Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C12919686BF8F86A1431D6EE05320B2E3E6E10B2.cer
File:                     C12919686BF8F86A1431D6EE05320B2E3E6E10B2.cer (raw, json)
Hash identifier:          40Ag0PCZIFsrZ+N0iZFIGYRd3L7tMy9Od0OwYk5I6p8=
Subject key identifier:   C1:29:19:68:6B:F8:F8:6A:14:31:D6:EE:05:32:0B:2E:3E:6E:10:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43D07A2136F40DC9A23DE5DB6ED695D2063EB270
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/1/C12919686BF8F86A1431D6EE05320B2E3E6E10B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:56:15 +0000
Certificate not after:    Wed 02 Apr 2025 19:01:15 +0000
Subordinate resources:    AS: 61810
                          IP: 201.158.56.0/22
                          IP: 2804:19a8::/32

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 16:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d0:7a:21:36:f4:0d:c9:a2:3d:e5:db:6e:d6:95:d2:06:3e:b2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:56:15 2024 GMT
            Not After : Apr  2 19:01:15 2025 GMT
        Subject: CN=C12919686BF8F86A1431D6EE05320B2E3E6E10B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:22:42:b8:d4:c1:ee:1e:1c:6d:93:83:16:
                    c1:54:50:22:82:bd:00:de:44:9f:88:55:7d:44:f3:
                    77:ae:ae:fa:72:17:7f:41:fb:38:cc:d4:23:1e:28:
                    1e:a6:eb:0e:57:0d:c1:08:c2:8a:5b:19:ce:7f:b6:
                    f6:8b:a1:25:d1:f3:a3:31:7d:e0:69:8a:b9:ed:94:
                    80:05:05:76:36:54:e0:86:6c:87:f5:c4:6e:41:9e:
                    da:5d:fc:61:7d:12:ed:81:92:ea:36:a4:e1:f8:d4:
                    c3:4d:2c:92:e9:1e:05:bc:40:cc:45:fe:55:48:a3:
                    28:d1:b9:44:15:ea:7d:33:43:ee:ed:8c:c5:47:94:
                    87:b3:93:f1:0d:09:19:e3:d7:09:c9:e8:1e:87:b3:
                    93:e2:bc:36:d6:c1:79:a4:83:49:e0:f2:73:28:53:
                    66:84:75:37:4f:a6:be:95:89:92:50:f6:a9:87:e1:
                    2e:08:06:3a:0c:0d:ed:06:8b:c5:ff:cc:2d:a0:6f:
                    48:b2:db:70:90:71:50:83:36:f3:bc:d2:44:06:4a:
                    2e:31:d9:37:e1:41:6b:1b:80:dc:fb:31:b8:50:a6:
                    09:c3:bf:ec:de:49:18:b7:b6:f3:62:42:a2:fd:b2:
                    c9:06:6b:31:d6:c4:5f:63:d9:f7:3f:8d:da:8b:c9:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:29:19:68:6B:F8:F8:6A:14:31:D6:EE:05:32:0B:2E:3E:6E:10:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/1/C12919686BF8F86A1431D6EE05320B2E3E6E10B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.56.0/22
                IPv6:
                  2804:19a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61810

    Signature Algorithm: sha256WithRSAEncryption
         94:26:6a:e6:dd:70:67:e8:83:0e:e9:23:19:d8:61:fd:67:7b:
         24:b5:98:be:28:b1:88:8e:28:5d:f2:44:f2:e4:20:09:61:49:
         09:a7:ad:04:19:83:2d:07:5e:ec:93:ee:d9:3d:15:4f:bd:ff:
         3a:49:0d:1d:4c:84:d8:f1:71:74:d9:bb:6a:43:8e:09:bb:a3:
         c8:5e:f8:de:27:bb:d2:69:33:b7:76:1b:bc:c9:cc:b6:7b:0e:
         dc:f4:3b:a0:81:f4:9f:ed:99:87:1b:11:42:c8:91:2c:80:ad:
         d3:ec:1f:3d:b7:c9:2e:3d:f6:82:ad:b1:de:be:49:31:52:6b:
         f6:cf:14:69:1f:6e:bf:ee:3f:b7:ee:3f:c7:f5:06:86:d7:27:
         22:53:ad:a9:1d:9f:fe:70:b1:96:10:cd:49:33:82:7e:99:26:
         c9:ef:cd:42:3f:29:16:e6:60:15:42:76:24:4c:a7:3b:ec:5e:
         27:8c:de:68:d3:e2:1f:d6:0f:b5:ee:b4:c7:d7:9f:f0:99:29:
         e6:f0:f7:34:b8:47:e3:2f:eb:dd:7b:46:d6:52:0d:f4:59:d6:
         6c:15:dd:57:da:c7:52:d7:43:81:0c:c6:6b:c7:2c:93:cc:e9:
         37:42:99:07:f5:d2:23:d4:e5:5c:5d:db:0a:33:1b:25:ce:3b:
         bd:6f:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org