Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
File:                     747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer (raw, json)
Hash identifier:          M9nb3CbXTAQpZOc1/gBD7MuRRvDU0a3WcRBW/dY50V0=
Subject key identifier:   74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B8BE627E2655C57D3A44A966A3F1857B4354B84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:09 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:09 +0000
Subordinate resources:    AS: 264590
                          IP: 138.36.212.0/22
                          IP: 2804:2230::/32

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 21:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8b:e6:27:e2:65:5c:57:d3:a4:4a:96:6a:3f:18:57:b4:35:4b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:81:5a:2a:e9:1c:bc:89:f0:6b:85:f8:8c:
                    6f:98:9a:74:4f:40:b1:5a:c0:80:eb:30:3d:7f:26:
                    11:7c:de:e9:99:f5:ce:cc:c4:96:b1:e9:c1:e4:4c:
                    f7:b5:5e:11:cc:b4:5b:ee:89:06:7d:08:cf:a0:d5:
                    23:40:63:6e:b6:ca:c5:6b:0f:c6:e0:66:ae:06:5f:
                    58:7e:9e:13:2e:41:59:b9:88:8e:1f:0a:7e:95:f3:
                    dc:e5:09:eb:1d:23:7e:62:92:d8:83:e5:19:b6:c5:
                    fb:54:04:1a:63:ec:1c:ab:3b:1c:57:e3:4e:a4:89:
                    e6:b4:36:86:52:9a:b8:14:ec:e0:88:53:b2:0f:f5:
                    42:60:8b:7c:74:57:43:14:fd:33:e2:42:1b:82:c4:
                    e8:c8:17:22:a5:dd:ba:8a:2b:34:82:fe:7f:2c:6c:
                    0b:47:c6:4e:06:23:df:88:f8:ca:ab:05:80:7d:a2:
                    f9:13:b2:e5:b9:fc:de:9b:5e:a5:ef:87:dc:db:31:
                    e6:4d:99:68:a1:a4:08:e4:62:7e:4e:d7:58:e3:56:
                    f6:5b:91:0d:1a:6e:cd:d2:2b:3e:37:fc:77:fb:59:
                    08:18:4b:34:a9:53:1a:ad:f8:ee:d2:17:78:ba:f5:
                    0d:77:b9:66:8b:55:71:09:37:4b:69:2f:32:0a:21:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/22
                IPv6:
                  2804:2230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264590

    Signature Algorithm: sha256WithRSAEncryption
         70:b5:c7:bd:44:07:3f:26:71:02:1f:40:7b:a9:c8:92:aa:27:
         4d:4c:3b:71:0a:d3:35:24:a8:e4:2e:9f:6e:cc:9f:01:4f:25:
         96:19:09:90:16:e8:51:45:a0:7f:db:58:07:34:4a:a3:75:7a:
         d5:da:c8:54:4b:eb:d9:cd:67:4f:e7:6c:64:3a:c5:e1:3d:8c:
         af:b5:3d:fb:1c:88:ec:77:a2:6b:a6:88:58:81:30:0f:23:ff:
         a0:42:aa:24:0f:37:c4:44:6d:97:32:43:49:af:5d:ef:cd:11:
         fc:99:15:bb:9c:8a:69:74:f3:e1:fa:5e:eb:08:83:f6:41:f2:
         a0:38:70:61:75:8d:7d:0a:22:1e:30:ac:78:70:d5:86:9b:3e:
         9b:9b:f0:86:b5:9c:fa:db:89:46:d6:70:bb:7f:a2:5a:0e:4f:
         02:3f:8c:3c:24:4d:5b:0e:08:8b:d5:ca:8a:ff:24:b2:ee:53:
         a9:91:b5:7b:96:89:3e:31:3f:ef:dd:21:ca:88:d6:fd:23:80:
         0f:a6:92:82:4b:e3:d5:ed:27:72:6a:33:44:a3:12:7a:b8:ec:
         9a:71:92:6c:46:1f:85:d0:f9:e6:3d:80:05:d8:0f:0e:a5:a7:
         ad:85:d9:36:70:42:bc:6d:b4:c5:00:d3:c7:ee:3f:5a:9d:62:
         a7:78:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org