         da:ac:7c:b1:08:8c:02:75:fc:bc:8f:b2:66:f9:ae:81:66:a5:
         64:ea:3e:55:ff:5b:2b:7e:bc:a3:6c:94:97:85:5a:eb:b4:71:
         db:b8:72:fa:b5:21:52:0e:f7:c5:b4:0a:c8:c9:ea:a5:47:dd:
         55:45:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org