Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.cer
File:                     70A4487B1E4C02FB38ED862258E884E8D24BFC48.cer (raw, json)
Hash identifier:          ksxHOjtCuylpHt4H3R363hSKbhdAltHJptyjZ6dlIHs=
Subject key identifier:   70:A4:48:7B:1E:4C:02:FB:38:ED:86:22:58:E8:84:E8:D2:4B:FC:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C92397E77B0E3265AC122D873797A5736DE2F8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:44 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:44 +0000
Subordinate resources:    AS: 265029
                          IP: 170.84.24.0/22
                          IP: 2804:31a8::/32

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 17:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:92:39:7e:77:b0:e3:26:5a:c1:22:d8:73:79:7a:57:36:de:2f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject: CN=70A4487B1E4C02FB38ED862258E884E8D24BFC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:28:2c:12:8e:7d:c5:ad:96:e1:0b:18:c1:
                    68:4f:c0:64:0d:0e:ff:b4:e9:38:ff:ee:be:22:da:
                    c7:03:a7:08:b8:75:55:af:b9:52:33:f6:68:de:1a:
                    42:e6:26:ea:c9:60:6a:87:ad:b1:62:7c:05:26:d5:
                    c1:ff:a8:73:4d:e2:99:dd:a9:a6:70:eb:35:e5:8c:
                    fa:c1:50:2c:49:47:5c:35:6a:49:f6:d4:47:58:3c:
                    da:51:6f:9c:c5:2e:0a:b8:07:e6:b7:af:8c:a5:72:
                    64:21:47:8b:98:82:0b:9e:c0:c9:46:95:fe:0f:d6:
                    bc:08:8f:fb:d7:97:6f:d9:14:32:2a:08:de:7b:61:
                    21:1a:2e:c7:b3:f8:71:21:ee:cf:95:0e:98:79:19:
                    79:9c:eb:df:36:61:7f:cb:ac:02:6f:16:ff:9d:de:
                    d0:e6:43:30:9f:75:b9:72:07:aa:45:af:79:a8:fd:
                    65:37:84:98:d8:28:8b:07:82:b3:ae:23:61:be:7a:
                    9b:c8:35:3a:e0:41:6d:c3:9e:67:a8:33:e4:42:28:
                    37:82:6f:15:d5:fb:ac:b6:f1:fe:7a:e5:c9:db:45:
                    d3:17:8d:66:79:62:f1:d1:55:e2:0f:ff:eb:0d:e4:
                    ac:9d:86:36:21:c1:12:2c:b9:49:2a:3f:46:7a:56:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:A4:48:7B:1E:4C:02:FB:38:ED:86:22:58:E8:84:E8:D2:4B:FC:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22
                IPv6:
                  2804:31a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265029

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:36:ad:31:43:6e:fb:9d:c9:92:f8:49:b9:12:44:59:ec:
         84:f5:f9:27:cf:37:98:3a:32:81:8f:b7:09:fe:43:8c:3b:4d:
         a6:ee:98:99:ff:5a:d3:83:aa:a1:b7:b5:37:e2:86:51:12:e0:
         2e:05:99:71:0f:80:d7:2e:bb:b6:ba:d2:93:24:03:88:07:91:
         e9:59:d0:5e:32:64:bd:be:12:13:52:7c:47:23:a7:f0:65:64:
         67:07:0f:e5:9b:10:35:ce:b7:34:a3:cc:03:60:1b:cf:e9:7a:
         c6:68:a4:84:2f:15:0e:7a:06:4b:46:95:a3:a6:64:fa:c7:8c:
         78:d5:d7:7f:56:11:e9:90:55:81:d4:f0:a3:10:c2:ec:bd:90:
         d7:3d:1d:30:14:ab:bd:b7:18:11:83:ce:7b:7c:57:76:c1:a3:
         c2:fb:28:b6:a7:25:9d:85:35:cf:d9:aa:7a:78:d8:b7:f8:af:
         88:bd:48:c5:35:20:da:8d:6d:40:ce:44:76:9e:77:40:0b:94:
         90:7b:b7:5a:82:23:49:dc:11:9b:03:c5:f9:f9:e6:90:8d:0b:
         f4:c5:ed:da:3c:3e:83:12:ff:00:28:9b:db:17:6d:c1:4d:35:
         fa:8f:54:27:2e:41:62:d7:9e:30:63:81:a3:9b:e6:f0:86:20:
         d5:02:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org