Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70F259FD82674905836BEB84C0D16834B21998C0.cer
File:                     70F259FD82674905836BEB84C0D16834B21998C0.cer (raw, json)
Hash identifier:          e8M3OtMZA9DU04WrTdpmj1spdKuSTBU1dRM4freYvs8=
Subject key identifier:   70:F2:59:FD:82:67:49:05:83:6B:EB:84:C0:D1:68:34:B2:19:98:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5094D9EBE09C3EB55057D11A98F93A670E3EB350
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:54:13 +0000
Certificate not after:    Thu 03 Apr 2025 08:59:13 +0000
Subordinate resources:    AS: 266481
                          IP: 170.83.88.0/22
                          IP: 2804:387c::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 17:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:94:d9:eb:e0:9c:3e:b5:50:57:d1:1a:98:f9:3a:67:0e:3e:b3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:54:13 2024 GMT
            Not After : Apr  3 08:59:13 2025 GMT
        Subject: CN=70F259FD82674905836BEB84C0D16834B21998C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:0a:b6:bf:9f:e4:a6:6d:8f:13:28:80:67:
                    82:ac:3f:9c:e4:73:b5:49:ba:8e:e5:68:38:56:40:
                    be:49:ee:0d:aa:ed:ce:47:3b:05:85:fa:41:ea:06:
                    b4:d7:8f:be:0c:5c:b4:da:d7:70:d0:7e:6b:de:0b:
                    5a:ca:1d:07:70:16:12:21:04:ca:d9:03:34:c2:95:
                    38:4d:aa:6f:8f:14:f0:16:4a:5b:3c:82:44:71:67:
                    c1:6f:5a:e6:75:7a:da:6d:1e:21:ff:6b:6a:36:16:
                    8b:3d:db:4b:a5:65:4d:36:8b:9a:b5:19:88:de:f4:
                    1f:77:bb:e8:ec:89:fa:aa:bb:2b:61:4c:8c:6e:e1:
                    5e:52:46:14:ca:9e:06:d9:86:d6:21:36:05:11:ce:
                    09:9c:e9:63:c5:3b:93:45:09:46:92:2e:a2:fa:94:
                    52:fb:a3:17:a7:8e:bd:f2:7a:53:53:88:62:df:c0:
                    2e:64:2e:64:6f:a3:ad:ca:20:85:1f:45:70:cb:a9:
                    52:b2:f5:cd:93:15:5b:9f:e7:75:ad:30:56:16:5c:
                    ac:45:22:a1:54:da:c3:89:6f:54:2a:64:c4:23:47:
                    32:45:23:0a:21:f0:43:63:7a:e0:40:de:51:89:70:
                    21:e4:49:be:09:20:24:01:dc:1b:40:3a:d6:3a:b1:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:F2:59:FD:82:67:49:05:83:6B:EB:84:C0:D1:68:34:B2:19:98:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.88.0/22
                IPv6:
                  2804:387c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266481

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:c6:d7:c1:3a:71:24:28:a3:87:42:97:39:0c:af:74:8d:
         f1:7b:06:9c:b5:38:4f:27:96:5c:ea:6d:e9:cf:7d:8f:5b:fd:
         d6:7a:25:79:ab:0e:0e:be:1a:d1:d0:e9:c6:72:a7:04:a8:30:
         95:af:9a:50:0a:1b:84:72:66:08:b2:80:31:47:09:64:36:d3:
         30:1b:9b:89:9d:d6:fb:ee:8c:2c:b5:48:60:27:7f:59:05:76:
         dd:35:a6:00:b5:94:a8:de:b3:6b:1e:e2:76:84:7a:d5:95:ea:
         c3:dc:fa:68:90:34:6b:e3:a3:0b:7f:eb:17:33:ca:f3:36:b0:
         f7:fa:63:a5:2e:18:d8:ec:00:c5:e5:23:0d:14:09:0a:b1:2b:
         ae:94:03:b6:20:c5:03:65:a5:3e:ed:4d:04:3e:64:81:6d:7a:
         4f:de:9d:83:8e:44:93:75:64:14:db:ea:33:45:90:13:ff:24:
         49:1c:e0:cc:cb:69:5e:ac:b6:55:d6:1a:9f:99:d4:df:24:23:
         79:b4:e9:05:7e:ab:42:83:ff:65:96:42:c0:66:fb:4d:13:81:
         21:66:c7:62:03:9d:05:ba:a4:1d:37:ec:16:ae:66:02:7b:3d:
         7e:23:48:bc:bd:f0:1c:75:c3:5f:31:e6:9d:04:be:73:7d:1b:
         55:a5:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 19:24:40 2024 by rpki-client on console-fra.rpki-client.org