Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer
File:                     C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer (raw, json)
Hash identifier:          Ip93Jpe1HhgTUJMZSQSh3NOMLglp9L0/wYzw8+amKSM=
Subject key identifier:   C9:6F:7A:2B:61:8F:0D:88:FD:B9:AF:E0:AE:C0:41:21:37:4A:0C:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       221D6DF2523ED06404B5C4F0F37D4032C2952BBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:30:18 +0000
Certificate not after:    Thu 03 Apr 2025 12:35:18 +0000
Subordinate resources:    AS: 268982
                          IP: 45.177.132.0/22
                          IP: 2804:5d9c::/32

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 19:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1d:6d:f2:52:3e:d0:64:04:b5:c4:f0:f3:7d:40:32:c2:95:2b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:30:18 2024 GMT
            Not After : Apr  3 12:35:18 2025 GMT
        Subject: CN=C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:45:f5:dc:cd:ba:9e:88:c0:40:9c:07:16:
                    ea:4c:05:2d:67:d8:f3:91:58:3e:e5:22:13:01:24:
                    3d:20:ba:90:c6:bd:0b:3f:67:e4:fb:5e:bf:81:d0:
                    43:ce:e1:d6:13:4b:ad:bd:07:d6:b3:0f:0d:b5:6e:
                    33:c8:be:9c:11:13:ab:a6:78:eb:d9:51:24:a4:f5:
                    97:02:09:e9:55:67:34:d9:fe:91:b9:65:d2:fe:7a:
                    0b:41:3b:7d:ad:61:f4:67:77:df:cd:fa:02:2f:49:
                    e9:84:6e:6b:f4:18:a6:8b:9d:8b:92:19:b4:37:5e:
                    f4:5b:04:fd:29:5a:f9:20:2d:2c:25:2b:25:fc:b1:
                    f2:20:a8:64:b4:5d:b5:24:2a:57:de:61:3f:ea:76:
                    05:57:e3:86:2f:c8:68:5d:fd:dc:02:f4:0f:95:70:
                    95:26:fc:65:3e:3b:77:6e:a1:4e:6f:62:7a:8d:6d:
                    5b:f0:56:61:bc:87:f4:dc:3b:d9:9e:55:90:b3:f7:
                    4e:62:68:e4:07:74:6f:f7:40:64:db:c8:44:83:8d:
                    ad:28:1d:cd:15:e7:3e:a7:42:f6:c9:8a:98:ce:31:
                    c2:c7:76:b4:75:b1:35:fb:13:cd:1e:fd:a7:61:e7:
                    c6:cc:29:f7:a1:a3:f4:79:bb:86:dc:f1:56:d3:78:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:6F:7A:2B:61:8F:0D:88:FD:B9:AF:E0:AE:C0:41:21:37:4A:0C:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.132.0/22
                IPv6:
                  2804:5d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268982

    Signature Algorithm: sha256WithRSAEncryption
         dc:70:b5:8b:10:02:d5:f7:b2:d2:ab:25:2e:9b:9d:c7:8d:e4:
         cd:83:6b:d9:32:fc:49:99:5f:a0:bb:88:ab:8e:e3:5f:c7:68:
         ac:ee:95:c0:74:5e:04:7c:07:0e:33:17:5a:01:e9:cc:1e:95:
         89:66:8c:f1:cc:9e:8d:8c:df:b0:2b:40:63:58:68:17:60:29:
         b6:9c:42:66:7a:11:56:c1:9c:66:0a:17:cf:83:1f:46:39:2a:
         7d:9e:fe:8e:31:5e:78:ae:05:4e:31:3c:b3:52:ce:0f:2d:17:
         83:27:39:c0:67:3e:8f:6f:b0:3c:76:8a:8a:bf:36:40:f3:38:
         e6:29:f9:c0:5e:23:29:2a:b4:40:a9:3d:74:37:73:51:f2:e7:
         72:88:3c:93:ff:aa:d5:84:e0:39:23:43:49:e7:e8:1b:5c:23:
         98:9c:0c:dd:cb:91:43:04:0b:6b:62:a9:c3:d5:a8:38:c6:6b:
         fb:85:01:4e:fc:ad:87:c3:c4:48:fb:43:f8:e1:54:51:6a:71:
         51:b5:8c:c4:96:de:14:f8:02:3f:17:00:6b:73:c3:81:a9:ad:
         6b:83:40:7d:c9:61:ee:00:89:22:3d:67:61:e8:c7:fa:17:97:
         2d:4b:28:ae:f8:e1:96:1e:a3:a4:08:c9:31:86:68:29:56:42:
         a0:b4:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org