Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C937D3A0B9EF4B981118C291ED6EFFBE78A6E47D.cer
File:                     C937D3A0B9EF4B981118C291ED6EFFBE78A6E47D.cer (raw, json)
Hash identifier:          hpqoPh5s7QUwGE/+cjaHOHkHdtJj4zz3dW/5LN/FgLg=
Subject key identifier:   C9:37:D3:A0:B9:EF:4B:98:11:18:C2:91:ED:6E:FF:BE:78:A6:E4:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47CEE08F6716D88C1B17C9C0FD6306296E651C08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/1/C937D3A0B9EF4B981118C291ED6EFFBE78A6E47D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:12 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:12 +0000
Subordinate resources:    AS: 265187
                          IP: 168.90.112.0/22
                          IP: 2804:2c00::/32

Validation:               Failed, certificate revoked on Sun 12 May 2024 19:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ce:e0:8f:67:16:d8:8c:1b:17:c9:c0:fd:63:06:29:6e:65:1c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject: CN=C937D3A0B9EF4B981118C291ED6EFFBE78A6E47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:f2:95:59:56:a3:2f:89:6a:37:42:9e:bd:
                    1a:47:24:c5:10:eb:dc:a6:b3:a7:26:9e:0a:ea:de:
                    02:46:75:f1:93:d5:e8:0d:76:e4:f6:17:7e:e4:7d:
                    5a:1d:28:ff:9c:fe:40:87:1a:c0:39:4b:5f:50:b4:
                    8b:d6:2a:0e:4d:9c:61:8c:68:99:85:d3:27:d9:8a:
                    ed:fb:c4:11:b8:b1:02:9d:cd:ba:84:91:7d:f7:b2:
                    86:bc:a9:f0:fc:fe:ce:ea:f1:62:21:4b:b5:b2:ec:
                    61:29:73:59:a5:33:cc:8c:fa:92:49:b5:a6:a5:56:
                    06:57:d2:c9:3c:c9:02:7f:9e:fd:0b:95:d8:20:11:
                    fe:15:8a:e4:b8:f2:fc:3b:0f:c7:86:65:65:66:9e:
                    e4:16:fa:2b:95:a9:71:8d:a6:1a:94:ca:dc:cf:10:
                    0e:b9:01:bd:88:04:71:76:b7:7d:f4:4f:7c:4c:30:
                    26:59:ac:a9:2a:e7:24:e2:ec:c1:4c:2a:0f:be:16:
                    3a:4c:18:be:0e:e7:0b:f7:a5:ae:b8:8e:10:33:f9:
                    c6:51:1e:7a:1c:8f:2f:35:d4:4a:0e:b2:e2:37:ae:
                    5b:58:29:50:88:33:7f:a2:ae:25:72:a9:6f:a1:8f:
                    7a:3f:44:48:84:cc:84:fc:ac:1d:47:c5:89:be:55:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:37:D3:A0:B9:EF:4B:98:11:18:C2:91:ED:6E:FF:BE:78:A6:E4:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/1/C937D3A0B9EF4B981118C291ED6EFFBE78A6E47D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/22
                IPv6:
                  2804:2c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265187

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:72:e5:72:3d:30:4a:77:e6:53:48:b5:85:68:84:88:8c:
         4c:20:5b:30:60:2e:a2:59:5a:b1:5f:76:00:43:01:e3:71:90:
         16:3a:12:90:55:d7:de:b5:e7:65:46:81:ab:62:10:01:25:78:
         e0:29:c3:b0:ea:bb:a9:34:99:33:b5:bc:c4:96:be:c3:09:d0:
         67:48:e3:57:4e:60:64:d4:cf:6c:4b:db:c4:70:f8:bd:c5:3c:
         e8:a6:b9:c3:9f:fc:40:64:9f:42:15:c3:f5:64:94:75:5b:cb:
         e6:97:e9:01:ba:a0:05:e5:db:04:98:48:dc:67:fc:ad:39:c5:
         0e:7d:4c:86:7a:09:b3:32:9a:61:ca:49:27:c5:d8:d9:f7:2a:
         8f:00:74:89:f4:54:f4:22:21:39:fa:9e:f2:9c:95:9c:46:be:
         b1:6a:58:c2:e6:be:8a:46:a0:57:73:ee:4f:7d:a5:71:45:f0:
         77:64:7e:cc:c8:ff:0a:91:33:47:dc:87:ea:91:40:45:1c:d0:
         32:27:bd:03:80:81:98:09:0c:52:a8:40:dc:6e:45:5f:01:ce:
         30:f4:ae:41:43:04:e0:e6:e8:1f:5d:eb:86:b5:96:80:5f:17:
         cf:64:a2:17:9e:13:68:5a:21:a5:46:07:db:48:03:ef:99:56:
         f2:a2:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org