Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer
File:                     56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer (raw, json)
Hash identifier:          hoOtl1/QEgaJi1r/oF8dSXhkG8BD6xK9sqKviLadi70=
Subject key identifier:   56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BB5B908BEFCB085E4F4F3DBA8A104A990085767
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:42:16 +0000
Certificate not after:    Thu 03 Apr 2025 09:47:16 +0000
Subordinate resources:    AS: 269124
                          IP: 45.180.36.0/22
                          IP: 2804:5fcc::/32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 13:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b5:b9:08:be:fc:b0:85:e4:f4:f3:db:a8:a1:04:a9:90:08:57:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:42:16 2024 GMT
            Not After : Apr  3 09:47:16 2025 GMT
        Subject: CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:97:fd:04:d9:46:40:c7:66:3a:b5:53:c1:
                    17:ee:a0:b1:70:6d:db:d8:ba:b5:c2:29:d1:18:b4:
                    7f:ca:00:0b:01:ef:e3:1e:47:f7:37:48:d4:6c:9c:
                    7d:19:53:60:f6:5e:72:1e:b4:70:6a:0c:9a:cf:c7:
                    c0:99:1f:a8:1f:19:1e:0d:7b:38:fd:6a:d8:37:90:
                    85:ae:9f:68:46:9c:c5:12:6c:59:a0:b7:20:19:16:
                    e2:b5:8a:a2:29:5f:67:2c:02:e5:de:73:7e:f6:2d:
                    63:cb:45:3e:0d:f6:ff:ad:d5:3e:ec:fb:81:09:7d:
                    98:0f:83:1a:ed:7d:b2:94:72:1b:86:5f:9f:25:d5:
                    0e:f7:d0:60:98:99:c2:07:a5:a0:6d:d7:d3:c5:85:
                    42:05:55:d2:e0:84:9b:65:5c:c3:20:8c:d5:4a:2e:
                    ca:4c:89:7e:84:f6:37:6b:2f:47:0c:66:f6:ac:43:
                    6a:c0:46:7f:34:45:38:9e:93:38:e3:ad:aa:e7:45:
                    6f:2e:f6:e2:6d:50:1a:fa:69:9e:26:c6:b8:89:c1:
                    d2:53:7b:25:37:35:c6:72:01:60:dc:f9:ea:29:75:
                    8e:b4:89:cd:80:56:c9:fb:58:8c:77:5c:28:73:aa:
                    9a:00:7a:df:ea:03:09:36:5c:ce:41:76:e2:4e:ef:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.36.0/22
                IPv6:
                  2804:5fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269124

    Signature Algorithm: sha256WithRSAEncryption
         22:23:72:6c:ae:e9:c1:93:ff:f5:35:09:05:c2:27:a0:7f:9f:
         74:ab:41:c4:df:27:ca:63:4a:1c:50:98:a6:f3:57:24:bb:a5:
         a4:48:5e:55:ef:80:50:40:96:7d:be:51:73:57:82:4f:c4:5d:
         e3:15:99:bc:e1:d4:b8:df:25:44:e3:59:15:b0:26:da:44:9e:
         5a:17:bf:a1:a5:61:7e:3a:eb:ee:d6:47:a2:00:4f:cb:9f:d5:
         be:ef:b6:81:02:db:99:f8:a4:15:86:55:70:28:7d:95:41:c5:
         7a:a3:f1:3e:d4:d9:d0:46:fb:59:0c:02:a5:43:3e:6f:a0:5a:
         b3:5d:b2:f8:5a:70:63:ce:f7:01:1b:6a:ec:ec:b2:2f:e6:3c:
         74:4e:e8:01:d8:c8:25:9a:ac:76:1c:fe:1e:76:9e:6f:49:64:
         1e:3f:fc:f6:f4:a2:43:18:1f:0d:9e:e0:90:ca:db:01:c3:63:
         e8:d2:3e:b9:61:8a:da:6e:6d:0a:ea:22:4f:a0:20:2d:b9:77:
         fe:a8:b2:9d:86:b4:a5:92:3d:2d:2f:4d:22:7c:7e:f9:a9:fb:
         08:e3:18:b0:bd:36:01:fa:f2:d7:e0:09:6c:de:0b:b5:db:76:
         88:d3:9b:ac:a5:ce:ed:08:be:63:d9:b4:0a:71:d0:1a:9f:59:
         e2:02:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 16:59:03 2024 by rpki-client on console-fra.rpki-client.org