Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
File:                     128B17FABA22689FAA4769B68394A401659496A7.cer (raw, json)
Hash identifier:          ZLw4ZquefwmeL63XhFq+as5H+YkiGIKW9cGmVx/JK14=
Subject key identifier:   12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5CBDC3AB0DBC47E49DBA44467735FEFBAEDC8C6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:02:44 +0000
Certificate not after:    Thu 03 Apr 2025 16:07:44 +0000
Subordinate resources:    AS: 270615
                          IP: 200.215.252.0/22
                          IP: 2804:6eb8::/32

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 10:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bd:c3:ab:0d:bc:47:e4:9d:ba:44:46:77:35:fe:fb:ae:dc:8c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:02:44 2024 GMT
            Not After : Apr  3 16:07:44 2025 GMT
        Subject: CN=128B17FABA22689FAA4769B68394A401659496A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:41:38:d3:15:d8:5f:cf:bd:57:04:03:e2:
                    be:22:c9:aa:c3:8e:d5:65:f0:4b:0b:79:9f:ab:87:
                    5c:78:3f:c3:22:3d:dc:17:98:0d:07:ca:a1:cd:73:
                    bd:3e:6d:07:c6:8f:d3:d8:b1:1f:fb:33:51:36:3a:
                    c2:d7:7a:5f:85:73:61:43:42:07:f5:cf:71:da:dd:
                    52:d1:2b:5a:c2:35:df:a5:e3:ff:b3:70:25:ec:64:
                    cc:55:8b:b0:aa:88:31:f3:f9:67:3a:a6:a0:e4:00:
                    f4:4c:97:ae:c2:5b:7c:11:80:c6:f9:56:3d:e0:7a:
                    bb:7a:6d:73:77:e4:52:58:14:cb:9a:42:a0:73:58:
                    99:95:1d:2e:f9:26:10:46:00:a3:b7:bd:7b:27:69:
                    b4:62:f0:e1:b1:74:41:92:c2:87:4e:1c:26:f1:54:
                    6f:d3:8b:d8:e8:a3:8e:c0:36:53:bc:c8:42:7a:0e:
                    5b:fa:7b:86:c9:8b:14:56:4b:d0:15:7d:b4:25:d2:
                    46:8e:94:47:0a:44:9b:7d:79:30:12:21:3a:17:40:
                    6b:f2:6d:ad:66:1d:4a:63:92:fb:74:40:5a:cc:b7:
                    83:d2:ba:81:64:22:24:45:27:c3:44:5b:0f:9b:0b:
                    e0:5f:a3:4f:50:2c:b9:2d:39:ff:cc:94:74:01:40:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/22
                IPv6:
                  2804:6eb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270615

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:88:c1:09:0b:d1:48:5f:66:83:8d:3a:28:53:38:d7:66:
         c8:b4:95:51:74:e0:89:51:30:6a:24:3d:10:12:35:ca:25:1c:
         56:f0:d5:53:d6:d7:c5:e1:ed:22:bf:06:ef:7f:79:b5:66:26:
         07:f2:d0:04:9d:59:2a:57:06:16:47:25:2b:58:51:b6:5c:2e:
         1d:87:91:9d:af:4a:ec:5f:ec:4e:8f:56:e2:20:48:e6:03:4a:
         c9:9a:7e:32:2f:63:d8:bd:af:ed:11:f2:17:e3:e5:ae:c8:ca:
         50:c7:1f:28:7f:c1:f8:87:37:44:42:ff:46:bb:60:90:03:f7:
         8c:01:71:47:c2:16:b5:bf:ca:3e:58:86:93:57:40:80:90:5d:
         80:3e:74:34:6c:40:f9:ab:b7:4c:4a:b6:03:51:99:09:2d:e4:
         55:28:92:b8:3a:92:45:ae:bc:e4:0a:28:09:a7:94:df:ef:5b:
         9f:d2:56:fe:50:ed:5b:66:03:ed:8c:1f:60:7f:3d:e3:48:b6:
         43:0a:d1:3f:30:3b:de:ac:74:bb:53:1f:3b:b1:93:a3:38:50:
         38:4b:9f:09:76:7c:40:13:66:65:f1:b3:f3:dc:07:11:e2:d3:
         6e:f5:90:db:79:a6:7f:1e:8a:4b:0b:e8:8f:c0:39:79:b7:32:
         1b:de:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:11:13 2024 by rpki-client on console-fra.rpki-client.org