Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.cer
File:                     75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.cer (raw, json)
Hash identifier:          zAjNkpVnYyTqzQEqo3VIGT8eVndZCQ5Elx9372ZQA90=
Subject key identifier:   75:AF:94:AA:26:13:C4:5B:4C:FE:95:17:F3:0C:9B:B4:FC:79:CB:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       085474C1DAF46AE5B4CA2FAF69D28C380CBB3737
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:43:25 +0000
Certificate not after:    Thu 03 Apr 2025 07:48:25 +0000
Subordinate resources:    AS: 267411
                          IP: 45.235.56.0/22
                          IP: 2804:4d14::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 10:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:54:74:c1:da:f4:6a:e5:b4:ca:2f:af:69:d2:8c:38:0c:bb:37:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:43:25 2024 GMT
            Not After : Apr  3 07:48:25 2025 GMT
        Subject: CN=75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0c:cc:9a:b9:48:8e:f4:45:2e:53:4b:20:c2:
                    0e:6a:eb:cb:60:56:88:b8:5d:4e:8d:c2:fd:13:d2:
                    68:01:10:d2:fa:91:9a:56:0c:87:d3:7a:41:fe:47:
                    38:f2:37:5e:a5:dd:df:e2:40:8f:47:03:32:15:92:
                    3a:94:08:ba:21:2a:85:9c:dd:47:e8:aa:40:5e:5d:
                    98:dd:63:33:df:34:1a:dd:14:67:f3:f3:a5:d2:6e:
                    cd:58:b8:8a:91:d6:79:6c:a6:ad:5d:6f:85:92:f0:
                    06:da:c3:ac:73:52:e9:af:56:1f:a7:92:09:b7:2c:
                    91:0f:e1:28:f4:26:ee:19:ee:a6:60:30:b7:c3:f5:
                    80:ce:ae:39:73:91:b4:d3:51:8a:2e:2d:53:67:da:
                    a4:45:f5:ad:8a:ac:1a:41:e4:4f:1c:bf:e3:8a:de:
                    bd:5d:df:ad:a8:9b:3b:4a:03:3e:26:4e:fb:7f:bb:
                    0d:6f:7e:3d:31:17:ec:07:a1:40:5c:b1:e3:4e:b3:
                    75:e0:8e:78:eb:f5:a3:10:95:04:e5:41:51:ef:53:
                    28:33:22:a9:6e:3b:c0:46:87:08:31:6e:77:76:9e:
                    7b:60:c3:68:c9:ae:b4:ff:22:23:ec:97:21:eb:07:
                    d0:43:78:5b:f9:4f:89:8b:58:b1:ee:23:2a:56:d2:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:AF:94:AA:26:13:C4:5B:4C:FE:95:17:F3:0C:9B:B4:FC:79:CB:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/22
                IPv6:
                  2804:4d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267411

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:2f:dc:2a:64:69:9d:0c:29:55:83:d5:15:49:4a:12:86:
         66:2c:f8:53:59:90:c3:6d:fb:1b:2f:eb:ef:f3:bb:b7:89:47:
         93:db:d6:1e:2b:17:ff:bc:79:1e:6e:23:f2:2c:5d:eb:6f:f8:
         74:c2:47:c6:4e:07:63:63:b5:a4:fa:75:36:70:94:f1:a7:26:
         77:0b:43:17:fa:ec:86:91:8f:7c:79:4a:5e:1f:cf:95:3d:d9:
         30:94:62:93:e0:ba:27:34:84:53:2c:98:78:ef:f6:fe:dc:8e:
         ef:86:00:ec:ac:d1:93:58:6f:42:61:3d:20:ef:b7:8f:83:59:
         b5:42:1d:80:08:87:6e:6c:e7:d2:15:a6:83:c4:f7:65:be:02:
         0a:24:b9:18:16:99:50:a4:4a:03:be:b4:6e:b6:3a:b7:a5:de:
         5b:87:21:5c:54:45:bd:f9:fc:b8:3d:9a:2e:6d:db:4d:36:81:
         2b:e1:87:65:cc:c8:59:ba:36:8b:be:d9:05:ad:ca:89:d1:fe:
         2f:76:90:05:a4:83:e2:8c:7c:50:52:3b:bb:fe:e5:f1:ca:ed:
         5f:42:72:c8:99:70:8e:99:2a:72:07:db:7b:a3:95:82:22:1c:
         33:ea:7d:e1:b9:a7:90:44:0b:3d:5d:10:bd:84:1e:a8:ea:4c:
         b0:fc:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org