Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
File:                     F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer (raw, json)
Hash identifier:          bBd4UBBphPNHrKk4efQFD22PCjs2elFEMnJPInS1QuY=
Subject key identifier:   F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F7E73A157F57A74C6C89EF0EB6D65AE6903026C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:28:58 +0000
Certificate not after:    Thu 03 Apr 2025 11:33:58 +0000
Subordinate resources:    AS: 264422
                          IP: 131.221.172.0/22
                          IP: 2804:1e58::/32

Validation:               Failed, certificate revoked on Mon 13 May 2024 04:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7e:73:a1:57:f5:7a:74:c6:c8:9e:f0:eb:6d:65:ae:69:03:02:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:28:58 2024 GMT
            Not After : Apr  3 11:33:58 2025 GMT
        Subject: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:3a:e6:8d:12:84:23:06:d2:32:28:d1:cc:
                    11:1c:25:5e:ea:07:69:13:33:ae:55:27:a4:a5:a0:
                    29:11:ea:d1:3d:7b:05:b2:c7:26:fd:e7:85:5c:35:
                    49:30:3f:4c:84:ff:4f:a5:5b:f8:0f:40:66:7a:e1:
                    44:7c:4b:ae:c3:52:c5:e2:47:e7:2c:6b:5e:62:0d:
                    f7:d2:81:e6:22:64:53:48:08:9d:9e:d0:d3:f5:5f:
                    58:6c:0b:a5:9f:a8:bd:68:33:a8:f6:aa:6d:58:48:
                    ba:94:15:e0:e1:39:57:be:69:ed:46:2b:7d:47:be:
                    3b:02:0f:fd:a9:a6:02:29:1d:bb:d2:ff:83:5a:4f:
                    a0:19:66:aa:8a:2b:e9:8f:07:9d:b5:ad:16:97:dd:
                    a6:b4:e6:e2:5b:e7:1e:1b:17:58:ec:49:ed:6e:be:
                    dd:36:ba:bf:41:e4:10:57:b6:5c:21:39:f2:2f:0c:
                    f2:77:e3:de:f6:74:ed:1e:f5:b7:24:7e:88:f2:85:
                    6f:54:fa:b8:cd:69:97:03:32:4c:5c:a7:35:1f:cc:
                    d5:77:f3:d4:d6:2b:2b:e9:0f:df:99:07:a2:5e:e4:
                    a0:47:f3:0e:aa:09:7b:10:45:35:f0:0e:38:c0:e4:
                    64:d9:90:3b:e3:58:89:a0:9e:a4:d9:82:31:c5:55:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/22
                IPv6:
                  2804:1e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264422

    Signature Algorithm: sha256WithRSAEncryption
         bf:65:de:28:a4:78:2f:1c:ec:a1:8e:49:ca:c3:8a:3c:45:a9:
         5d:61:14:52:74:aa:ca:94:c6:ec:e7:b2:61:5e:c7:31:03:36:
         e9:88:77:88:3b:20:34:a2:ab:71:6f:71:b9:58:54:98:8d:57:
         d3:03:1d:e1:82:c6:72:36:da:7d:e4:3a:56:ec:79:16:ad:bf:
         8d:fe:04:36:f8:58:00:87:29:60:07:7c:45:c5:19:2d:24:8f:
         85:5c:d6:97:1e:f9:f0:0b:bf:97:d2:a9:2c:5a:a0:a6:18:85:
         13:fe:4f:25:bd:96:6d:4e:f9:24:e4:42:10:30:48:50:9c:06:
         65:12:a8:63:2f:8d:57:75:10:69:84:45:bf:19:8d:25:83:e5:
         b1:dc:4b:1f:11:8c:2d:af:fc:6f:8b:4f:28:ea:7d:19:ff:88:
         0a:e0:ea:88:47:46:78:84:41:48:34:0c:96:21:ad:4e:ca:f9:
         2e:97:0e:46:b1:a9:2a:b1:f1:d7:ae:f4:db:91:2e:d5:d4:dd:
         12:b8:a5:42:2c:00:34:c1:00:b0:37:c3:34:48:68:88:ef:95:
         99:01:32:df:81:81:7e:f9:31:96:bc:67:6b:73:7a:8c:5e:81:
         18:7d:06:7e:8f:17:e9:60:54:ad:0f:4d:7e:3a:18:e0:83:e3:
         a5:7f:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org