Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/370671995A405D6D054D647D54E5D57A1BA8394A.cer
File:                     370671995A405D6D054D647D54E5D57A1BA8394A.cer (raw, json)
Hash identifier:          /v53Gs5TjBu2xKOPQPzKTX+mqIOlqFti5w8wvMZYuSI=
Subject key identifier:   37:06:71:99:5A:40:5D:6D:05:4D:64:7D:54:E5:D5:7A:1B:A8:39:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C004D66570138BD843F7AE9111455CAC3195587
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/370671995A405D6D054D647D54E5D57A1BA8394A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:26:45 +0000
Certificate not after:    Thu 03 Apr 2025 19:31:45 +0000
Subordinate resources:    AS: 265298
                          IP: 168.90.248.0/22
                          IP: 2804:2db4::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:00:4d:66:57:01:38:bd:84:3f:7a:e9:11:14:55:ca:c3:19:55:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:26:45 2024 GMT
            Not After : Apr  3 19:31:45 2025 GMT
        Subject: CN=370671995A405D6D054D647D54E5D57A1BA8394A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:62:f5:07:b0:a7:65:9b:c5:f8:51:f0:e3:
                    2b:d3:02:ca:7d:1c:c2:c9:8f:a1:5f:63:45:a2:d2:
                    f6:9e:28:e8:35:83:ff:15:42:a0:4e:12:65:d0:e5:
                    de:89:d9:d8:4f:83:c3:56:20:a8:79:44:30:2c:b0:
                    1f:02:3d:79:f2:af:d9:6f:af:06:5c:17:40:5d:f4:
                    fa:42:0c:22:87:c6:aa:14:ac:90:c1:fa:2f:0b:86:
                    ff:dd:a3:4e:5d:b6:fe:75:c1:e2:d8:93:8c:99:b4:
                    e3:a3:97:1e:50:1c:b0:c4:4e:6a:50:a2:f8:b1:aa:
                    99:f9:a2:92:64:8a:88:15:49:35:f8:00:77:23:06:
                    e7:4c:1d:4e:ea:6f:a9:56:d5:72:76:e2:7c:41:de:
                    a0:75:de:8c:8c:80:9d:3e:e0:96:d2:b4:bc:a9:69:
                    96:97:68:6b:cb:9c:44:e8:5d:65:90:f4:ac:d2:9f:
                    60:e6:1a:6b:b3:84:87:6a:5a:33:d8:7d:d0:00:a1:
                    35:8d:22:51:10:fc:37:69:7a:ed:8e:26:08:b5:f6:
                    3d:74:0f:a7:ec:12:bf:fa:9e:8f:ce:f4:36:7d:cf:
                    a0:6c:b5:9f:7b:95:3d:ae:51:6e:ef:c5:e0:66:77:
                    c0:94:cf:e4:3b:5d:4e:93:f7:f6:77:a1:84:72:b4:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:06:71:99:5A:40:5D:6D:05:4D:64:7D:54:E5:D5:7A:1B:A8:39:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/370671995A405D6D054D647D54E5D57A1BA8394A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.248.0/22
                IPv6:
                  2804:2db4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265298

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:c5:32:21:b2:24:5d:ea:60:ae:7a:db:7e:cf:b5:1a:69:
         f2:c1:98:b5:2f:b4:7c:fa:68:48:a7:7a:61:83:c3:16:0f:a9:
         2c:a8:6c:94:61:36:ab:99:b1:3f:c9:e0:16:98:18:9c:70:75:
         e8:a6:c9:df:1f:20:bf:46:ec:53:ed:6c:f9:c0:d5:cb:c9:bb:
         28:e7:3b:3b:83:6a:95:75:1c:e8:0b:60:9a:0e:c8:eb:0b:b7:
         9a:11:88:60:e7:48:92:56:77:d7:48:74:a3:a3:fd:43:9c:2f:
         d4:08:b8:bf:b6:bc:a7:ab:77:e0:ee:55:cf:be:45:06:77:55:
         0e:43:0f:bd:ab:70:53:59:d5:fc:c3:4a:d5:c9:78:8f:93:96:
         95:c1:c5:98:b2:36:f8:6d:22:19:15:35:31:29:95:11:6c:46:
         35:82:e9:e0:b1:b2:8f:4d:4b:cc:d7:2d:c9:b7:2a:ad:18:5d:
         12:00:37:70:7d:41:18:08:2c:3f:45:ae:b3:91:60:ae:00:d6:
         c1:a5:d6:41:44:8b:8d:eb:5e:e5:9e:18:c0:85:ac:55:a5:1a:
         4a:d6:e1:f5:cc:b8:ae:b5:a3:aa:8a:d3:ec:f1:0b:5b:4d:21:
         4c:a1:67:1c:39:40:5d:fc:b6:bc:6d:7f:c6:64:1c:9b:44:08:
         6b:fd:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org