Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB10A0B583AA25EB74731311A3A046718711D71E.cer
File:                     CB10A0B583AA25EB74731311A3A046718711D71E.cer (raw, json)
Hash identifier:          EzfBUJVMJtAImHs9jSOOohCYMEVamat8ExIsMf6mMkw=
Subject key identifier:   CB:10:A0:B5:83:AA:25:EB:74:73:13:11:A3:A0:46:71:87:11:D7:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CE107A46FA8D8FD00691C44DB60BBB43CDB2C46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/1/CB10A0B583AA25EB74731311A3A046718711D71E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 12:27:45 +0000
Certificate not after:    Fri 04 Apr 2025 12:32:45 +0000
Subordinate resources:    AS: 269041
                          IP: 45.178.168.0/22
                          IP: 2804:5e90::/32

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 15:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e1:07:a4:6f:a8:d8:fd:00:69:1c:44:db:60:bb:b4:3c:db:2c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 12:27:45 2024 GMT
            Not After : Apr  4 12:32:45 2025 GMT
        Subject: CN=CB10A0B583AA25EB74731311A3A046718711D71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:16:4f:67:6e:53:cf:d4:c9:24:21:8f:4d:
                    2e:1e:e7:1c:a4:14:31:f2:59:bc:6b:1e:4d:cb:0d:
                    a0:1a:90:4d:5a:d3:be:0c:4b:9c:83:59:fd:80:84:
                    f0:82:22:5b:f0:bc:5c:5e:c2:51:93:24:a2:8c:04:
                    af:73:ce:40:7a:5c:b1:af:6b:d6:f1:d1:7c:be:c8:
                    fe:91:3e:45:cd:80:27:8d:ad:e1:64:b6:55:57:95:
                    c0:31:c7:86:57:33:97:40:ae:a0:a7:98:63:e2:60:
                    e6:c1:dd:20:0c:62:71:8c:11:8c:bc:d4:5a:d2:2c:
                    db:c2:42:90:22:43:31:a6:17:0d:ec:b6:ec:3f:37:
                    b5:9c:c2:3d:1d:98:f0:69:ba:a3:0b:38:61:a4:82:
                    12:bb:ab:e9:9d:f2:84:0d:af:57:43:95:ac:ca:a7:
                    5c:b9:4a:f4:4e:64:7a:35:77:e4:c6:4e:0a:bb:6c:
                    84:4f:d3:f6:78:4b:36:97:14:dd:0d:09:89:6d:51:
                    70:fd:ef:cb:46:3b:77:4a:88:3a:95:28:60:61:4b:
                    9e:8c:17:25:f1:f2:f9:c5:96:eb:54:93:81:f9:61:
                    39:02:b0:93:a2:7b:3f:bc:ed:95:15:58:f5:02:a6:
                    3f:f5:63:d3:71:cb:09:f1:57:e4:04:af:6f:8e:c3:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:10:A0:B5:83:AA:25:EB:74:73:13:11:A3:A0:46:71:87:11:D7:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/1/CB10A0B583AA25EB74731311A3A046718711D71E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.168.0/22
                IPv6:
                  2804:5e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269041

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:20:e6:ea:46:b8:11:58:d6:3f:ad:0d:4d:ec:79:ff:2c:
         e1:12:2f:f3:a9:fb:70:21:ab:fe:64:62:7b:b9:78:ae:90:a0:
         67:3c:fb:a4:8c:43:9e:c0:81:31:b3:dd:fb:72:f7:4e:cc:7c:
         0c:89:25:1d:c1:66:e7:9e:ae:35:3d:3a:af:43:1b:3d:5b:7b:
         18:e4:32:56:7c:28:ee:ae:76:7e:9e:4b:f8:7b:67:13:f4:59:
         3a:88:3d:69:ad:e1:54:aa:1f:7f:9f:84:14:70:30:45:78:05:
         90:bb:1b:31:a0:05:58:e5:f0:d5:77:54:92:a4:9d:d3:0b:b7:
         8e:a5:42:d6:ed:7d:fd:4a:bb:9d:1c:e5:37:98:46:37:67:61:
         a7:18:5a:d1:f7:42:b1:39:53:ca:87:fd:d5:21:87:9c:c0:e4:
         32:ab:39:8b:8a:3d:90:0a:46:6d:e8:ee:15:34:14:b8:02:f5:
         f0:71:6b:f6:e5:0f:ee:00:11:c8:38:98:78:7f:ad:0d:61:b3:
         e8:35:40:3d:4f:86:70:3b:34:49:e0:40:6d:85:56:85:b1:4f:
         75:e8:a8:2f:7e:57:87:61:cf:17:c5:df:92:09:3d:3f:e0:c0:
         8f:df:f6:ce:d1:a7:0f:b3:aa:f0:5c:af:f7:9b:12:16:88:de:
         20:46:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org