Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8B51C400F19A4F4A4DD2106F838A597BB432CAC.cer
File:                     B8B51C400F19A4F4A4DD2106F838A597BB432CAC.cer (raw, json)
Hash identifier:          80XEzqHPZEykii3O7AYszJ6xU8LB/SSJ28sztDg55xc=
Subject key identifier:   B8:B5:1C:40:0F:19:A4:F4:A4:DD:21:06:F8:38:A5:97:BB:43:2C:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2DA9002E9F600480654406A2A4D4BEA71045C4F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/1/B8B51C400F19A4F4A4DD2106F838A597BB432CAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:49 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:49 +0000
Subordinate resources:    AS: 263390
                          IP: 177.222.176.0/20
                          IP: 2804:157c::/32

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a9:00:2e:9f:60:04:80:65:44:06:a2:a4:d4:be:a7:10:45:c4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=B8B51C400F19A4F4A4DD2106F838A597BB432CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:b0:6b:de:e0:da:58:0c:a2:3c:af:83:70:
                    20:58:43:ab:81:42:16:20:08:a4:76:9c:53:a1:22:
                    b8:cf:d9:23:d0:e6:8f:d6:12:b1:17:82:c5:44:14:
                    78:d5:29:b5:04:c8:96:01:11:94:27:17:25:cc:48:
                    67:a8:5d:89:7d:9d:87:e5:a0:e0:fa:6e:60:7f:c9:
                    6d:42:6b:e5:61:ae:81:71:0e:43:99:47:4c:30:07:
                    2c:e7:23:e8:be:4c:9b:c3:7d:47:db:2f:38:70:5c:
                    09:b4:a4:cb:9b:78:09:4c:14:4e:6c:a7:58:dd:41:
                    a1:48:73:55:88:d5:78:9c:90:d3:a5:5d:19:1a:5d:
                    c5:ec:e1:16:54:bc:50:e6:03:78:9d:ad:49:6c:cb:
                    27:35:d5:9b:0b:e6:52:d3:a6:b6:98:98:d3:46:0d:
                    ff:2c:b9:07:e6:e1:46:35:eb:3f:7f:e1:97:de:b1:
                    b1:72:6f:13:1a:0d:d3:f4:c4:7d:e8:35:41:1b:7f:
                    31:2d:dd:f9:77:0c:e5:05:e9:c6:09:40:ba:3d:26:
                    85:27:3a:59:14:47:7f:8c:36:e7:0e:8e:37:6d:cb:
                    82:9d:b8:4f:0f:49:18:5a:af:7f:6c:62:3e:eb:57:
                    be:89:74:7f:a4:11:a1:b7:23:ce:96:72:7f:93:d4:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:B5:1C:40:0F:19:A4:F4:A4:DD:21:06:F8:38:A5:97:BB:43:2C:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/1/B8B51C400F19A4F4A4DD2106F838A597BB432CAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20
                IPv6:
                  2804:157c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263390

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:5f:49:57:1e:79:67:20:dc:70:a2:7e:e4:03:5c:d9:2f:
         87:8c:80:76:47:ac:31:67:dc:82:46:3a:2b:1a:5f:b5:f1:48:
         62:10:2f:62:75:73:db:02:1f:d0:9f:b7:89:ca:8f:68:4c:2e:
         c7:81:3e:fc:bd:5d:fa:ae:ff:cd:18:7b:ba:77:0e:bf:6d:f0:
         0d:4b:9b:69:2d:cd:f3:c4:18:74:91:75:3c:16:a9:97:4e:d8:
         9e:c5:40:e7:45:49:0f:eb:6d:a3:b0:06:49:03:b9:9a:ab:6b:
         1f:48:8e:de:0c:3c:71:70:34:e5:bf:c2:19:e1:a1:4f:14:85:
         ab:11:5f:78:02:3d:1b:b1:8c:f9:fd:4b:5e:f3:77:0c:05:49:
         d6:22:3c:5d:36:a9:73:14:7a:23:90:17:f9:03:f3:df:a5:f4:
         cd:c8:79:52:6d:a0:30:a3:20:a6:90:3c:86:fd:73:b8:86:30:
         a0:00:06:0a:fc:e5:9e:10:12:d3:b9:89:e0:90:ff:33:f1:04:
         70:b8:39:da:51:2d:d8:0e:12:40:8a:f4:70:9a:c6:e8:2e:a1:
         d0:85:e5:3a:87:65:89:7d:50:13:f9:db:02:60:5a:57:44:d3:
         e0:67:34:9f:d3:4d:59:6e:45:5d:d8:b2:22:c6:74:25:13:97:
         b2:6e:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:39 2024 by rpki-client on console-ams.rpki-client.org