Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer
File:                     36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer (raw, json)
Hash identifier:          IAQUAjRkbhxRBJBwPDRgxOC77+Qxf+ImcqghDw+SDzI=
Subject key identifier:   36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       713EEB3C402442BD3AF081D04C07D1B597ADF5E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 21:25:13 +0000
Certificate not after:    Thu 03 Apr 2025 21:30:13 +0000
Subordinate resources:    AS: 270756
                          IP: 200.39.128.0/22
                          IP: 2804:70ec::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 23:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3e:eb:3c:40:24:42:bd:3a:f0:81:d0:4c:07:d1:b5:97:ad:f5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 21:25:13 2024 GMT
            Not After : Apr  3 21:30:13 2025 GMT
        Subject: CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:06:91:d5:32:f5:cf:c6:ce:95:dc:94:96:
                    2f:58:0e:de:fc:29:c4:7b:39:3c:41:26:a9:65:4e:
                    a4:3f:14:df:b4:33:6c:72:bf:73:ae:75:d0:13:75:
                    9e:44:53:9d:7d:76:49:96:2f:b9:ad:de:18:7e:d4:
                    a4:76:59:db:54:3e:93:76:a8:2a:6e:9a:11:ba:22:
                    38:69:03:12:4a:ee:14:ca:6b:bc:f4:24:a1:58:f6:
                    7c:84:e4:de:fa:29:19:23:f3:70:f1:8a:d2:45:f1:
                    cc:e3:89:1a:47:c6:6d:e4:af:42:ce:4b:80:35:4a:
                    7f:34:d9:ac:ea:ae:cc:60:5b:c6:c7:56:1d:2f:53:
                    c2:50:f7:ef:0a:ee:c3:5d:54:87:12:5f:95:2f:ea:
                    a0:bb:94:d6:f3:e4:77:8c:d6:8f:4e:85:74:49:17:
                    f4:e9:3c:b5:18:f5:a0:bd:77:fc:ff:77:fc:2f:04:
                    a3:8a:3a:21:0a:7a:ee:70:f6:38:8b:41:3a:97:0a:
                    61:2c:6c:72:40:45:cd:88:7f:3f:be:74:3b:60:36:
                    e0:87:cd:00:1e:18:72:85:3e:02:4b:8c:ce:9f:26:
                    3d:21:24:cb:23:a1:ce:3e:e5:07:34:fe:fe:dd:e0:
                    ae:20:59:1c:1d:a7:d4:8f:6d:3d:85:35:ca:b8:e5:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.128.0/22
                IPv6:
                  2804:70ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270756

    Signature Algorithm: sha256WithRSAEncryption
         60:02:41:4b:d4:68:f6:82:81:cc:d3:5e:8d:9b:98:67:e7:4f:
         e9:8e:35:7b:58:c6:63:89:8c:1e:9b:32:be:70:c0:b5:cb:c8:
         60:39:cf:b5:e0:41:6b:29:05:41:71:26:0c:b3:63:39:62:34:
         59:c3:3f:62:bd:c2:2c:bf:d9:d6:67:52:ac:72:ed:7c:05:28:
         b0:bf:e6:a5:cc:c2:3e:7a:88:7e:50:d4:b9:59:e2:34:93:d4:
         dd:eb:fb:22:81:1e:f4:a9:aa:88:b2:ae:17:99:70:13:3e:64:
         f8:aa:1c:74:f3:f4:cc:a9:cc:30:14:98:81:04:f4:d2:c1:41:
         61:85:20:19:a0:1b:91:d2:06:f6:f4:ef:1f:50:a4:dd:35:b9:
         8d:db:f9:b2:e1:30:76:13:66:58:1e:6a:88:68:2d:1d:ca:b6:
         b7:c5:15:ad:07:c5:00:8c:6d:4f:47:80:df:89:27:79:b0:47:
         34:4f:b3:c7:fd:43:a5:14:80:b3:25:85:1a:70:dc:1e:8c:f2:
         cd:08:75:4a:a9:44:5f:6d:26:8f:88:41:40:71:4a:83:84:3a:
         6c:49:22:bd:7c:d4:ce:20:18:e2:a4:72:48:f5:d6:f0:95:84:
         85:43:10:96:e5:49:0d:2b:78:19:74:5a:41:ea:12:b7:0d:0f:
         62:1b:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org