Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30FCF6B95C13532FFA68FBDE06398E532B394F31.cer
File:                     30FCF6B95C13532FFA68FBDE06398E532B394F31.cer (raw, json)
Hash identifier:          WqtcVJBFK7b055RBDsT+E5KgNFJzlomfBEWcKIPH9s8=
Subject key identifier:   30:FC:F6:B9:5C:13:53:2F:FA:68:FB:DE:06:39:8E:53:2B:39:4F:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       471E92FDEBE64D5683A41813AE46849241DBC84F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/30FCF6B95C13532FFA68FBDE06398E532B394F31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 17:40:03 +0000
Certificate not after:    Fri 01 Aug 2025 17:45:03 +0000
Subordinate resources:    AS: 270782
                          IP: 177.131.132.0/22
                          IP: 2804:7154::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 22:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1e:92:fd:eb:e6:4d:56:83:a4:18:13:ae:46:84:92:41:db:c8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 17:40:03 2024 GMT
            Not After : Aug  1 17:45:03 2025 GMT
        Subject: CN=30FCF6B95C13532FFA68FBDE06398E532B394F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:d7:dc:f8:38:d5:29:5d:7f:b1:ac:e1:77:
                    5b:11:bb:35:73:1f:fb:32:bb:d5:99:41:39:7a:62:
                    b5:7c:37:ca:3b:b7:6f:0d:b9:82:d1:03:c7:4f:60:
                    ba:b4:3d:f1:61:6a:24:59:85:8b:9b:a3:58:ec:cf:
                    62:73:30:1c:b4:f9:d8:e6:83:38:1d:c2:68:06:51:
                    b3:3a:b8:1b:34:5c:95:3d:fd:0a:49:e0:ce:a1:84:
                    58:e5:98:df:c0:d6:5a:26:e4:5e:d4:97:47:5f:2d:
                    c9:cb:3b:f1:09:88:d2:6d:e8:ba:c7:a6:a6:8c:aa:
                    15:5c:14:04:96:80:70:13:f7:9e:fa:07:68:b3:23:
                    c1:4b:cf:ed:2c:2b:fb:e7:46:4e:06:62:af:52:ff:
                    13:8e:29:ee:53:11:a4:a9:8d:ed:c5:50:b3:09:5c:
                    c8:c4:ab:8e:07:ec:83:b5:92:29:d2:e2:76:40:b4:
                    88:43:e5:5c:14:22:3b:43:83:18:39:66:76:f8:9f:
                    07:07:8f:f7:09:19:ea:72:57:d7:49:10:2c:ef:be:
                    04:10:e5:2d:ac:f4:ba:14:44:59:d9:c3:d6:e1:2f:
                    2d:27:3f:54:6d:31:7d:ba:89:65:e4:de:f8:a6:10:
                    f5:f7:00:36:5e:de:a5:b4:96:73:4c:de:fd:0e:cd:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:FC:F6:B9:5C:13:53:2F:FA:68:FB:DE:06:39:8E:53:2B:39:4F:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/30FCF6B95C13532FFA68FBDE06398E532B394F31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.132.0/22
                IPv6:
                  2804:7154::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270782

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:59:bc:3a:5b:51:da:00:ea:44:2f:8a:7b:ba:6a:cd:90:
         8e:b0:f9:f6:e2:fd:b5:e2:18:b7:c1:ff:f4:0d:d0:3e:f7:46:
         ee:8c:f0:73:09:86:16:0a:18:08:1b:91:ff:70:18:e2:0d:d1:
         55:6b:dc:b7:ce:e6:71:42:98:4b:99:d8:43:6a:9b:93:57:7f:
         27:3b:c4:74:e5:b7:ca:41:24:06:bf:eb:8b:90:26:7c:cf:d0:
         c4:9c:7f:15:9b:10:55:ef:42:07:76:d5:e5:85:59:85:00:ac:
         4b:2d:1c:9a:ca:79:8d:37:66:14:d8:19:af:49:8a:46:75:df:
         04:e1:5b:70:cf:21:50:e8:9d:eb:f8:78:93:23:9e:5d:20:67:
         06:58:47:2f:4a:85:8f:26:bf:ef:a8:04:52:ba:da:d7:37:a3:
         a5:3f:98:0e:3a:0f:b0:7f:79:b4:13:33:33:0b:71:e0:79:7a:
         16:6b:50:d9:fc:ba:2f:62:64:40:17:54:70:1d:54:68:ca:d9:
         7a:96:17:92:de:1f:80:29:e7:cc:c3:a6:27:78:44:21:92:c3:
         16:78:e2:35:0f:05:d2:3a:bc:0e:f3:9d:5f:5f:70:c0:d9:89:
         88:cd:70:a5:b6:25:c2:2a:42:f9:a6:0d:80:66:ff:bf:c5:f0:
         58:f6:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 00:11:06 2024 by rpki-client on console-fra.rpki-client.org