Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.cer
File:                     B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.cer (raw, json)
Hash identifier:          BlyrLEX33zSt1qWpvz5ccMN4KCZS0V8JZM/MfK9YweE=
Subject key identifier:   B9:3B:B7:48:63:B5:29:8E:6E:3E:F7:21:BC:A7:D4:69:FF:0A:3B:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5877C22D0C61D20144827CA3C940ACA9CECEC532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2024 14:38:52 +0000
Certificate not after:    Mon 28 Apr 2025 14:43:52 +0000
Subordinate resources:    AS: 268303
                          IP: 45.237.212.0/22
                          IP: 2804:4f18::/32

Validation:               Failed, certificate revoked on Thu 30 May 2024 02:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:77:c2:2d:0c:61:d2:01:44:82:7c:a3:c9:40:ac:a9:ce:ce:c5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 14:38:52 2024 GMT
            Not After : Apr 28 14:43:52 2025 GMT
        Subject: CN=B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:6c:9f:67:c0:af:f1:55:6e:be:45:a5:80:
                    51:00:f0:54:fd:7e:81:13:32:56:2f:f3:8c:2b:1f:
                    21:78:df:c0:73:17:6a:63:4c:f2:f2:92:06:a1:fb:
                    ee:56:e8:18:ba:dc:7e:11:57:1a:44:74:dc:45:8d:
                    22:2c:5e:7b:8c:1d:87:ca:8e:94:13:e8:70:63:65:
                    1b:66:5f:da:61:d9:42:4f:e8:cd:94:a7:58:b0:7f:
                    de:0f:da:19:7a:e4:85:fb:48:bd:3e:f4:6b:80:af:
                    63:56:72:04:6e:df:9a:67:16:56:9b:c1:f0:ab:ec:
                    da:ca:d8:2b:45:b3:3a:bc:75:36:17:24:87:9b:a4:
                    eb:33:9f:85:7e:69:d2:23:a0:df:56:4c:ba:39:8e:
                    b8:78:11:08:a6:fa:fa:4b:c8:2e:cb:54:3c:be:bd:
                    d7:81:59:2d:8c:97:8a:15:c5:50:16:ca:28:40:bc:
                    e0:c8:44:85:b5:0e:c9:8d:50:24:fe:b0:61:90:d4:
                    31:f3:07:84:28:c1:dc:d0:d6:99:e1:a7:88:d2:67:
                    48:76:86:8a:13:00:c5:3e:3d:b2:29:56:2a:0f:be:
                    39:32:54:b0:40:1e:f0:98:29:48:76:21:4f:76:5b:
                    0c:e7:e2:84:4b:5b:94:e8:7e:81:d3:9b:82:40:f3:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:3B:B7:48:63:B5:29:8E:6E:3E:F7:21:BC:A7:D4:69:FF:0A:3B:BA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/B93BB74863B5298E6E3EF721BCA7D469FF0A3BBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22
                IPv6:
                  2804:4f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268303

    Signature Algorithm: sha256WithRSAEncryption
         da:73:65:79:c7:e2:1c:47:ec:42:de:d0:af:2e:b9:8f:0e:48:
         a7:9b:d8:45:f9:78:74:0a:71:1b:ff:e1:d2:42:a0:23:aa:86:
         7b:e4:6c:6d:b1:41:85:ac:1d:2b:81:c5:c0:05:9a:d1:f2:6e:
         e3:db:d2:1f:dc:63:32:18:fa:66:17:97:8f:61:13:73:76:c2:
         ab:f3:50:fa:08:ce:06:2e:b0:59:84:d1:86:6d:0f:ec:fc:4a:
         de:b9:87:56:18:2a:26:c4:01:aa:f8:78:91:06:53:4e:f9:25:
         0b:3c:11:f8:24:90:ab:80:91:79:42:4e:f2:a6:11:53:d5:f3:
         57:34:87:92:1e:b2:3b:c6:de:19:e5:7e:7c:f3:94:9c:50:b7:
         34:d6:ea:51:1f:ef:34:c6:91:88:b2:e8:29:49:3c:b1:fb:b5:
         e9:2d:cc:91:78:1c:dd:b2:b9:ab:2e:ce:89:09:95:82:44:8b:
         e2:ad:7b:42:22:12:d9:39:80:63:3b:25:9a:e6:9a:02:34:4d:
         ea:b6:03:3f:0a:65:dc:3f:15:3b:00:fc:3d:e1:5e:06:3b:7f:
         7e:aa:7a:6a:ad:67:76:04:4e:36:2c:da:ee:ba:07:1a:c8:79:
         5d:22:85:4b:24:30:03:53:e9:11:60:a9:2c:b3:23:e8:20:7f:
         ae:d8:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 05:21:09 2024 by rpki-client on console-fra.rpki-client.org