Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/671CDB5BA3E589C9E13943FA4E6FD60571C4E652.cer
File:                     671CDB5BA3E589C9E13943FA4E6FD60571C4E652.cer (raw, json)
Hash identifier:          1RKt4FkUzTzP5JPOe1evXu1jmeOtJBKAVT670M3Gy5M=
Subject key identifier:   67:1C:DB:5B:A3:E5:89:C9:E1:39:43:FA:4E:6F:D6:05:71:C4:E6:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7714ABEDBF7EB1C7D61119F473B82E2A1A04997B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/671CDB5BA3E589C9E13943FA4E6FD60571C4E652.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 20:48:03 +0000
Certificate not after:    Thu 15 May 2025 20:53:03 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 00:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:14:ab:ed:bf:7e:b1:c7:d6:11:19:f4:73:b8:2e:2a:1a:04:99:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 20:48:03 2024 GMT
            Not After : May 15 20:53:03 2025 GMT
        Subject: CN=671CDB5BA3E589C9E13943FA4E6FD60571C4E652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:17:bd:09:c8:cb:1f:05:f3:09:7c:95:ea:
                    0e:e3:88:eb:6a:2d:ae:f7:bd:ac:f7:09:a7:77:c9:
                    1f:92:7c:45:d7:0c:69:8d:c3:c5:63:66:9a:35:3c:
                    3e:2e:e0:ee:1f:3a:9f:af:e5:72:49:3b:75:72:9c:
                    24:23:a3:5c:b3:b3:43:28:89:f7:6e:79:04:59:d9:
                    c4:c1:61:02:88:68:08:eb:5d:6b:75:a3:c6:8d:3a:
                    7f:77:65:25:fa:a0:63:ef:22:6d:a7:93:2d:d8:76:
                    37:5a:1e:c7:6b:4d:2c:46:cb:1d:1b:11:9c:71:f6:
                    8c:7f:11:c5:dc:16:fc:7f:bd:db:94:6c:be:f3:5f:
                    71:dd:16:cd:a0:fd:c0:2f:5e:ef:52:f3:ed:b9:cf:
                    68:2c:5f:c9:a4:ca:71:a6:cf:95:bf:e4:2b:82:25:
                    78:5e:37:50:89:e4:00:f3:76:28:98:45:f1:2f:97:
                    80:7e:ef:03:af:42:78:1f:27:e2:7a:57:be:65:58:
                    25:03:cb:90:7d:de:ad:5b:f4:73:02:17:e2:bc:00:
                    08:93:fe:74:3b:80:18:37:17:77:c7:40:53:d7:dc:
                    f9:bc:ab:f1:a9:4d:f0:76:b0:2a:02:a8:59:45:b6:
                    36:1d:32:67:51:a3:f0:19:12:1c:6a:21:2e:8e:d2:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:1C:DB:5B:A3:E5:89:C9:E1:39:43:FA:4E:6F:D6:05:71:C4:E6:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/671CDB5BA3E589C9E13943FA4E6FD60571C4E652.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:33:88:4d:86:f9:fb:18:3d:c4:29:63:0d:a8:ce:2b:bc:
         2c:3d:00:d7:9d:b8:67:01:41:4e:3b:16:b9:f4:34:49:73:02:
         5a:27:ab:4a:4b:7f:7b:ca:53:ed:93:77:9f:f0:aa:78:a0:8e:
         3d:5f:b0:93:9c:73:ee:b4:2f:e6:43:20:d4:82:24:c8:ee:ae:
         11:26:3c:37:64:6b:49:6a:23:11:9b:de:24:8e:72:34:fb:6d:
         27:52:2d:e3:5e:4c:0c:df:88:77:91:f1:86:73:fe:7c:58:39:
         95:be:81:fd:f5:f4:9e:67:ac:bc:78:19:ad:ff:98:b5:0e:4a:
         78:31:0e:60:8b:c8:ed:b8:0c:9c:5d:58:3b:5b:73:59:12:e5:
         fb:09:99:34:f6:1a:14:a9:9c:01:65:42:d8:28:c5:40:8e:32:
         0f:2d:b2:9b:53:36:d5:ac:4a:67:08:00:37:3a:61:56:50:01:
         26:c1:67:47:5c:c9:4a:b3:bb:49:e8:3a:d4:34:b5:c0:41:e4:
         f4:88:35:5d:fb:5b:26:26:65:84:0b:73:b6:3b:e8:5b:25:b1:
         50:78:cc:fb:81:d1:d6:60:71:eb:43:f4:5c:00:96:7a:33:c6:
         ca:bf:33:0a:03:8b:89:2d:3d:78:5b:c8:a3:c3:52:92:cc:76:
         1c:d7:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org