Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer
File:                     32C3813075A9E7F4072CD111E0A65457F3DE273C.cer (raw, json)
Hash identifier:          mbzQB6p8xiU8iSsNY3XVMvccQHfixXkefDiOXVtJ1r0=
Subject key identifier:   32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F0CE81A94438F2BE91B1EC519B5CD224632617B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:52:02 +0000
Certificate not after:    Wed 02 Apr 2025 22:57:02 +0000
Subordinate resources:    AS: 271650
                          IP: 179.63.160.0/22
                          IP: 2804:7ed4::/32

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 14:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0c:e8:1a:94:43:8f:2b:e9:1b:1e:c5:19:b5:cd:22:46:32:61:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:52:02 2024 GMT
            Not After : Apr  2 22:57:02 2025 GMT
        Subject: CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:56:cf:d7:36:8d:5a:61:b5:f4:a7:c4:90:
                    26:b8:f0:c0:5a:31:ba:26:15:8b:16:d2:ff:61:5e:
                    bf:e3:ed:70:7b:d7:8d:19:4b:ef:1d:a4:09:64:9f:
                    56:06:b2:30:ab:c8:7a:6b:88:32:17:31:82:25:10:
                    4d:80:1a:0c:41:33:0c:bf:8c:df:6f:00:41:be:9e:
                    d6:47:d3:d0:73:be:43:d4:28:a5:9e:5d:31:52:45:
                    45:3b:7d:ff:46:0a:30:2d:60:55:66:c8:d7:e8:8b:
                    f2:5e:18:43:f8:75:c3:8a:00:b9:48:dd:cc:07:19:
                    9c:96:d3:5a:49:e4:fe:99:f7:e3:9b:23:d1:6f:61:
                    a9:b8:bd:3c:48:67:59:98:56:78:92:5f:35:b1:a0:
                    06:ec:ed:61:2a:30:fa:2c:fa:5d:06:dd:01:e4:44:
                    aa:91:56:ad:b8:4b:94:95:de:39:16:dc:16:c2:dc:
                    cb:b8:a1:66:4b:51:f4:04:1c:70:08:71:a4:f4:46:
                    0f:f8:2e:0d:81:21:c5:29:d8:b2:b3:26:06:ed:19:
                    39:50:a6:5a:3c:56:17:b2:52:2d:ba:77:39:db:87:
                    39:29:cc:72:4d:65:06:f6:2c:77:bb:3e:5e:08:1d:
                    85:bb:ab:a7:3a:ed:6f:73:0c:24:37:0c:6f:15:d2:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/22
                IPv6:
                  2804:7ed4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271650

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:a3:a9:62:75:63:3e:5f:8d:e8:4c:18:40:8f:85:77:94:
         ad:70:99:c8:70:f2:79:67:13:8b:df:39:03:25:e0:13:32:b4:
         cc:c9:ff:70:7d:35:c7:8f:c1:19:9a:9f:39:15:44:68:47:03:
         80:50:93:7a:80:47:8a:2b:7f:71:6e:36:8a:25:88:62:05:11:
         16:85:48:b3:f4:81:3d:64:1f:90:ff:35:b4:c8:91:28:19:bf:
         93:06:58:01:e1:38:23:7e:ae:f2:cc:79:e1:be:fa:1e:5f:39:
         84:ff:bc:3c:37:c1:60:a3:f0:b2:99:c9:5f:4d:00:7c:4f:6f:
         cc:ba:a3:2a:ec:e1:0a:0f:be:eb:92:70:85:de:73:84:59:92:
         04:dc:e8:8e:18:f6:52:4c:58:77:f3:0d:c6:2c:ce:06:1d:ee:
         90:16:95:3c:e0:13:07:f9:0f:18:6a:cc:e9:e5:9d:df:52:96:
         1e:4e:a2:34:e4:a4:c2:db:9b:02:77:70:1e:f9:dc:3a:b5:f9:
         26:e5:ce:ef:90:db:01:02:26:f8:84:cc:18:83:a9:1c:1e:e8:
         90:a3:3c:15:70:66:42:6e:12:30:e9:3b:10:03:28:74:54:43:
         69:e9:57:88:57:42:20:17:30:ce:27:25:a8:d3:f3:7c:8e:cf:
         30:a1:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:29:34 2024 by rpki-client on console-fra.rpki-client.org