Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.cer
File:                     808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.cer (raw, json)
Hash identifier:          AAEYB/qkrdVfgA4wSVAlFchOOrfeOBaXdqfQoJW30d8=
Subject key identifier:   80:8F:B3:FE:05:D9:E4:04:2C:6F:70:B9:62:DC:A3:6F:1B:A9:8F:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EC7B456A285C8FD33E37B435EDF4DCEF0E4E76B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:27:47 +0000
Certificate not after:    Wed 02 Apr 2025 21:32:47 +0000
Subordinate resources:    AS: 271603
                          IP: 190.3.164.0/22
                          IP: 2804:7e1c::/32

Validation:               Failed, certificate revoked on Sat 25 May 2024 04:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c7:b4:56:a2:85:c8:fd:33:e3:7b:43:5e:df:4d:ce:f0:e4:e7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:27:47 2024 GMT
            Not After : Apr  2 21:32:47 2025 GMT
        Subject: CN=808FB3FE05D9E4042C6F70B962DCA36F1BA98F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e5:be:02:e5:39:30:bd:91:24:5c:7c:f9:f4:
                    30:8c:4e:c3:2e:91:73:25:ea:14:ee:0a:fe:7d:9d:
                    88:e8:f6:e4:7c:26:5c:10:da:87:cf:5d:90:12:2a:
                    a3:f2:68:3c:1f:13:06:25:d3:47:38:fe:25:be:4b:
                    76:50:7b:78:2d:80:40:a0:4a:5b:fb:fd:d3:ad:27:
                    2b:08:c5:ea:43:7f:ab:b0:c0:8e:6f:76:e2:13:d7:
                    27:50:d4:7e:57:a9:d5:09:91:c5:ff:1a:69:5c:cf:
                    10:30:34:88:6c:b6:b8:87:ba:05:de:55:fe:ff:42:
                    f2:8c:39:bd:a3:d7:83:e7:e3:d7:7a:4b:13:4a:e8:
                    80:01:4c:48:9e:e5:4b:34:04:19:b0:25:34:6a:d1:
                    ee:47:26:88:53:07:fa:12:21:d3:6d:43:f7:a1:43:
                    dd:45:ee:1f:64:80:c1:1c:b6:24:8d:f4:d7:de:ae:
                    9a:3c:05:88:9e:34:9b:c2:2f:04:8b:10:ff:2b:de:
                    51:ba:ad:8c:67:cd:7f:aa:69:20:b6:a0:37:2f:df:
                    67:c1:82:fb:4c:7f:02:4b:88:d0:bf:29:a9:87:87:
                    00:9e:d6:46:c1:65:8f:b1:74:3f:23:b9:32:7c:f7:
                    67:5b:ba:53:17:24:29:bf:64:ad:27:49:bc:83:19:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:8F:B3:FE:05:D9:E4:04:2C:6F:70:B9:62:DC:A3:6F:1B:A9:8F:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.164.0/22
                IPv6:
                  2804:7e1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271603

    Signature Algorithm: sha256WithRSAEncryption
         da:ce:54:f5:66:5f:96:20:0b:30:06:43:5d:52:3e:d2:7a:02:
         35:01:76:77:4d:8e:b5:21:19:fc:6d:5f:b6:47:0f:48:c6:3f:
         57:92:d3:fd:01:da:1a:5e:1b:a3:b9:7f:02:a1:29:af:1d:55:
         86:4e:f6:39:e4:30:fc:3e:e8:85:3e:8a:a4:75:3e:54:49:15:
         85:27:2e:aa:1b:d9:92:0c:59:10:fd:10:22:08:56:11:02:a9:
         63:79:37:ad:f5:65:4d:eb:23:72:87:5f:77:29:34:6a:40:2d:
         c9:bf:6e:aa:c2:ac:01:a0:74:8a:b7:93:dc:3b:e1:d2:5b:17:
         9f:78:c7:ad:85:2e:e8:86:27:bc:e5:7f:55:20:52:03:38:da:
         d7:f4:0c:da:ea:13:69:83:7b:7f:70:12:fa:1b:5d:15:e5:cd:
         33:3a:59:b0:c7:a3:3f:13:6e:82:92:d4:0a:71:ef:9b:21:99:
         2f:fa:04:3d:9c:92:fa:8a:e3:c6:92:f5:ea:ac:ac:18:70:b1:
         a3:dc:63:3d:ee:a8:7f:17:a5:8b:8e:05:42:38:36:4f:99:4d:
         28:0c:37:90:17:e7:df:fc:ed:cc:bf:9c:24:da:68:07:00:ff:
         2f:57:f6:d4:de:31:6e:e0:f1:f9:1e:34:8f:09:94:de:18:06:
         93:ae:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 05:51:42 2024 by rpki-client on console-fra.rpki-client.org