Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer
File:                     708F064BF344A2F78B8AB54D553811C27DBF477C.cer (raw, json)
Hash identifier:          jioAgx0CdG+wit3PTtT/86H8nk9lHq3k0e+JpdBpEkY=
Subject key identifier:   70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D25242561107844A6E8003350438D12E1E29CA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 03:27:41 +0000
Certificate not after:    Fri 04 Apr 2025 03:32:41 +0000
Subordinate resources:    AS: 271561
                          IP: 179.63.136.0/23
                          IP: 2804:7d70::/32

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 09:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:25:24:25:61:10:78:44:a6:e8:00:33:50:43:8d:12:e1:e2:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 03:27:41 2024 GMT
            Not After : Apr  4 03:32:41 2025 GMT
        Subject: CN=708F064BF344A2F78B8AB54D553811C27DBF477C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:a3:84:96:e1:ba:59:cc:c1:bd:9e:9c:e2:
                    cc:d4:10:39:44:07:4f:8f:b3:28:25:74:a3:e6:fb:
                    72:1b:2d:f1:61:56:53:e9:f2:f7:05:b9:5b:15:3b:
                    c8:23:60:43:74:8f:c9:38:7d:2f:5b:01:39:cd:47:
                    5c:8a:0a:17:f7:9f:a8:fb:1e:3c:6c:db:5a:3d:70:
                    af:b9:76:8e:e7:2f:8e:4b:86:2e:f8:9c:3c:a3:60:
                    0f:2e:ae:ea:54:09:94:0c:b1:16:f6:55:97:27:74:
                    08:cc:5d:d6:81:0e:83:45:12:eb:9a:c5:3a:7b:6f:
                    cd:c4:01:4d:87:74:3f:2f:d8:22:34:b0:3a:19:6e:
                    df:85:47:db:24:67:e7:b8:44:a9:a3:7a:1f:ed:52:
                    0d:65:8d:72:a5:41:bf:d8:94:64:61:3f:97:1c:d9:
                    b8:1d:00:04:18:18:bb:f1:b4:27:8d:4f:16:80:17:
                    46:f6:4e:4b:06:bc:95:ac:93:65:ab:e6:a1:5d:70:
                    dd:d5:78:45:10:63:72:bb:a4:f3:dc:a5:0e:db:6f:
                    09:3c:71:ca:7e:48:2f:8e:d6:f7:b6:75:8f:0c:04:
                    b6:b2:e3:9a:45:2b:20:70:12:e4:3c:c0:75:aa:cb:
                    d3:6f:67:8c:8b:18:c3:d1:1f:7b:96:ef:46:bc:1a:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.136.0/23
                IPv6:
                  2804:7d70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271561

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:9e:b7:99:7b:72:1d:cf:2e:96:2d:f9:ba:61:de:93:23:
         c6:50:32:ca:8a:ad:90:5d:a0:0d:1a:61:e4:65:18:cf:99:17:
         7f:b2:76:13:1d:78:8e:ad:0e:a4:43:55:76:12:62:b9:a5:a8:
         e3:01:f4:b1:17:dc:b6:0e:64:f6:ed:5b:40:bb:73:2c:72:10:
         e6:e2:eb:f3:b8:a7:ed:cb:8d:e8:4f:77:f4:79:dd:81:25:b2:
         fb:6f:d4:7a:4a:22:5c:37:ee:95:ff:bc:e1:24:4b:cb:23:b4:
         76:ff:b3:33:1c:bb:7b:ff:d3:54:e8:77:5e:97:00:72:67:58:
         93:80:1b:c9:be:8e:97:67:78:dd:9f:1f:42:d9:55:b6:f8:78:
         23:1c:97:4d:7f:fe:42:4e:8d:22:b4:e5:a8:d1:60:f3:ed:1a:
         f7:f3:ab:bb:70:f2:86:b0:22:2d:01:9e:e8:ee:d4:33:b1:bc:
         3a:28:d9:c1:24:e0:79:d4:97:a5:7a:9b:9c:ad:4c:f1:e7:13:
         cd:4a:88:07:a7:a5:f9:5e:de:33:47:7c:53:ea:59:94:a5:db:
         b0:21:64:0c:57:b3:9a:0a:94:fb:1d:cf:75:7b:f9:bf:53:22:
         8a:51:95:16:f5:c2:a0:b2:84:83:ce:8f:00:1f:41:07:e2:0e:
         70:42:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org