Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71D717580E4D546271A7BEA164D910E156D4E1D5.cer
File:                     71D717580E4D546271A7BEA164D910E156D4E1D5.cer (raw, json)
Hash identifier:          lk1kjtB6oXCKpCAX0jQOWaFBMtLHLaQRTISXU2yFEVY=
Subject key identifier:   71:D7:17:58:0E:4D:54:62:71:A7:BE:A1:64:D9:10:E1:56:D4:E1:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44DBA98DABFE60A2A2D726D2923AE300B09630A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/71D717580E4D546271A7BEA164D910E156D4E1D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Aug 2024 18:41:28 +0000
Certificate not after:    Wed 20 Aug 2025 18:46:28 +0000
Subordinate resources:    AS: 267042
                          IP: 45.227.40.0/22
                          IP: 2804:4744::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:db:a9:8d:ab:fe:60:a2:a2:d7:26:d2:92:3a:e3:00:b0:96:30:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 18:41:28 2024 GMT
            Not After : Aug 20 18:46:28 2025 GMT
        Subject: CN=71D717580E4D546271A7BEA164D910E156D4E1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:3b:d6:d8:9a:aa:90:67:a8:f0:7b:15:74:
                    d9:04:6b:83:7d:7f:8f:a9:68:5b:0b:23:2f:d3:44:
                    23:61:b9:64:5e:05:37:b2:1b:7e:61:0c:cb:2d:60:
                    7e:a7:9f:f7:68:22:f4:be:7e:23:a1:32:d5:8c:c9:
                    1b:db:9c:b5:86:41:10:bd:70:73:97:7c:d5:6e:77:
                    e5:5b:b7:90:35:07:5f:18:da:d8:41:b5:aa:b2:a4:
                    86:10:0f:cf:01:5c:6e:52:58:57:30:0f:21:36:8d:
                    b0:2e:fc:de:9a:f2:43:23:69:c8:88:a5:9a:b1:fe:
                    2b:82:c9:6d:2f:be:02:81:26:08:0a:47:f8:4c:57:
                    0e:a5:87:5c:72:9d:a5:a2:98:4e:46:55:83:01:d9:
                    ab:28:69:26:a7:4e:99:8a:9e:69:a8:f6:74:1c:cc:
                    15:5b:81:6f:64:18:48:69:ce:39:68:de:e5:e3:5f:
                    ca:d8:cf:9f:09:62:81:1d:12:fe:21:e5:1d:fe:38:
                    ce:b4:25:0e:20:c8:06:2e:12:00:6b:7d:39:c5:d0:
                    f8:4c:31:6c:cd:ea:95:92:5a:84:32:8b:2d:15:79:
                    47:27:44:10:78:42:32:31:8d:19:63:1a:2f:50:ea:
                    0c:c0:5c:96:e4:e2:f2:08:89:e4:42:ec:ed:fa:ec:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:D7:17:58:0E:4D:54:62:71:A7:BE:A1:64:D9:10:E1:56:D4:E1:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/71D717580E4D546271A7BEA164D910E156D4E1D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.40.0/22
                IPv6:
                  2804:4744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267042

    Signature Algorithm: sha256WithRSAEncryption
         43:35:e7:44:42:b4:3e:ae:bf:8f:f0:21:64:74:1b:23:65:70:
         e5:49:6b:06:1c:f0:c6:dd:76:09:36:29:ba:33:2a:20:56:3e:
         07:ce:20:3a:dc:43:a9:6d:57:d0:cb:4a:64:c2:97:f4:1c:a8:
         85:5d:39:dd:fd:2a:11:13:db:0f:75:0b:b9:e9:98:59:4a:69:
         50:81:bf:e2:a2:99:bf:5e:26:c1:96:4c:0d:a8:c2:fc:d2:9c:
         bb:76:27:bd:9d:b4:48:8c:00:96:6d:bb:6b:bd:2b:5b:cf:12:
         7e:36:0e:4f:97:b5:84:eb:91:7a:ad:95:f7:49:ae:74:fb:bf:
         c7:73:7b:7c:0a:f5:eb:84:25:af:87:8f:77:6d:80:27:be:05:
         78:60:6a:86:92:b4:5f:bd:2b:b9:86:bb:2a:c4:8f:70:c3:48:
         e6:c0:90:21:3f:75:77:b7:2d:3d:f0:0b:e3:66:04:fd:9a:54:
         a9:8f:95:e5:92:39:b8:21:58:ef:ba:60:89:2c:e0:ce:51:30:
         b5:2e:52:0c:40:32:63:7a:77:10:59:a1:15:34:bd:60:a7:2a:
         1f:9a:45:db:8c:ea:af:44:d6:26:0e:76:f3:22:2d:0a:dd:d6:
         da:b4:10:a5:8a:69:34:2f:4f:c1:06:64:94:e0:94:8d:e0:75:
         2d:c4:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 16:57:54 2024 by rpki-client on console-ams.rpki-client.org