Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/679A1A74FD52C509FA787D3C276F759F064A02F1.cer
File:                     679A1A74FD52C509FA787D3C276F759F064A02F1.cer (raw, json)
Hash identifier:          nJLMXAEwk8e5z4NBWFEsnRlYs4/AVyFKQpx7u1yZMnA=
Subject key identifier:   67:9A:1A:74:FD:52:C5:09:FA:78:7D:3C:27:6F:75:9F:06:4A:02:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D4D8B3C2C2BF289D2F766D694B7EAF85FFE5BCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:39:31 +0000
Certificate not after:    Thu 03 Apr 2025 00:44:31 +0000
Subordinate resources:    AS: 269136
                          IP: 45.180.136.0/22
                          IP: 2804:5ff4::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 02:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4d:8b:3c:2c:2b:f2:89:d2:f7:66:d6:94:b7:ea:f8:5f:fe:5b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:39:31 2024 GMT
            Not After : Apr  3 00:44:31 2025 GMT
        Subject: CN=679A1A74FD52C509FA787D3C276F759F064A02F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:e5:8a:96:25:5f:f0:33:47:9f:f9:db:f7:
                    c8:03:69:b9:dc:38:37:2d:5c:99:85:c6:9d:a7:e5:
                    19:bf:7d:bd:dd:52:fd:24:44:4b:58:b8:22:67:13:
                    ec:67:c1:4a:64:8d:1c:86:06:55:2f:a6:6b:7e:59:
                    7c:cd:da:db:6b:a0:65:fc:7d:2c:19:27:e4:d3:3c:
                    b9:66:93:ca:b2:fb:23:22:fd:00:c3:bf:b2:77:ad:
                    66:e5:25:dd:a0:d3:0a:c1:5a:1f:d7:bd:84:a7:34:
                    2f:19:e9:de:73:b5:af:a4:83:b8:0a:29:a6:14:49:
                    3a:f7:a7:b0:fb:18:95:c4:bd:aa:c1:6d:30:ea:ca:
                    f4:6a:15:f6:aa:e5:af:f2:9f:6c:44:3f:c1:f1:ed:
                    a1:4b:49:e4:f8:5b:7a:e9:76:1c:4a:93:95:ff:c5:
                    ad:f3:98:6a:48:9e:6a:01:72:6c:e1:95:93:ab:58:
                    b0:79:1a:c8:db:6f:5d:b7:ee:4c:e5:be:8a:3c:b4:
                    1c:5a:e6:b9:b2:a7:e4:2d:9d:49:34:9d:cb:06:d6:
                    80:df:fe:39:70:bd:79:5e:b5:83:1e:63:53:e8:c9:
                    ae:20:e4:da:3b:50:38:82:59:fb:e8:70:87:6d:03:
                    4b:e2:7e:1d:20:d7:58:37:5b:56:8f:0c:0e:67:d4:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:9A:1A:74:FD:52:C5:09:FA:78:7D:3C:27:6F:75:9F:06:4A:02:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.136.0/22
                IPv6:
                  2804:5ff4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269136

    Signature Algorithm: sha256WithRSAEncryption
         b3:56:bb:dc:b8:2f:5e:a7:f1:a6:6d:91:fc:cc:6e:3b:53:27:
         db:6a:e9:ed:d0:69:44:4d:8a:59:62:8a:70:ab:ae:7b:e8:aa:
         74:c1:6f:59:0c:d2:77:94:15:08:d9:c1:ce:2d:a4:ce:77:50:
         7c:a1:c5:4b:e4:75:b1:bb:bd:9c:9f:d4:58:be:b4:d2:7c:88:
         e5:8e:d1:90:ec:a1:75:2c:d8:07:86:8d:b6:ea:28:1e:02:f4:
         c5:df:c8:3a:1f:23:ee:31:7a:19:b3:83:fe:0b:b8:d3:96:a8:
         c9:52:3d:f3:e5:db:9c:db:f8:36:51:e1:5c:d7:5a:87:7a:5c:
         00:95:83:9e:51:80:89:8c:cd:b5:78:c1:ab:f1:c7:9a:4f:6c:
         ad:f8:57:f9:df:27:53:af:3b:70:bb:22:44:92:af:a2:56:5a:
         a8:c8:3d:f1:9d:85:6a:98:fb:96:04:61:bb:97:a5:1a:e0:c4:
         b6:ce:77:8b:52:c1:74:39:7c:37:a4:e0:e5:99:64:a9:68:18:
         bc:c0:43:77:87:ba:e9:3d:3a:fa:c8:a3:ae:8b:c3:4d:cf:ac:
         17:b3:70:c1:51:1e:60:4a:37:92:6a:9e:32:10:e0:e1:ff:53:
         fb:e2:5e:23:52:5c:51:b8:29:5c:54:45:63:fa:14:4c:18:dd:
         95:e1:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org