Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer
File:                     FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer (raw, json)
Hash identifier:          LfulSB6WBx52b8xdS7/3h68DrX6HFyEeM1/0BLJ/QW0=
Subject key identifier:   FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EE9C3114BCD04431E38C01666FE549C3F5FB964
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:48:18 +0000
Certificate not after:    Thu 03 Apr 2025 18:53:18 +0000
Subordinate resources:    AS: 270456
                          IP: 190.124.252.0/22
                          IP: 2804:6c44::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 09:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e9:c3:11:4b:cd:04:43:1e:38:c0:16:66:fe:54:9c:3f:5f:b9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:48:18 2024 GMT
            Not After : Apr  3 18:53:18 2025 GMT
        Subject: CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:57:4f:51:99:9d:96:23:60:72:0e:ca:cf:
                    0d:58:13:a4:c0:bf:5e:4e:3c:2b:fb:ed:7f:51:34:
                    58:b9:b0:cf:e2:90:6d:1a:27:cf:99:8d:6e:37:c3:
                    ff:9a:6b:09:2e:3e:17:c3:1f:7b:34:47:96:59:a5:
                    c5:e1:46:68:a2:9a:89:dd:d8:7d:3d:f7:9c:d8:3a:
                    e7:0f:f2:4d:3a:88:e2:45:ca:ef:83:f0:bb:45:87:
                    8a:a1:b5:c0:78:45:47:9d:f3:77:92:15:6c:f2:37:
                    55:f1:6b:07:36:46:4f:51:16:a1:96:46:09:82:1c:
                    03:a6:fb:06:f1:3f:3a:23:94:b2:1d:87:e7:3c:b4:
                    7f:8f:b7:cf:c4:cc:4e:fe:96:11:4b:3d:ce:91:d5:
                    31:56:c7:ca:16:28:98:13:6c:fb:5e:f7:5a:4f:6e:
                    4c:d9:43:ff:2d:7b:06:29:b8:28:5d:50:e9:b5:18:
                    94:b1:98:b6:17:79:3e:35:f3:f5:9c:5f:c1:e8:57:
                    0f:2e:08:8c:0d:1f:de:33:1f:e3:e0:3a:8d:03:7d:
                    59:46:9f:e8:c2:07:95:f2:08:4a:dd:8f:05:e4:93:
                    7a:ba:80:3e:d9:a3:16:38:e6:94:4d:ba:94:e3:f9:
                    e2:fd:0b:a1:b8:d5:08:43:8a:c2:6e:fb:14:bb:41:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/22
                IPv6:
                  2804:6c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270456

    Signature Algorithm: sha256WithRSAEncryption
         cb:96:ef:d8:e9:ba:a7:52:93:ee:0e:67:39:00:22:81:34:05:
         19:2a:8d:35:a5:6e:51:85:fa:f0:1d:03:1f:c1:39:8a:28:9f:
         23:03:cc:dc:e2:d4:36:4a:87:79:74:6c:c2:4e:62:03:26:bc:
         1b:2f:38:6c:ec:92:e2:c0:c9:4d:3b:1c:cb:05:74:2a:58:0a:
         5c:a3:20:53:31:23:70:da:eb:68:e4:20:a9:d2:f1:1b:44:83:
         4c:76:8c:e4:3b:cb:51:fc:c6:a8:73:ec:bd:40:77:e4:d4:69:
         c7:57:fa:bd:2d:53:6a:65:8d:38:cd:89:48:d5:e1:f6:8e:94:
         8c:69:02:d7:57:3b:b1:71:a4:ee:41:22:78:f1:1e:87:d3:6f:
         7b:a8:37:97:67:69:52:f8:ea:ea:dc:d4:c5:92:95:bc:9e:de:
         38:f5:9a:b5:34:1c:24:0f:9b:21:9c:95:08:3a:2c:c0:b3:90:
         3a:ea:bc:6e:e5:d5:00:23:0d:2b:09:19:c6:35:9f:28:b1:6a:
         d7:0b:63:56:f2:de:f2:1a:0b:8a:ac:69:23:67:53:6c:9b:90:
         da:c3:bc:bd:2a:26:c3:5d:64:5a:64:71:6a:69:06:88:aa:61:
         db:2d:9d:05:4d:cd:d7:42:b0:9a:67:72:d4:a3:6d:9a:67:14:
         da:45:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 12:46:31 2024 by rpki-client on console-fra.rpki-client.org