Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/470ECC71416A3386488F49C5C7ED668E1F49F723.cer
File:                     470ECC71416A3386488F49C5C7ED668E1F49F723.cer (raw, json)
Hash identifier:          at7DBxfnL7fXxHRzCnBjKczmq2/m4qd8OSbPhYQWZrk=
Subject key identifier:   47:0E:CC:71:41:6A:33:86:48:8F:49:C5:C7:ED:66:8E:1F:49:F7:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30A94B6EC342B6ED136334CEBC3C3D5B59E3D4D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/470ECC71416A3386488F49C5C7ED668E1F49F723.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:47:35 +0000
Certificate not after:    Thu 03 Apr 2025 16:52:35 +0000
Subordinate resources:    AS: 270755
                          IP: 186.233.0.0/22
                          IP: 2804:70e8::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 16:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a9:4b:6e:c3:42:b6:ed:13:63:34:ce:bc:3c:3d:5b:59:e3:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:47:35 2024 GMT
            Not After : Apr  3 16:52:35 2025 GMT
        Subject: CN=470ECC71416A3386488F49C5C7ED668E1F49F723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:47:c8:57:ad:71:a2:82:23:a9:cf:0a:8a:
                    08:51:d3:60:ec:50:74:54:dd:01:35:57:4d:74:23:
                    2f:c9:fb:5b:89:fd:9c:73:ba:04:84:8b:0f:f9:a8:
                    53:20:2f:17:f9:ed:1c:86:0c:f3:fc:bb:a5:19:1b:
                    d3:4f:71:35:61:34:aa:0f:d1:d3:4e:67:2a:95:f4:
                    7c:63:21:d1:85:4a:ff:3a:fc:41:56:fe:f6:09:22:
                    59:c4:ef:4e:f5:90:22:1e:d2:ef:69:0f:0d:c3:4d:
                    fe:05:1c:ad:cc:b3:d0:44:02:94:a6:05:cf:cb:b8:
                    30:ba:8b:7d:57:d3:a8:e3:28:82:02:7e:94:dc:23:
                    a1:74:04:8c:c3:6d:17:ba:5a:6f:04:29:1d:9f:d0:
                    54:8d:58:be:de:64:0c:54:c3:8a:4f:54:57:82:a9:
                    c6:05:c4:ae:70:bf:54:a4:a1:e2:85:08:2b:18:62:
                    42:e1:88:43:a5:34:d9:4c:11:05:32:cb:1a:b5:f6:
                    30:80:56:d0:08:b5:ca:46:2a:a6:a7:62:a7:1b:e3:
                    98:17:b5:79:03:46:82:25:f6:31:8a:46:07:2a:ad:
                    e0:90:68:76:40:4c:88:61:60:63:98:d7:cd:da:97:
                    56:0f:d1:9a:57:39:8c:bc:37:5b:4d:19:51:6f:97:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:0E:CC:71:41:6A:33:86:48:8F:49:C5:C7:ED:66:8E:1F:49:F7:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/470ECC71416A3386488F49C5C7ED668E1F49F723.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.0.0/22
                IPv6:
                  2804:70e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270755

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:61:a0:9b:46:ef:5a:61:21:e0:f8:77:ca:88:da:3a:99:
         76:16:59:0d:2b:d1:cf:c6:21:dc:47:30:af:0a:1b:33:63:1d:
         e5:d3:c8:76:db:9f:ae:c6:4a:ab:43:7f:e9:0a:78:14:0a:d2:
         f1:05:8b:65:29:4a:d7:86:c1:15:c8:ed:65:ba:2f:6a:d3:87:
         7b:5a:6d:8a:a7:81:f4:cb:a1:ed:ba:8b:5b:7c:00:58:64:de:
         b7:e2:16:2c:42:32:e9:2d:07:34:f5:c5:2b:12:3e:ba:1e:01:
         ed:8d:e7:5d:e6:3f:f8:b6:5a:7e:6c:5a:4c:60:b1:bc:e2:03:
         cd:bb:63:1d:8e:1e:28:29:35:1a:d4:89:29:37:2c:81:4d:51:
         03:e4:66:47:26:c8:d6:f4:69:65:ae:d7:f8:d1:14:d5:cd:f4:
         d6:a5:38:b5:51:12:2f:b3:da:bf:82:ed:64:b7:4d:19:8f:04:
         40:d3:02:aa:f1:73:7d:36:7e:1c:1e:b2:78:3b:8e:47:9a:cc:
         bd:7f:96:21:af:ef:f5:41:37:d9:9f:3b:ef:4c:1d:2b:0d:e9:
         b2:8f:4f:0b:83:52:fb:b6:16:dd:5a:6f:25:c5:f6:b8:5b:72:
         1a:1e:4c:c0:ca:11:37:ec:cd:47:17:ce:c0:0e:77:4c:5c:84:
         be:ca:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org