Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D42DB627CBFC83CBC3B89126059C6D7F3A447138.cer
File:                     D42DB627CBFC83CBC3B89126059C6D7F3A447138.cer (raw, json)
Hash identifier:          Pcv5S65as0hCBSXxodX/Ov2if/VDg8ajRyYy146hZ6g=
Subject key identifier:   D4:2D:B6:27:CB:FC:83:CB:C3:B8:91:26:05:9C:6D:7F:3A:44:71:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7ACFD07C27C0E09DD2A6ADFD3920215A9FEFB0F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/D42DB627CBFC83CBC3B89126059C6D7F3A447138.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 00:30:22 +0000
Certificate not after:    Thu 24 Apr 2025 00:35:22 +0000
Subordinate resources:    AS: 270409
                          IP: 190.89.196.0/22
                          IP: 2804:6b94::/32

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 19:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cf:d0:7c:27:c0:e0:9d:d2:a6:ad:fd:39:20:21:5a:9f:ef:b0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 00:30:22 2024 GMT
            Not After : Apr 24 00:35:22 2025 GMT
        Subject: CN=D42DB627CBFC83CBC3B89126059C6D7F3A447138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:73:a7:ef:07:dd:f2:57:84:1c:45:21:aa:
                    e0:71:de:1d:5c:9b:ad:16:0e:0d:92:8e:66:80:ee:
                    0d:b3:90:cc:8a:3f:a4:34:a8:00:b3:e2:23:61:c0:
                    c7:5e:0b:ad:a5:d9:bb:80:d9:e0:ac:ff:41:94:df:
                    6f:99:86:b8:59:c7:7b:09:82:a7:d3:cc:79:b3:56:
                    e9:7e:2f:4f:44:38:96:70:2f:0f:d5:8e:61:ac:b7:
                    d5:a8:27:2c:5f:35:8f:f1:70:4d:b9:bd:79:76:21:
                    b1:d3:6d:a4:e1:d7:cc:e7:21:f3:00:00:46:a7:97:
                    40:93:e0:b6:ed:41:3a:65:1e:de:5e:8f:98:e0:96:
                    e8:e7:19:18:43:f8:26:52:1f:a8:23:91:cf:20:b7:
                    ec:12:8c:cb:6f:1f:14:c2:10:f5:0d:87:e3:23:93:
                    a0:55:1c:68:9b:09:db:85:b0:fa:66:fe:0f:4b:17:
                    61:aa:e0:6b:3b:d3:1b:f6:34:e3:91:5d:12:be:49:
                    92:d6:14:d6:06:e9:28:2c:a7:7f:1f:99:3d:67:ef:
                    6f:52:a8:86:28:a8:68:f7:54:a0:80:c1:6e:f2:a0:
                    e6:29:5f:8e:30:34:88:07:b7:d3:b7:7a:74:b7:46:
                    61:d7:a8:98:44:91:1f:6c:1e:74:bf:7c:a6:3f:30:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:2D:B6:27:CB:FC:83:CB:C3:B8:91:26:05:9C:6D:7F:3A:44:71:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/D42DB627CBFC83CBC3B89126059C6D7F3A447138.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.196.0/22
                IPv6:
                  2804:6b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270409

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:74:f9:5c:74:77:3c:45:d4:3b:a8:1d:af:9c:6f:b2:99:
         77:a9:ca:03:43:77:79:a9:21:d8:6c:f4:27:3b:63:a2:d0:fe:
         de:f0:e5:cc:2f:24:d9:9e:9f:83:49:29:ad:1d:2e:d0:72:01:
         72:30:c1:6d:54:fd:37:88:42:29:87:64:51:90:c0:e9:ea:fe:
         e4:9e:a5:7e:f0:13:ca:40:0d:bb:26:3b:aa:68:dd:b9:91:99:
         26:56:ea:eb:4f:7a:27:db:b2:f9:06:02:73:dd:fe:5d:44:8d:
         1d:97:98:b6:fc:04:25:80:a4:ac:4c:ce:4c:93:94:8c:47:0d:
         4a:79:5b:c8:c5:f6:47:d0:d0:bc:1d:64:00:5d:b5:cc:61:66:
         58:78:d7:cf:f8:e4:f9:5c:76:fa:32:82:76:1b:77:9d:4c:81:
         ac:6e:b6:1b:1c:b0:d4:74:28:d2:8a:0e:f9:c2:bb:4d:a2:59:
         ea:57:f8:f1:c3:45:5e:51:83:28:83:6e:f6:88:0c:bb:85:f6:
         d2:cf:f1:2e:3f:e8:98:8b:11:2c:b1:2a:ab:e1:a6:a8:87:15:
         5d:a8:9a:63:af:07:30:ed:a8:ea:e8:ae:20:4b:5b:89:52:d6:
         3d:ff:0f:1c:66:a2:02:ef:5c:ec:c3:fe:14:2a:00:ae:7b:5d:
         b7:87:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 22:16:01 2024 by rpki-client on console-ams.rpki-client.org