Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63FAD7AC74D421FCE0B07595EB091DCB86B312A2.cer
File:                     63FAD7AC74D421FCE0B07595EB091DCB86B312A2.cer (raw, json)
Hash identifier:          /ab7tqIQPXyyy1ASqAzqmAN4EiZsZ+zOHDCpoSb1FME=
Subject key identifier:   63:FA:D7:AC:74:D4:21:FC:E0:B0:75:95:EB:09:1D:CB:86:B3:12:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7150F839774A3CAF85CB62BFDB5E4F1F23039EBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/1/63FAD7AC74D421FCE0B07595EB091DCB86B312A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:18:20 +0000
Certificate not after:    Wed 02 Apr 2025 20:23:20 +0000
Subordinate resources:    AS: 14840
                          AS: 26622
                          AS: 61889
                          IP: 177.152.184.0/22
                          IP: 186.211.128.0/17
                          IP: 187.103.96.0/19
                          IP: 200.0.32.0/20
                          IP: 200.143.64.0/18
                          IP: 200.195.224.0/19
                          IP: 200.215.208.0/20
                          IP: 201.16.0.0/17
                          IP: 2804:8::/30
                          IP: 2804:e34::/32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 01:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:f8:39:77:4a:3c:af:85:cb:62:bf:db:5e:4f:1f:23:03:9e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:18:20 2024 GMT
            Not After : Apr  2 20:23:20 2025 GMT
        Subject: CN=63FAD7AC74D421FCE0B07595EB091DCB86B312A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:f2:57:4e:a9:c2:c8:e5:4f:d9:90:b5:26:
                    b7:4f:e8:55:27:1f:cb:12:4f:d6:56:6c:c6:0b:12:
                    46:bb:54:51:79:df:08:35:c0:13:39:52:47:7e:9e:
                    0e:3a:32:f4:23:26:3c:a4:bb:3b:5a:1c:9e:ee:ca:
                    dd:57:f1:b4:bb:f0:69:89:09:2a:c6:c8:2a:3e:d4:
                    48:3e:8f:cd:b2:85:3e:7a:c7:a8:c6:25:2b:93:f9:
                    17:84:83:ee:9b:9f:35:a4:95:1b:e8:27:94:dd:bb:
                    9d:4f:21:da:62:25:54:c0:c7:b1:35:f2:4e:2d:4c:
                    32:db:fa:67:09:4a:6f:13:5c:28:72:cf:7d:47:a6:
                    3a:8c:9e:d8:56:51:0e:82:56:73:c0:0d:c2:1c:8d:
                    25:61:e7:92:d9:3c:42:a7:58:5c:b3:af:e7:85:c8:
                    e0:56:13:9f:42:f5:37:e9:1e:4a:66:43:62:30:2a:
                    4f:5f:7a:6e:57:89:f2:2e:26:87:0c:9b:f4:3a:ba:
                    ec:a3:97:97:d8:e3:c0:08:fd:06:6f:81:3f:00:a1:
                    c7:19:b2:3d:6b:a7:b8:d7:88:b8:d5:76:68:98:ad:
                    f4:5d:ef:a7:c8:78:b8:67:65:00:92:ea:91:a0:49:
                    6a:d4:38:72:77:d9:7e:82:11:44:69:32:6f:c2:62:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:FA:D7:AC:74:D4:21:FC:E0:B0:75:95:EB:09:1D:CB:86:B3:12:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/1/63FAD7AC74D421FCE0B07595EB091DCB86B312A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.184.0/22
                  186.211.128.0/17
                  187.103.96.0/19
                  200.0.32.0/20
                  200.143.64.0/18
                  200.195.224.0/19
                  200.215.208.0/20
                  201.16.0.0/17
                IPv6:
                  2804:8::/30
                  2804:e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14840
                  26622
                  61889

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:92:7a:0c:c9:e3:d6:38:f0:ae:74:8c:bb:7f:a3:0c:6f:
         6a:c0:da:1c:07:b6:78:22:03:4b:ba:d2:1a:51:62:4e:dc:e6:
         88:af:73:2c:20:ca:0d:6e:52:76:f8:5d:39:74:f1:01:85:37:
         9b:f6:77:cd:73:86:0e:23:c8:a5:e9:19:7f:f7:cc:ec:90:a2:
         03:4d:70:f7:4a:3f:e5:dc:c7:b9:61:09:84:5d:f3:89:02:27:
         42:c7:f8:1d:04:78:d2:a5:5b:6b:40:74:d0:b1:61:fa:40:81:
         de:ae:ac:63:fc:5a:3b:78:10:3d:5f:dc:77:90:2c:bb:84:cf:
         24:81:cc:86:28:09:f7:6f:f7:8f:ac:f9:e2:08:74:8e:bb:7b:
         cc:0b:5c:bf:f3:1f:23:46:fd:c4:67:62:86:0b:64:a4:a3:fb:
         ab:8d:bd:29:2b:4b:73:75:91:68:d5:d6:9d:4a:87:12:71:50:
         9a:49:e4:3a:96:bb:8a:48:ec:7d:09:93:92:b3:bb:43:73:63:
         98:d0:9c:5f:19:6f:a5:20:8f:5c:43:27:e9:93:97:49:9a:d4:
         ad:a0:bc:6d:3b:d8:a5:cc:3c:cc:69:82:18:a0:d3:59:47:cb:
         63:3d:80:ac:ab:3d:2c:d3:23:42:0a:a3:98:a6:c3:00:f9:19:
         7c:81:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org