Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D196EFB00C18555EB8DD98F44144FF8D11271885.cer
File:                     D196EFB00C18555EB8DD98F44144FF8D11271885.cer (raw, json)
Hash identifier:          3ko93FxivzjZJpwX3Ax45My5aOeZIJ/Tk+bHVakkfOg=
Subject key identifier:   D1:96:EF:B0:0C:18:55:5E:B8:DD:98:F4:41:44:FF:8D:11:27:18:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14074FC90D66FEC8C439EA24D615F07EC813D207
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/1/D196EFB00C18555EB8DD98F44144FF8D11271885.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:07 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:07 +0000
Subordinate resources:    AS: 263103
                          IP: 186.235.240.0/21
                          IP: 2804:4c24::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:4f:c9:0d:66:fe:c8:c4:39:ea:24:d6:15:f0:7e:c8:13:d2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:07 2024 GMT
            Not After : Apr  2 19:03:07 2025 GMT
        Subject: CN=D196EFB00C18555EB8DD98F44144FF8D11271885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:85:c2:b0:31:6b:84:8e:8b:ac:56:0b:22:
                    d9:5e:58:c4:d7:53:af:ea:5b:79:87:e3:82:46:38:
                    72:72:4b:d1:91:f2:a0:1c:52:04:1a:d5:17:47:93:
                    ec:02:3d:84:a9:e3:30:9e:51:f7:f3:ff:c0:b2:98:
                    b6:fd:a6:5f:3c:34:d7:cc:e2:58:fb:cc:aa:a5:68:
                    92:71:47:72:95:ac:88:f4:eb:9b:c5:7c:6d:d6:2a:
                    d1:96:53:9e:81:8c:64:c6:ec:e0:d7:c2:d2:48:3c:
                    d9:8a:49:2b:ce:22:3e:1a:69:93:ba:4b:43:a6:41:
                    2d:a7:0b:71:3c:a6:fb:04:21:69:bf:68:fe:05:3c:
                    8f:e6:46:c5:60:71:18:29:0d:0c:eb:eb:2f:96:1b:
                    58:d4:bb:15:b4:74:21:7f:5a:13:4a:a7:b2:ad:20:
                    f3:97:dd:f9:c2:66:9b:b4:a6:d5:48:39:e1:e8:c0:
                    74:f8:80:99:1e:0a:44:dc:84:fc:c4:6f:11:c7:c7:
                    ad:85:fe:1e:8e:dd:42:a8:63:b2:6c:fc:4c:62:79:
                    b3:52:50:ed:9a:d3:02:94:99:34:3f:87:78:e3:2d:
                    ed:0d:9d:e5:83:9d:d0:f6:f4:60:61:d3:e8:f9:c6:
                    62:77:10:8c:19:b0:b6:98:ee:8b:d7:98:52:7d:5d:
                    1e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:96:EF:B0:0C:18:55:5E:B8:DD:98:F4:41:44:FF:8D:11:27:18:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/1/D196EFB00C18555EB8DD98F44144FF8D11271885.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.240.0/21
                IPv6:
                  2804:4c24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263103

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:84:7a:4e:75:ad:21:c2:93:ea:2c:1b:cc:a4:d6:fa:e1:
         99:7f:cb:73:c1:d2:77:5c:e4:5e:ed:eb:1d:c0:6a:8b:51:b9:
         a6:8f:2e:9d:ac:b6:bd:85:96:21:31:85:55:f1:b2:4f:00:26:
         c8:af:84:fa:a8:07:25:a3:85:a7:cc:05:04:45:79:8a:7d:05:
         0e:b2:23:8b:6d:6c:21:45:5e:7f:2c:02:0b:63:2f:6e:29:ad:
         a6:53:e9:e1:69:6a:27:e8:af:28:bb:01:17:03:ea:15:29:20:
         23:a7:2a:88:c7:32:7a:15:f8:58:5d:bb:da:1a:95:5b:34:8f:
         a0:c6:36:3e:29:5a:88:3d:bb:a9:7b:19:86:4d:07:b5:80:d4:
         82:a3:5f:19:46:48:d8:7d:ed:ee:51:24:e1:f0:e4:98:70:b2:
         fd:f9:35:e6:4e:5f:5a:96:03:62:98:9e:e6:54:b8:dc:e8:f1:
         2d:16:7d:c2:ca:fc:f8:01:4a:d2:bc:2a:31:46:18:0b:b4:5c:
         a7:ec:57:ae:4d:73:51:63:07:7e:40:41:cc:9c:dc:60:1f:f7:
         aa:96:db:26:8a:cd:7d:94:43:68:b0:7c:91:d0:30:be:30:df:
         c0:16:3d:6d:8d:52:ef:e9:cb:cf:55:d0:7b:4b:79:f0:1b:e5:
         28:98:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org