Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
File:                     15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer (raw, json)
Hash identifier:          imCkzJG+vNEPE9XQJL43piBnjLNfGZRQfxWRVi3BnZ8=
Subject key identifier:   15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2BC55199D2B6B3B1CFCC63E122279B4AAE0BA42F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 23:02:37 +0000
Certificate not after:    Thu 03 Apr 2025 23:07:37 +0000
Subordinate resources:    AS: 265241
                          IP: 170.78.28.0/22
                          IP: 2804:2cc0::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 21:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c5:51:99:d2:b6:b3:b1:cf:cc:63:e1:22:27:9b:4a:ae:0b:a4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 23:02:37 2024 GMT
            Not After : Apr  3 23:07:37 2025 GMT
        Subject: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:5a:b5:b1:9c:83:c4:00:a5:2f:68:75:c6:
                    26:76:b6:26:37:dd:bd:30:09:c0:45:2f:2b:f9:d3:
                    6a:f7:f4:a8:b6:ee:7c:d8:5f:9c:96:10:af:c9:2d:
                    64:47:3d:8b:08:c7:71:36:72:4d:1a:6d:1b:da:9f:
                    a5:e3:5b:af:f5:ca:66:7f:9b:66:33:ff:77:b7:ea:
                    27:ec:7c:1a:f2:46:3b:50:5c:c7:70:36:47:34:19:
                    d5:65:0c:cf:48:fe:f6:dc:a1:21:cc:4a:1a:bb:21:
                    94:4d:34:6b:e4:e6:8d:18:2b:b2:da:d8:a4:2e:aa:
                    51:b8:cd:4a:90:9b:55:bf:42:35:9b:dc:69:1e:1c:
                    70:06:43:96:d7:84:0c:17:85:14:85:a8:75:69:31:
                    bd:54:87:15:36:db:0e:5d:07:57:e2:f5:99:b7:a0:
                    89:dc:df:12:2c:dd:b9:9f:23:1b:de:0b:ca:23:a3:
                    66:9f:cb:df:37:6a:4c:24:6b:2c:a1:af:f0:a8:30:
                    16:31:50:26:22:be:b3:75:7d:48:96:9b:3e:fd:1f:
                    ae:db:f4:64:9e:09:0b:17:b7:e5:21:9c:37:63:19:
                    30:ec:27:83:45:b9:0e:ca:26:b5:da:7b:1b:d1:52:
                    11:f0:85:d7:40:5d:9f:66:73:0d:8e:42:a1:ed:8c:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/22
                IPv6:
                  2804:2cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265241

    Signature Algorithm: sha256WithRSAEncryption
         c5:d3:d3:77:d1:bc:62:a9:cd:1b:5a:30:95:a2:55:e3:cc:90:
         f8:3d:f9:11:72:af:46:f2:86:97:d0:15:a4:85:03:e9:ee:3c:
         6c:7f:e9:df:ce:1b:56:df:b6:cc:40:2c:39:94:fa:21:1e:b6:
         1e:7e:e7:c3:ad:ca:70:1a:f5:0c:cb:0c:a4:a6:a0:90:58:9b:
         8f:3d:6f:08:3d:94:ba:97:21:95:0e:67:f3:76:2c:00:f8:52:
         cf:d3:0b:3e:7c:58:49:57:f0:3d:13:16:d8:7a:a9:c6:5d:81:
         d7:28:99:6d:89:4b:61:e8:c2:27:e8:ba:86:6b:64:e6:b9:0e:
         0d:28:a3:ae:bc:84:6f:c8:03:45:b9:dd:1b:5e:b9:0f:49:03:
         46:cd:32:8c:c8:7f:de:8f:ae:2d:7e:ed:8f:b2:75:22:00:f8:
         d2:f6:3b:0d:27:9c:8b:59:80:5d:40:2f:64:9d:22:b1:4f:03:
         83:78:30:0f:70:fd:63:08:c3:ce:e4:04:f4:39:0a:db:26:b1:
         24:1b:fb:66:12:86:ea:ce:d9:c5:95:49:6c:67:14:39:b3:d7:
         4b:24:ca:43:9e:c5:34:73:cc:b6:ee:5a:75:a4:45:58:8b:56:
         c2:97:04:27:1a:83:38:0b:ac:4b:40:59:63:80:a9:a4:aa:69:
         e0:48:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org