Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.cer
File:                     367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.cer (raw, json)
Hash identifier:          ABG4eGT4AmongVenETxieaAQx56WxVyhi+FpqIfI1QQ=
Subject key identifier:   36:7B:E2:B7:67:8F:9D:82:2A:47:BB:A4:22:20:B9:EB:8B:E8:F4:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       121DE89826027AA41562CD2BB95BCAD2B4AF47AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 14:43:40 +0000
Certificate not after:    Wed 03 Jul 2024 14:48:40 +0000
Subordinate resources:    AS: 265122
                          IP: 143.208.92.0/22
                          IP: 2804:2ad8::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:e8:98:26:02:7a:a4:15:62:cd:2b:b9:5b:ca:d2:b4:af:47:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 14:43:40 2023 GMT
            Not After : Jul  3 14:48:40 2024 GMT
        Subject: CN=367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:ef:dd:c1:4b:78:73:50:a5:1c:80:38:9d:
                    e4:0f:fd:cf:d9:f1:27:19:bd:d8:56:60:60:0d:79:
                    ac:6f:ab:57:7e:9b:b0:0b:0f:e3:b8:9e:85:5f:0b:
                    b2:3f:69:f3:9d:28:8b:8a:d3:6a:73:3d:c3:5c:d3:
                    9c:b8:08:be:e6:0e:e4:ed:d5:63:8b:f1:cb:8c:97:
                    32:d3:51:de:42:83:f3:a4:60:9f:57:b4:57:c1:b2:
                    e1:d6:34:e5:44:07:57:c2:56:d7:a1:54:1d:34:c8:
                    ae:4e:be:3c:0d:e3:02:95:f7:a5:e3:41:26:46:2f:
                    01:c0:23:9d:d1:be:1a:ef:26:80:e5:40:01:6e:f2:
                    64:79:b3:ca:e5:de:c5:fc:aa:a2:ad:a7:c9:cb:d3:
                    b2:40:13:ef:0f:0b:1f:19:2d:ee:94:09:5b:d6:1c:
                    ef:cf:cb:d3:57:40:64:be:ad:55:bb:32:27:8b:b5:
                    ca:84:75:07:ef:e4:cb:5f:ab:6e:74:55:d2:0c:83:
                    a3:03:d6:ae:9c:ca:7e:35:74:4f:6d:38:49:22:ee:
                    17:bd:ea:25:5f:84:b9:eb:d2:e6:4c:0b:0e:f9:ca:
                    9f:2c:be:96:e0:e0:b6:96:ea:b0:08:af:c9:e1:a0:
                    97:17:87:55:e1:e5:1d:8d:92:64:1b:dd:1a:51:6b:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:7B:E2:B7:67:8F:9D:82:2A:47:BB:A4:22:20:B9:EB:8B:E8:F4:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.92.0/22
                IPv6:
                  2804:2ad8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265122

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:db:9c:61:da:26:c8:b9:5d:ed:fd:46:32:97:36:c6:12:
         67:ae:6f:01:a2:e2:93:47:cb:cd:fb:34:c4:f5:b5:d1:1a:75:
         2b:20:f4:4b:e4:1c:43:49:b9:02:ea:31:25:75:ec:ca:95:2e:
         56:e4:0d:f1:d0:3f:76:cd:d4:b2:25:78:84:be:48:be:2a:69:
         2f:6b:e4:75:fc:84:13:a3:a4:aa:e5:ae:27:6e:4e:28:14:55:
         8f:6e:f4:2f:4b:8d:44:65:bd:61:05:a4:d4:6a:6e:e1:6c:81:
         c5:38:ad:76:a1:68:b2:3d:0c:2b:47:f2:8b:f6:5e:ff:30:8f:
         2d:2b:2e:5d:7e:8c:d1:6c:c9:f7:c3:a4:c7:a4:5d:8d:b0:4a:
         fc:41:6b:b8:fc:19:99:6f:14:1f:78:25:a8:4c:be:9c:07:b5:
         30:10:56:ca:15:7b:54:4f:c0:a1:1f:3c:9c:57:13:2c:d4:df:
         e4:0a:6f:24:6d:1f:92:8a:77:33:03:9e:97:3b:74:93:6d:f0:
         ea:ac:28:d1:8d:89:24:19:6d:99:db:5c:7f:71:ec:18:30:f7:
         a5:31:2e:61:d6:4d:10:11:74:bf:48:a5:41:ad:29:49:cf:e9:
         3c:9e:77:0e:07:17:cf:79:9a:ab:52:92:ea:c8:89:96:f0:b4:
         61:1b:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:19 2023 by rpki-client on console.sobornost.net