Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer
File:                     728041EE59CE20A182864537B9A0E2502263D7BD.cer (raw, json)
Hash identifier:          8iMCTo7RjrqBK+qyENUVPO7HxwGGzThUoU8x9Oftpjw=
Subject key identifier:   72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       702065E4E263A2FE24F2AF413A7B9A3BE131E82B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:23:12 +0000
Certificate not after:    Fri 04 Apr 2025 02:28:12 +0000
Subordinate resources:    AS: 270567
                          IP: 201.216.80.0/22
                          IP: 2804:6df8::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 05:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:65:e4:e2:63:a2:fe:24:f2:af:41:3a:7b:9a:3b:e1:31:e8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:23:12 2024 GMT
            Not After : Apr  4 02:28:12 2025 GMT
        Subject: CN=728041EE59CE20A182864537B9A0E2502263D7BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:ff:13:7f:c3:c7:42:33:d7:f8:d4:1e:c3:
                    82:34:a2:94:10:d0:07:a5:b5:61:1f:1f:36:b6:97:
                    25:e1:67:40:50:f7:64:b3:29:d8:f3:55:f1:f0:fa:
                    37:31:fd:65:8f:b9:e4:90:cb:ff:a1:f1:c9:42:5b:
                    ab:f8:ec:c3:76:cf:d9:04:46:d5:e0:1d:1a:f9:79:
                    a6:03:63:13:bd:e5:2a:dd:09:48:36:83:7c:2a:83:
                    29:47:ab:f7:bd:63:45:51:05:90:72:27:a1:3e:a2:
                    09:24:26:69:cf:29:d3:8d:a2:ac:fe:f2:50:ab:98:
                    e3:c6:ee:05:28:13:22:68:88:15:6a:f8:22:0e:01:
                    c4:65:28:f4:ae:3d:ba:4b:2b:43:a4:05:f8:c9:2d:
                    de:0d:19:48:64:07:6d:a8:f8:97:83:c1:77:9e:85:
                    d7:89:80:22:72:3b:f2:43:ad:6b:3c:6c:91:5d:9f:
                    b2:e7:bf:8b:67:6d:75:77:11:06:b9:14:99:3e:0f:
                    fb:0c:0f:d5:49:53:45:fe:62:a3:c6:d9:f8:70:3a:
                    72:4b:90:c9:95:c0:00:b0:38:14:32:7e:48:0e:02:
                    4b:e9:ca:ed:17:1e:9d:2a:9c:e3:fd:36:e6:e7:98:
                    70:4d:2e:64:7a:fb:00:97:9b:c2:04:08:1f:c7:01:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.80.0/22
                IPv6:
                  2804:6df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270567

    Signature Algorithm: sha256WithRSAEncryption
         bf:db:ae:01:6f:4f:6d:90:63:38:b3:2a:15:62:4b:96:e5:52:
         4b:f1:fc:aa:04:df:70:65:6d:81:d0:d7:31:fa:77:65:38:2b:
         46:61:27:21:14:be:05:ea:a9:0b:be:ca:02:bd:00:3f:ce:ae:
         43:bc:24:e2:65:05:a5:93:65:d1:9b:71:e9:d2:8b:63:9f:ef:
         9d:1b:91:1b:52:f7:fa:df:9b:0c:d3:98:c9:a6:3f:93:4d:ed:
         eb:72:a8:e1:cb:8b:aa:49:c5:02:b7:14:dc:69:4f:96:5f:5d:
         09:af:21:5a:db:84:a8:7a:b7:08:14:09:bf:ca:05:2d:e8:64:
         c1:e9:4e:38:57:05:9a:5e:08:60:7c:a7:48:c8:ef:70:33:83:
         b0:44:77:62:2a:b0:73:7e:63:85:80:38:c6:3a:b3:d9:78:80:
         af:f2:11:81:43:45:bf:a5:5c:ea:ad:46:12:17:fb:e1:6a:d6:
         6d:49:30:ca:62:8f:11:5f:9a:ed:3b:c5:66:84:e1:f2:34:21:
         9e:31:04:6c:9e:c9:75:74:57:5d:3a:37:a8:99:05:22:e5:ee:
         8f:a5:98:2f:94:d8:e4:e7:35:1d:9e:3b:d3:d5:43:8a:56:9c:
         b8:3a:c3:69:3d:09:d8:2a:d9:0a:25:d9:3c:e5:11:b1:bd:11:
         9a:15:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org