Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D256990B945A612A1ED366DE6B698A125F559753.cer
File:                     D256990B945A612A1ED366DE6B698A125F559753.cer (raw, json)
Hash identifier:          BmN+sAq31jwkMwyik7OuRS2b1paikQbPYBWEahFbivc=
Subject key identifier:   D2:56:99:0B:94:5A:61:2A:1E:D3:66:DE:6B:69:8A:12:5F:55:97:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       262DD69D5D32ED80334B128749D518DE2F7FF9ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/D256990B945A612A1ED366DE6B698A125F559753.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:27:12 +0000
Certificate not after:    Thu 03 Apr 2025 03:32:12 +0000
Subordinate resources:    AS: 268802
                          IP: 45.173.80.0/22
                          IP: 2804:5ae0::/32

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 06:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2d:d6:9d:5d:32:ed:80:33:4b:12:87:49:d5:18:de:2f:7f:f9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:27:12 2024 GMT
            Not After : Apr  3 03:32:12 2025 GMT
        Subject: CN=D256990B945A612A1ED366DE6B698A125F559753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:b2:b8:26:b4:3b:16:d0:ec:da:62:b5:f3:
                    5a:1a:b7:bd:7f:fc:fa:fc:e2:79:4c:55:2b:1c:69:
                    17:2e:f4:7f:fe:e8:5d:d6:9a:be:8b:f1:93:84:fa:
                    d5:fd:32:f4:45:74:eb:3b:67:e7:ee:d0:03:15:38:
                    2f:ed:bd:61:2b:0a:ef:3f:d9:ca:d2:41:7e:ae:ca:
                    ae:a0:80:88:13:b8:a8:e2:7d:c2:69:e0:dc:fe:af:
                    0c:7e:85:ed:3b:4e:71:03:d3:ba:07:db:9a:29:75:
                    46:82:d3:9b:68:7f:d7:b9:26:29:6e:a3:04:6d:db:
                    bc:85:85:10:58:33:b7:c4:3e:2f:25:7d:02:0e:93:
                    8e:3f:73:db:c0:7c:ac:e9:bc:32:47:8d:72:2b:19:
                    36:6a:5a:c2:e6:a5:cd:d6:ad:9f:83:de:e5:71:c7:
                    02:87:94:36:88:61:e2:86:9e:7e:85:98:2f:4a:f9:
                    e8:35:93:da:b3:61:d2:01:e6:13:4e:30:32:8d:44:
                    b6:85:ed:ee:d8:bc:56:ab:c0:d5:0f:6e:fe:4e:93:
                    db:57:f9:7c:92:12:fa:9b:e7:86:d9:35:02:9d:19:
                    e1:11:a2:15:61:7c:e4:e0:90:50:a0:07:f3:68:72:
                    93:8c:0f:88:bf:7d:5b:16:52:c6:a6:ef:94:ae:e7:
                    c5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:56:99:0B:94:5A:61:2A:1E:D3:66:DE:6B:69:8A:12:5F:55:97:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/D256990B945A612A1ED366DE6B698A125F559753.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.80.0/22
                IPv6:
                  2804:5ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268802

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:3f:f3:71:94:fa:3e:60:84:10:af:0b:e3:b0:0d:db:3f:
         2b:52:e5:36:b1:3a:7f:b8:1b:76:b8:35:ac:bb:41:79:c1:11:
         65:69:91:a1:fa:ac:f2:ad:ed:ad:64:35:2a:26:fb:a4:3d:52:
         18:0e:1e:b9:00:bf:aa:c6:50:45:f8:da:ee:ed:9f:35:91:a0:
         4c:11:c8:ad:38:ae:41:1a:7d:52:bb:9e:71:72:28:a9:61:25:
         68:9a:52:e3:d0:82:1c:0d:1c:92:c2:6a:ad:de:85:23:b0:0f:
         9d:24:12:8e:1c:4f:a2:ab:d8:12:c4:2a:05:2e:3e:b6:e1:3e:
         04:9b:93:ff:c4:3a:16:a9:81:9b:f1:6d:cc:9d:f9:a9:1e:37:
         42:f8:2b:0e:5d:3a:89:51:cd:93:76:02:d7:12:02:86:47:18:
         ac:fd:ab:da:bd:ef:35:94:0f:3c:7c:cc:dc:24:c7:c4:d0:1c:
         3d:e4:41:e1:22:f9:16:fd:c8:89:11:b6:f0:58:5b:12:ce:de:
         3e:44:1c:e7:6f:25:50:b6:64:44:30:55:88:ab:99:e1:69:56:
         3b:23:06:a8:e0:82:8b:50:46:ab:4c:58:0f:53:19:f1:67:f4:
         d9:b6:92:38:f5:8f:19:a5:18:1b:c0:5d:46:dc:3a:90:29:28:
         5c:7c:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 07:47:15 2024 by rpki-client on console-fra.rpki-client.org