Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer
File:                     DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer (raw, json)
Hash identifier:          fJ1pIV3H/cNnBir3qH+Dd2mHPWYMF4UdB7uZE1qL9W4=
Subject key identifier:   DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01CAFC34C738A4BA98D5435572B9437579F09C77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:29:52 +0000
Certificate not after:    Wed 02 Apr 2025 22:34:52 +0000
Subordinate resources:    AS: 269378
                          IP: 45.185.140.0/22
                          IP: 2804:63b4::/32

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 03:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ca:fc:34:c7:38:a4:ba:98:d5:43:55:72:b9:43:75:79:f0:9c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:29:52 2024 GMT
            Not After : Apr  2 22:34:52 2025 GMT
        Subject: CN=DBB64CCDB727E7F11F10919482DBA32E200A88AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:9f:63:2c:af:ea:97:ba:a4:16:cf:e2:1e:
                    05:a3:80:eb:91:14:9c:4c:85:ee:62:74:9d:c8:3d:
                    99:6c:1b:0e:e4:f1:55:6b:e1:c3:bf:8c:b2:f2:38:
                    b0:4b:5b:43:af:ae:8c:d9:7b:3f:2e:04:b4:7d:2e:
                    6f:e6:ac:e7:9d:fd:6d:6b:b8:b8:5e:ce:03:39:3a:
                    c6:94:8b:97:f7:c0:c9:68:a4:7d:39:a4:da:0d:1c:
                    44:ea:b2:2f:50:4f:59:c5:13:4a:32:c2:80:67:8c:
                    49:a4:01:6d:d3:b2:2a:19:eb:a2:e7:e7:4f:f9:29:
                    f0:e8:71:f0:aa:c1:c2:7f:73:c3:5a:9a:61:87:d6:
                    41:e2:cf:79:cf:bf:ce:aa:f5:e1:31:98:a2:a9:64:
                    2c:ef:3a:26:1a:3a:bc:44:16:b9:34:63:a3:bf:86:
                    b6:77:8f:f8:8f:3d:a1:1f:44:85:6a:49:cc:12:2a:
                    a4:f4:8a:fb:f1:b4:3a:b8:21:a7:93:21:2a:b2:60:
                    74:7f:d2:59:64:4c:d0:e0:a1:3a:19:b1:08:57:ad:
                    f7:43:30:ec:02:e5:ed:d9:2c:c8:0c:46:25:b2:30:
                    03:18:b9:86:30:81:00:0f:c0:b7:87:01:82:1d:e7:
                    12:44:27:69:2d:03:1f:6e:1a:16:55:cd:e3:ca:2b:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.140.0/22
                IPv6:
                  2804:63b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269378

    Signature Algorithm: sha256WithRSAEncryption
         bf:7f:25:c6:03:16:13:9e:52:cd:21:ac:d1:d0:da:51:17:1e:
         21:38:06:ba:47:80:23:2a:bf:c5:95:75:d8:ab:6b:f8:85:9e:
         50:3f:53:a7:eb:c2:89:6b:eb:cd:ad:5f:84:8c:7a:c7:c2:b2:
         c3:2c:ce:f1:22:04:d1:5b:36:6b:85:76:94:06:81:d2:60:f4:
         fd:a2:5f:07:f6:49:0f:36:28:bb:4b:76:7b:35:17:67:75:3c:
         9b:01:4a:3f:73:c4:a9:29:65:3d:6a:62:62:c1:7d:6b:2e:54:
         d8:92:8b:7f:81:f5:6b:56:7c:fd:4f:d5:e7:61:b0:ca:5d:d8:
         c4:6e:6c:e8:83:96:c0:32:c2:55:d4:70:02:12:37:1d:b1:e7:
         0e:2a:b0:03:8c:4a:bb:86:c0:b6:a7:9f:9a:6c:a4:0f:87:9a:
         f3:2b:5a:1e:8c:4d:e4:8a:ef:6c:a2:9a:64:66:07:35:56:55:
         24:0f:21:00:52:69:6a:bd:e8:8a:23:3b:b6:26:8a:5b:d1:91:
         fe:a1:96:e4:89:39:65:cf:4b:4d:4d:c0:d2:53:9f:ee:a7:c4:
         f2:d1:23:fe:2e:61:69:bf:a7:2d:3e:dc:fd:c8:e6:c8:00:9b:
         4c:bb:bd:bc:6d:1e:2a:c7:ab:54:f2:07:49:d9:7c:76:0c:d4:
         08:84:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org