Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/047373399CFBEE82DEED0368B29F232D682D13E1.cer
File:                     047373399CFBEE82DEED0368B29F232D682D13E1.cer (raw, json)
Hash identifier:          tI+Q9ZICvoshSLnccc/TeNpcD/dm+G1f/mqOgt8N4lE=
Subject key identifier:   04:73:73:39:9C:FB:EE:82:DE:ED:03:68:B2:9F:23:2D:68:2D:13:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C5E272F970D9313BCDE8146790CD5BD184BA388
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 01:21:02 +0000
Certificate not after:    Fri 04 Apr 2025 01:26:02 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 09:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5e:27:2f:97:0d:93:13:bc:de:81:46:79:0c:d5:bd:18:4b:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 01:21:02 2024 GMT
            Not After : Apr  4 01:26:02 2025 GMT
        Subject: CN=047373399CFBEE82DEED0368B29F232D682D13E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:b8:d1:8e:26:4d:0a:1c:56:99:a4:ca:41:
                    18:c1:ca:06:2e:70:19:7a:d6:82:5d:35:c6:e8:d5:
                    b3:38:c6:65:9d:84:e3:84:19:95:ff:2e:4f:51:99:
                    cf:19:74:35:0a:d7:0e:ce:82:14:96:f9:1f:2c:7d:
                    cc:c9:ce:74:4d:ef:3b:7c:1e:b0:45:eb:21:9e:8a:
                    ee:b9:70:0f:6c:3a:09:a9:e4:d2:e1:aa:ac:2f:02:
                    49:a9:7b:8e:f0:b6:05:f0:a0:5a:40:a0:96:65:c2:
                    31:56:19:fd:9a:7d:a0:1f:ca:1a:e3:d7:2e:dd:6f:
                    11:21:46:20:cd:66:61:94:f1:06:ef:9c:2a:bd:22:
                    64:82:f9:65:bd:99:34:00:c6:5b:e4:71:8b:be:b8:
                    ef:1c:49:8d:f6:04:66:ef:4e:01:5b:7c:76:60:df:
                    bd:8d:ad:9e:82:28:dd:2f:52:8e:ef:ae:ea:8b:71:
                    38:45:d8:ee:77:49:d8:82:f4:c1:1a:95:b8:78:e3:
                    3a:ee:cd:9a:fb:7d:a2:a3:17:7a:ff:e2:18:02:87:
                    d1:82:15:56:07:ad:97:da:d8:11:70:74:e0:d0:e2:
                    21:64:08:fa:f2:cd:55:5b:5b:f2:ae:73:0f:a9:2b:
                    df:dc:b1:af:f6:16:6b:b0:0f:f0:95:9f:21:a6:46:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:73:73:39:9C:FB:EE:82:DE:ED:03:68:B2:9F:23:2D:68:2D:13:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         7b:5c:0c:de:fb:2e:c5:cd:89:d9:2a:c3:7d:6e:1a:47:c1:ae:
         c0:8b:c3:47:50:52:63:e8:71:d6:c2:b8:50:6d:6a:d7:cb:2a:
         7a:45:61:f9:03:e0:a7:f5:01:51:82:d1:2b:4e:20:ba:15:a9:
         b0:2b:40:f9:5a:a0:64:a2:fb:35:53:87:5c:f2:f7:a9:a1:bc:
         11:8f:e3:17:b3:f7:0f:bb:35:3a:02:9e:86:6a:fc:ba:2c:15:
         f2:73:69:77:04:35:74:c8:c0:f3:c4:bd:a1:e3:12:b5:30:9d:
         3b:03:88:db:8f:5c:88:6c:4a:56:3b:c3:15:00:15:8d:5f:d0:
         34:bc:c7:6b:1d:bc:9d:68:6b:b3:e0:0e:91:fa:36:59:49:37:
         01:5e:79:b8:55:43:39:e3:d0:a9:b3:69:ef:84:19:f8:33:2f:
         39:51:92:72:5e:6a:a5:cc:c9:94:95:04:86:51:6c:4d:3f:43:
         ff:22:d1:bf:f1:c6:73:dd:c9:6d:7e:8a:f5:61:d6:5c:70:72:
         bb:c4:ab:98:b3:f1:44:f3:6b:09:ab:c5:c6:25:a4:c9:1e:29:
         99:ed:a3:28:59:49:b9:dd:48:3b:da:f4:03:85:c0:02:ac:4d:
         0b:d2:d8:27:15:9e:0d:2d:14:7f:00:fa:10:ac:a0:e6:16:f3:
         8f:59:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org