Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.cer
File:                     1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.cer (raw, json)
Hash identifier:          kkAgKb3H4CiZeo1gYuYfWl0Cv6uudPENwT0fqP624Qo=
Subject key identifier:   15:77:A1:F4:8E:F8:35:69:8E:AF:A7:02:E5:FD:3E:E8:5A:3F:44:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39C9588BE05075C2109EFC51483D1B8902C65715
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 May 2024 17:21:23 +0000
Certificate not after:    Wed 21 May 2025 17:26:23 +0000
Subordinate resources:    AS: 267453
                          IP: 181.191.48.0/22
                          IP: 2804:41bc::/32

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 14:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c9:58:8b:e0:50:75:c2:10:9e:fc:51:48:3d:1b:89:02:c6:57:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 17:21:23 2024 GMT
            Not After : May 21 17:26:23 2025 GMT
        Subject: CN=1577A1F48EF835698EAFA702E5FD3EE85A3F44B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:bc:18:2b:26:81:b1:4c:01:cb:74:17:fa:
                    05:21:5a:66:2c:72:e4:c9:99:f2:f2:6f:07:6c:c8:
                    6a:a2:f1:b8:2d:c4:e8:92:d0:fa:a1:97:c2:ca:5e:
                    c0:89:8d:9a:6d:66:b7:4b:24:36:d9:69:e8:93:3a:
                    82:ab:77:72:1c:f2:9a:67:31:69:97:d0:12:b2:9f:
                    0d:08:d8:ab:a5:8f:9c:4e:fe:ef:92:7f:b6:cf:e2:
                    0b:66:96:53:8a:83:a8:4a:31:39:22:83:c7:d6:25:
                    d7:ec:de:70:37:e3:92:cf:fb:0a:41:2b:b9:13:c3:
                    2d:1a:99:1a:28:93:04:cd:cf:e6:bd:99:e4:45:bc:
                    07:37:0d:7f:4e:95:91:22:cc:82:1c:6c:a5:8a:7c:
                    75:7f:82:0e:e1:b2:0b:4d:ce:3d:a1:aa:82:d5:f0:
                    48:8b:6f:5a:19:8f:af:b9:e8:1f:8f:14:bc:26:f6:
                    d0:59:c8:61:bb:ea:8c:91:a6:bf:02:d7:60:c0:8b:
                    38:4b:be:83:c7:bb:01:4d:4c:28:d7:e3:54:2d:94:
                    af:2c:a6:c3:c2:62:91:be:95:c8:b0:06:a7:78:e1:
                    4d:1f:fc:b9:b4:ff:53:6e:67:c0:92:2f:c8:c9:9f:
                    b2:41:52:8a:8b:bd:f9:78:bc:ff:d7:9b:24:82:b7:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:77:A1:F4:8E:F8:35:69:8E:AF:A7:02:E5:FD:3E:E8:5A:3F:44:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/22
                IPv6:
                  2804:41bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267453

    Signature Algorithm: sha256WithRSAEncryption
         99:b2:db:a4:d2:9f:8a:94:14:32:0e:16:fe:f6:a0:06:fd:41:
         e7:98:3c:5e:52:bd:6d:4f:b3:8a:0c:5a:63:98:b4:27:5a:a2:
         55:5f:dc:fb:79:bd:68:2e:dc:44:58:ee:73:af:bd:8c:d8:30:
         ce:9e:a1:94:8f:d7:05:c0:9f:ff:95:df:a0:6b:ec:41:e8:62:
         bb:6e:d4:b9:d8:97:12:9c:5e:bd:6c:19:24:2b:ea:07:d3:c3:
         ce:e8:1a:eb:83:2c:58:12:fa:da:b4:b4:e2:c3:3d:40:84:d7:
         94:ae:aa:9a:93:a2:22:29:2f:f2:c0:90:0d:87:97:8e:de:c7:
         e1:38:ab:83:c1:cf:cb:30:47:9c:7e:99:12:fc:f7:14:80:e7:
         f7:ca:00:88:d3:fb:1a:83:64:5b:8f:ce:6a:8f:6a:88:1c:fb:
         54:88:00:bd:41:d8:78:7f:a5:8a:80:97:01:d3:a5:88:41:a2:
         b6:64:6d:6a:a2:66:64:05:a9:07:61:5c:34:b5:00:59:82:09:
         10:cb:d6:80:ae:0d:5f:03:7b:d3:84:17:bb:24:6b:8e:3c:57:
         5c:32:dd:53:23:13:28:a7:a5:ce:41:8b:11:6b:6d:91:53:99:
         ad:4f:22:a3:25:52:22:a9:ce:0c:fb:a6:8a:96:30:86:53:b7:
         76:5a:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 16:10:29 2024 by rpki-client on console-fra.rpki-client.org