Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer
File:                     CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer (raw, json)
Hash identifier:          eNgSJ338SqKP5sj9zC6+W2nY6T3azAELhOvNt4E9Ulc=
Subject key identifier:   CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       252B506FC4555B00362DE7E9AFCBA9EB22945DA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 May 2024 13:59:37 +0000
Certificate not after:    Mon 12 May 2025 14:04:37 +0000
Subordinate resources:    AS: 269075
                          IP: 45.179.108.0/22
                          IP: 2804:5f14::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 03:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:50:6f:c4:55:5b:00:36:2d:e7:e9:af:cb:a9:eb:22:94:5d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 13 13:59:37 2024 GMT
            Not After : May 12 14:04:37 2025 GMT
        Subject: CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:bd:2a:27:8b:e7:73:89:9e:d5:06:87:fd:
                    40:62:3f:91:b9:a3:4a:a6:f9:77:31:1d:68:87:a3:
                    bd:9f:28:94:f5:48:2f:65:65:68:7e:57:0e:d1:7d:
                    5b:1e:2c:04:b7:63:93:13:9f:6b:59:a2:1a:92:fa:
                    2f:59:ac:82:92:3e:1d:7f:27:ec:0c:82:69:7d:cc:
                    2d:a4:e9:64:76:73:54:de:33:31:ea:3f:e9:35:c2:
                    34:cc:a2:db:7f:25:82:9e:42:91:d9:a1:29:50:34:
                    5a:91:e1:76:5b:8e:a5:69:7d:3b:29:80:38:8f:95:
                    b7:c4:00:0a:65:c4:94:f1:a0:79:92:67:bb:c3:3b:
                    4c:2c:76:cf:93:69:9b:90:42:a8:51:6a:df:bc:18:
                    e5:a4:28:2f:2a:b0:e4:61:70:1c:2e:f4:b6:0e:c2:
                    df:6c:8c:2e:82:90:20:fd:de:03:57:2f:8b:fc:c8:
                    e8:f4:cf:fc:ba:2b:e4:c1:6f:16:d4:59:c7:a8:49:
                    0d:7f:6e:c5:3b:74:f1:98:65:31:32:ba:01:5c:b1:
                    67:3d:8e:df:2d:4a:23:eb:79:da:ce:6f:8c:29:48:
                    69:53:01:7c:32:67:e5:16:48:5a:a5:ac:aa:80:f2:
                    e1:06:b6:61:86:e4:84:03:af:e4:c4:83:0e:54:a9:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.108.0/22
                IPv6:
                  2804:5f14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269075

    Signature Algorithm: sha256WithRSAEncryption
         09:ff:6b:ad:ff:1e:f7:58:91:2c:bd:09:8f:45:10:ab:33:1e:
         84:d8:af:a6:85:9d:c2:59:59:42:a9:19:07:55:83:3e:b8:36:
         5b:d6:65:55:7a:2e:f7:59:3a:92:2a:41:b9:83:d0:8a:2d:35:
         b6:6f:41:90:5f:42:54:6e:85:49:a4:a8:21:16:ef:df:d3:b5:
         0a:9b:34:46:c6:66:a4:2c:68:6f:e9:91:f5:04:95:58:e8:5d:
         0d:14:1b:8c:82:61:16:1b:78:53:af:5c:20:c6:89:ce:9f:22:
         32:b2:d5:d4:25:81:c6:f4:88:a4:ac:63:84:68:5a:61:a5:3a:
         cf:d9:46:fe:4a:af:71:c5:4f:2c:46:9f:c9:fe:66:8a:51:20:
         1e:15:70:b9:c6:92:3a:0d:83:bd:72:bf:4c:51:b2:ff:fe:a7:
         4b:a9:18:08:08:79:59:bf:ed:37:1a:d6:bc:6e:68:a5:57:10:
         94:2f:d2:54:d3:f5:15:4c:6d:5b:9d:d1:b6:aa:e1:67:a4:11:
         f8:bb:ea:66:3a:5a:5e:72:f9:8f:69:b5:e9:f5:c2:5b:9c:b0:
         bb:17:c9:82:8b:8e:d9:06:62:c3:c1:50:cd:8a:1f:6d:0b:c6:
         d4:c5:ab:42:a2:b1:8a:58:d6:34:fb:7c:13:6f:2b:6b:14:e7:
         bb:04:5e:2e
-----BEGIN CERTIFICATE-----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Generated at Thu May 23 04:33:22 2024 by rpki-client on console-fra.rpki-client.org