Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
File:                     B9565814EEE07F40E147986C257744795A8CFC01.cer (raw, json)
Hash identifier:          D81tbUJC6yI91ydEwm80wbQqGeCFS8Q4BkdOWFlJ8Gk=
Subject key identifier:   B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A7A6A034B7C87D04B9F512FD631707208DD7FC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:35:26 +0000
Certificate not after:    Wed 02 Apr 2025 21:40:26 +0000
Subordinate resources:    AS: 270868
                          IP: 177.23.48.0/22
                          IP: 2804:72ac::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 06:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7a:6a:03:4b:7c:87:d0:4b:9f:51:2f:d6:31:70:72:08:dd:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:35:26 2024 GMT
            Not After : Apr  2 21:40:26 2025 GMT
        Subject: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:a2:7a:57:96:43:ed:c8:aa:69:9b:67:cf:
                    5c:80:99:89:3a:45:3a:23:d7:e3:04:c0:0d:fe:d4:
                    06:6f:6b:0f:f8:d4:6d:0c:09:a5:46:34:34:e9:90:
                    9a:19:d9:38:e0:02:7d:33:30:1b:14:cf:a0:ba:9e:
                    4f:4e:03:2c:9d:11:da:81:d9:33:90:e7:fc:99:e7:
                    be:65:27:ad:17:4f:67:57:b8:54:50:f8:e2:34:b9:
                    b1:a8:4d:45:32:85:86:3b:17:18:b2:bf:8e:af:20:
                    c1:ab:e0:d5:bd:ab:7b:52:68:88:c2:f2:4a:3f:12:
                    64:09:36:43:38:90:dc:27:4b:d6:0a:f7:1b:90:bc:
                    28:1e:b1:80:06:94:ba:30:89:f8:71:34:c0:e6:81:
                    dd:27:67:15:e4:7b:2f:01:8d:df:5a:cc:73:4b:da:
                    cb:0c:7c:4f:b1:ba:03:4a:32:c1:34:ef:de:cd:a7:
                    ce:62:bc:61:cc:2b:81:ca:2f:bb:c5:fd:0e:5b:be:
                    73:ea:30:e3:ed:3e:5b:26:46:17:19:b9:4d:0c:f4:
                    8d:4e:84:61:a3:0c:42:48:a3:75:27:77:13:43:b1:
                    00:36:e1:f6:ce:c2:07:f3:66:76:e0:ce:70:0f:99:
                    44:88:8e:47:68:81:8d:8a:14:85:1e:50:f5:76:f3:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.48.0/22
                IPv6:
                  2804:72ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270868

    Signature Algorithm: sha256WithRSAEncryption
         43:25:f5:62:82:0f:8f:23:a7:8c:4f:04:ee:4a:3d:1f:eb:e5:
         f5:f0:8d:2e:80:04:84:c1:97:fa:35:a1:c5:3f:c7:6b:38:74:
         87:e2:ae:a3:18:b6:94:fb:4c:cd:5a:bd:a9:e4:1b:b7:d4:fe:
         08:49:7f:e8:ec:65:f0:8b:26:26:00:95:96:84:0f:9d:a9:5e:
         b2:27:6e:44:a5:2b:c0:27:e4:b0:dc:38:54:a0:91:c3:7b:eb:
         08:61:02:8e:fe:7b:58:8a:eb:2e:53:86:21:79:35:07:dc:a8:
         41:17:b0:9a:66:09:f3:ff:8d:c5:f4:be:d3:a2:6a:d6:d4:89:
         8d:e9:29:7e:d9:23:e4:59:e2:e9:2d:a4:d1:58:65:b0:62:88:
         5d:62:5c:85:68:51:d1:57:ec:c3:c2:b7:ee:8d:29:dc:fb:21:
         97:01:84:3b:9f:2e:33:6d:88:f0:99:7c:90:d8:a7:96:1d:ae:
         57:86:c5:01:cc:78:63:c8:02:cd:a8:6f:4d:9f:6a:3b:ea:11:
         15:9c:6e:dd:a3:c6:c1:95:e5:c7:b5:9e:d0:30:92:42:3d:c0:
         c0:b1:d4:99:05:f1:00:4f:a6:35:4f:f5:83:7e:9a:cd:69:03:
         38:f7:f9:c7:46:cc:c0:d8:90:4e:71:25:dd:e4:68:b7:f7:ec:
         93:18:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:04:39 2024 by rpki-client on console-fra.rpki-client.org