Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/59AD6DB56882CCA0C65FB499DB861CA684293EB7.cer
File:                     59AD6DB56882CCA0C65FB499DB861CA684293EB7.cer (raw, json)
Hash identifier:          Ko4U3EZ/zssRfdTUDcofosKKZm3HQbnQn1/xDMo/wKA=
Subject key identifier:   59:AD:6D:B5:68:82:CC:A0:C6:5F:B4:99:DB:86:1C:A6:84:29:3E:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48E558E3C9E0B48353B7CAF855ADAA0979CB0D59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/1/59AD6DB56882CCA0C65FB499DB861CA684293EB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:59:47 +0000
Certificate not after:    Wed 02 Apr 2025 19:04:47 +0000
Subordinate resources:    AS: 263084
                          IP: 177.21.48.0/20
                          IP: 2804:a48::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e5:58:e3:c9:e0:b4:83:53:b7:ca:f8:55:ad:aa:09:79:cb:0d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:59:47 2024 GMT
            Not After : Apr  2 19:04:47 2025 GMT
        Subject: CN=59AD6DB56882CCA0C65FB499DB861CA684293EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:5c:06:e7:64:1a:69:a7:7b:ec:fc:2d:6c:
                    f7:8d:6d:2f:12:1f:ea:9e:e5:a4:ea:45:9b:c4:77:
                    b2:9b:e2:82:30:f8:e6:08:06:f0:15:ba:fe:88:11:
                    ff:98:e7:91:cd:ec:a7:f3:80:50:fe:e8:3e:d4:89:
                    9a:bf:7a:9f:bf:b0:5d:ee:b5:14:1b:c1:22:7b:19:
                    66:6c:68:e3:e3:60:97:8b:62:db:13:2a:88:91:68:
                    2c:b3:16:d3:56:d8:57:b6:9b:93:77:52:c3:1d:9e:
                    01:ce:cc:ad:d0:18:05:a9:e1:e8:85:98:63:d6:8f:
                    b9:5f:96:c3:09:e5:e3:00:ed:ca:f6:ce:ad:98:4e:
                    14:a1:19:d6:a9:05:0b:10:fc:e7:01:d0:c0:aa:23:
                    b4:ce:b4:d7:b4:2f:7b:2d:0e:70:7a:56:19:0e:d1:
                    b1:0a:33:1f:38:b8:c0:73:97:4b:52:11:3b:a9:f0:
                    f1:47:a0:f0:9b:b0:33:78:13:50:05:47:2d:55:19:
                    7a:ce:dd:fe:a9:ad:9a:70:91:f1:2e:f6:e5:8d:b9:
                    13:0e:8f:4d:9c:d2:e7:b2:61:7d:1f:8b:f7:80:3a:
                    8a:27:4a:bf:31:7a:b6:ce:a5:a9:c5:39:a2:a5:a0:
                    74:1c:51:30:3b:f7:1f:63:dc:42:c5:d2:aa:f1:d1:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:AD:6D:B5:68:82:CC:A0:C6:5F:B4:99:DB:86:1C:A6:84:29:3E:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/1/59AD6DB56882CCA0C65FB499DB861CA684293EB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.48.0/20
                IPv6:
                  2804:a48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263084

    Signature Algorithm: sha256WithRSAEncryption
         68:74:01:f8:4a:79:fa:60:98:8e:52:c8:7a:ff:ec:45:c0:5d:
         08:4b:c7:d0:e6:7b:0d:e8:7c:fa:ff:cb:be:b9:d6:4c:da:51:
         0e:87:f1:cb:9d:62:99:81:9d:6b:cd:34:e6:c8:67:aa:4d:25:
         0b:eb:0d:f6:f9:b8:ae:23:27:45:3b:42:85:72:0a:01:4c:03:
         ac:35:43:32:63:72:13:e4:4f:13:43:8a:bc:3a:d9:ae:80:e8:
         60:d2:15:cb:89:ec:f4:f0:ca:68:b7:9e:ce:92:53:bf:23:6f:
         8b:2f:ab:7d:11:94:95:78:4f:0e:b4:cc:ad:97:9b:a2:9c:d8:
         21:ce:01:c3:fa:8a:88:b2:1d:aa:86:bf:51:e9:69:38:41:71:
         bb:65:84:70:1a:81:e4:0d:2f:e7:84:e8:5d:d2:d9:c0:3c:0d:
         37:88:b3:6f:95:82:05:65:18:48:ea:ee:5c:db:e5:9e:86:17:
         2a:eb:5e:f7:6e:37:29:40:a9:53:e0:ba:cf:3a:12:03:0f:67:
         54:97:fe:7c:15:02:f6:e5:06:f9:59:a6:a0:a6:cf:38:6e:01:
         19:f6:21:da:c2:c7:a5:2e:98:35:2c:5c:40:a2:52:1a:b6:96:
         86:aa:ed:a3:3a:bd:5a:be:5a:59:9a:3a:cc:9e:b6:e3:66:fe:
         f7:78:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org