Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B90CD2A7659914C953C0D27C593A11C8525FE8D7.cer
File:                     B90CD2A7659914C953C0D27C593A11C8525FE8D7.cer (raw, json)
Hash identifier:          YFAnJMUT4IfZwSJ8tTU4rkg7pbzLBPYALKION8do2dk=
Subject key identifier:   B9:0C:D2:A7:65:99:14:C9:53:C0:D2:7C:59:3A:11:C8:52:5F:E8:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DD69E4256CF3187273BB801FEA988849A892704
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/B90CD2A7659914C953C0D27C593A11C8525FE8D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Aug 2024 22:24:03 +0000
Certificate not after:    Wed 06 Aug 2025 22:29:03 +0000
Subordinate resources:    AS: 271150
                          IP: 179.42.108.0/22
                          IP: 2804:7708::/32

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 23:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d6:9e:42:56:cf:31:87:27:3b:b8:01:fe:a9:88:84:9a:89:27:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  7 22:24:03 2024 GMT
            Not After : Aug  6 22:29:03 2025 GMT
        Subject: CN=B90CD2A7659914C953C0D27C593A11C8525FE8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:27:32:17:b5:f2:be:b9:18:5b:cd:64:e1:
                    99:e3:f3:3a:7e:2f:97:0e:1e:34:fb:af:0f:37:4c:
                    21:b2:06:3c:3e:8f:8c:0c:8d:0b:65:af:85:a6:19:
                    3e:97:f8:41:63:b1:88:a7:9f:4e:af:07:78:90:1c:
                    d5:05:d9:50:7a:f2:6e:37:0a:2c:8d:ac:e9:db:37:
                    9e:f9:a0:2d:41:b1:37:e9:8f:79:9b:64:65:d9:9f:
                    c0:5a:a0:55:76:84:55:30:b5:04:89:54:28:6b:e6:
                    4f:0b:f1:b4:e4:01:72:76:bf:c4:db:12:20:b4:d2:
                    39:88:5d:e3:e3:54:8d:19:91:12:ea:0c:e7:24:a4:
                    2e:10:c8:2a:c8:13:92:0e:84:78:4f:d4:5a:9d:c0:
                    d9:07:e3:56:56:b1:f9:19:90:8a:bd:9c:1e:ee:f4:
                    48:2f:a9:12:0f:f4:e5:93:b5:a7:6e:66:6a:63:ab:
                    a5:24:75:c6:d2:a3:29:e5:98:39:ab:c4:a0:21:16:
                    5d:96:10:6b:7c:df:25:33:55:66:01:ed:e2:8d:4b:
                    fe:cb:30:80:95:78:d4:5d:e3:86:6e:3e:b2:9d:c8:
                    fb:41:5a:13:e2:e9:80:e8:a1:d7:f8:3f:2d:b1:8a:
                    3d:7e:b3:06:14:fe:d9:b3:15:3f:f1:c0:d8:8e:27:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:0C:D2:A7:65:99:14:C9:53:C0:D2:7C:59:3A:11:C8:52:5F:E8:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/B90CD2A7659914C953C0D27C593A11C8525FE8D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.108.0/22
                IPv6:
                  2804:7708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271150

    Signature Algorithm: sha256WithRSAEncryption
         49:98:8f:24:c7:5c:4f:d2:f0:9b:7b:29:8f:5e:74:0e:53:e7:
         7b:b6:11:df:3e:4d:9b:b7:30:50:cf:40:e1:d2:6e:7c:ab:5b:
         3f:02:1b:96:dd:44:f0:d7:03:6d:8d:0e:7a:8b:2e:19:e1:4f:
         84:09:44:8c:12:e9:db:dd:b6:44:82:41:1b:f2:ba:7b:f6:76:
         43:86:bf:07:b6:c6:f6:5d:37:bf:40:70:27:3a:fd:87:38:d2:
         92:af:bc:f5:ca:86:2b:50:e0:2c:70:70:cd:1c:30:90:6a:c2:
         2e:68:e0:c1:d0:2d:0b:2e:05:a3:26:51:ba:1d:da:66:fe:56:
         05:ed:fc:6b:b5:dd:ca:ac:8d:0c:d5:6a:4c:48:5c:04:e3:05:
         25:2d:99:f4:03:a1:06:42:36:8a:42:73:e2:d8:49:36:4c:9a:
         3d:c6:23:fb:9b:45:f4:a2:04:45:98:a0:ce:de:94:71:f3:e8:
         40:93:d7:99:d8:77:ce:86:8d:ba:0e:8c:56:23:84:e7:f7:45:
         96:ab:5b:20:77:0e:70:b6:ce:4d:63:e2:44:b7:29:a7:63:c6:
         0b:e7:44:54:fc:45:a5:34:82:82:71:94:b7:c9:8e:ab:ae:bc:
         ce:82:d3:9a:b6:45:58:47:2c:32:98:e9:3c:b4:cb:8e:15:30:
         5d:ba:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 02:23:36 2024 by rpki-client on console-ams.rpki-client.org