Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer
File:                     72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer (raw, json)
Hash identifier:          pDTKVsq8sapQ2gSE9s905kkKh6hirUPRH3O9LJNvjD4=
Subject key identifier:   72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       163015C9688319E82B40A28787420B205212E4F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:15:21 +0000
Certificate not after:    Thu 03 Apr 2025 09:20:21 +0000
Subordinate resources:    AS: 265038
                          IP: 170.150.200.0/22
                          IP: 2804:31cc::/32

Validation:               Failed, certificate revoked on Sat 25 May 2024 18:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:30:15:c9:68:83:19:e8:2b:40:a2:87:87:42:0b:20:52:12:e4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:15:21 2024 GMT
            Not After : Apr  3 09:20:21 2025 GMT
        Subject: CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:0a:e4:25:ff:e6:51:9b:49:28:e4:1b:bb:
                    dc:34:53:f2:b5:96:86:10:17:83:7a:92:b6:83:57:
                    c7:61:96:74:d3:ea:1b:e9:4a:b1:cc:52:c8:e5:c3:
                    4f:7e:ed:ad:10:bb:2f:bc:cb:bb:be:54:77:9d:0f:
                    c5:83:86:3e:5b:be:79:5b:d0:15:c5:62:c9:0a:ec:
                    84:0c:fd:7e:23:51:34:f3:0e:2c:60:80:1d:26:3a:
                    28:4a:80:5d:88:d2:42:c5:67:c1:bc:9e:7d:6f:15:
                    a7:b6:fd:ea:92:eb:2f:3b:03:fc:57:8a:ee:d1:74:
                    26:1a:3e:c7:29:db:43:26:ac:05:5c:f3:74:77:01:
                    28:59:9e:ac:eb:05:a7:87:45:13:ff:5b:50:e2:6e:
                    9d:f4:42:4f:bb:8f:f5:bc:f7:27:e1:99:79:eb:98:
                    81:f2:09:b2:4c:dc:78:e7:b9:96:69:3d:0f:08:bf:
                    af:da:bf:d8:c9:0b:91:63:87:cc:56:da:45:28:de:
                    6d:ad:98:b3:1a:e8:35:92:f9:a8:b6:d3:0b:69:cf:
                    f5:d9:c7:2d:98:ac:f0:01:25:2e:fe:28:b3:44:7c:
                    08:aa:9c:a1:08:ad:10:b6:18:76:f0:5c:80:30:d7:
                    93:28:bb:c3:0d:34:34:c4:4f:ae:ab:34:9e:24:5b:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.200.0/22
                IPv6:
                  2804:31cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265038

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:d4:60:45:11:a1:57:88:ba:1f:ba:61:6e:78:dc:45:f0:
         26:fc:fc:be:f0:fb:55:53:5a:a9:ab:3b:27:2a:d2:3c:b0:34:
         52:97:a4:3c:26:f3:a5:cb:27:87:7c:f1:28:d0:cd:c8:a7:9c:
         df:da:93:c9:b4:e9:fe:f7:37:5c:b5:e7:bd:0e:df:26:2c:8e:
         ae:83:12:fa:00:11:a1:12:52:4b:82:9e:78:ec:0b:5b:2e:ce:
         96:5a:9b:0c:26:33:00:5f:95:c5:3c:2f:a0:1c:54:db:9f:42:
         cd:85:1b:5d:58:1c:e6:92:fd:57:15:0c:c2:74:f1:8a:af:6e:
         1b:4a:c1:a2:3c:a5:f2:d0:da:18:f3:37:fc:5a:c2:c8:77:69:
         57:8d:15:09:bb:cd:a3:08:11:92:76:4f:c8:2a:1b:e0:fb:dc:
         fd:2b:d6:dc:34:39:15:2b:a9:0a:cf:ca:6b:2c:c0:0d:52:2c:
         b1:27:02:9c:96:a0:ed:52:06:e3:8c:65:a2:21:64:95:8f:48:
         9a:2c:79:6c:ac:1e:de:b8:0c:71:1b:ce:63:6b:57:26:48:62:
         68:95:be:96:15:60:3f:8d:9c:71:f2:e6:c7:68:80:e8:56:13:
         4c:1d:3d:59:b4:0b:31:48:59:5a:cf:5f:21:fc:54:c5:db:86:
         0a:26:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org