Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
File:                     780522B472F71205BBA4B3297526858181869281.cer (raw, json)
Hash identifier:          QjKQZKoPGMPkVYhNYmD+YcSvu33X1qnzZ6ifjFY4lkk=
Subject key identifier:   78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F71768BABB951E13C324E4C757EF1A7545D6DAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:41:14 +0000
Certificate not after:    Wed 02 Apr 2025 21:46:14 +0000
Subordinate resources:    AS: 61678
                          IP: 131.108.164.0/22
                          IP: 138.122.140.0/22
                          IP: 168.90.0.0/22
                          IP: 170.246.236.0/22
                          IP: 181.191.200.0/22
                          IP: 2804:1cd4::/32

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 23:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:71:76:8b:ab:b9:51:e1:3c:32:4e:4c:75:7e:f1:a7:54:5d:6d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:41:14 2024 GMT
            Not After : Apr  2 21:46:14 2025 GMT
        Subject: CN=780522B472F71205BBA4B3297526858181869281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fe:12:10:e4:4d:42:09:15:3d:bf:9d:b6:bf:
                    7e:1d:36:9c:fa:f9:22:e5:e0:af:2c:09:6f:24:8f:
                    b8:5c:f2:b9:e5:6e:01:66:50:dd:ef:8d:2c:49:90:
                    79:61:2c:af:86:b1:63:ca:d8:06:6f:03:0c:bf:85:
                    05:53:d2:f0:64:01:7d:0f:be:98:83:76:a1:da:64:
                    3f:17:68:3f:57:5f:a9:6b:00:60:10:91:05:69:3f:
                    43:ac:a9:12:33:07:cc:b8:b1:8c:b1:9b:35:99:f7:
                    6b:5a:8f:0a:d4:8c:8e:52:43:e2:72:ee:33:2c:b9:
                    d6:e9:08:1d:c9:61:3e:ba:0a:df:c6:98:06:3b:08:
                    16:5a:25:99:19:13:0f:2c:da:60:a8:40:0c:6c:88:
                    a7:23:d2:e4:1e:59:dd:49:21:52:74:de:bf:8d:14:
                    82:48:ef:12:bc:ef:bf:14:fe:66:c3:72:c9:49:3f:
                    b3:e1:30:2f:63:31:08:01:e5:db:58:d6:18:9a:8a:
                    30:e2:eb:2c:0d:26:af:fe:57:91:4e:80:88:cb:9a:
                    49:4e:1e:33:c5:96:5b:9a:53:74:5a:4a:12:07:c5:
                    4a:1a:33:92:f8:d0:25:5b:3d:1a:90:94:10:29:d2:
                    de:92:12:77:09:ed:4d:2c:22:22:fe:d8:a9:79:ed:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.164.0/22
                  138.122.140.0/22
                  168.90.0.0/22
                  170.246.236.0/22
                  181.191.200.0/22
                IPv6:
                  2804:1cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61678

    Signature Algorithm: sha256WithRSAEncryption
         10:95:cc:a4:9e:3e:b5:78:60:ee:1f:2a:ec:09:83:f0:6f:db:
         70:ca:0f:05:5b:5a:9d:b6:a7:b9:6d:78:da:b5:82:02:33:02:
         a9:ca:a1:1b:f7:54:58:f2:fa:eb:1e:bc:9e:29:d2:03:9a:39:
         7c:80:79:35:61:88:c9:d6:26:66:81:5a:f4:46:89:bc:bb:c0:
         89:d9:a8:a5:f6:e4:bc:a4:f1:35:25:8e:e2:cc:66:a7:2b:0b:
         89:fe:69:da:bf:63:7c:31:db:5a:54:bf:5a:63:fe:15:8c:05:
         52:7e:b8:cc:31:0e:c3:32:32:f1:17:51:f9:e1:ee:52:f5:00:
         c0:25:b4:95:56:a2:0b:06:a7:37:96:96:d3:96:2c:02:45:46:
         30:09:72:7f:ca:6a:43:d2:1e:f0:43:74:4c:12:d3:09:f1:c8:
         5f:fa:99:1e:4c:2c:77:f1:95:ae:81:28:2e:7b:13:b5:58:2d:
         92:8b:09:1f:c9:f3:3f:eb:c7:59:a1:61:7e:ce:f5:d0:17:9b:
         35:96:82:a7:b8:13:9b:48:0d:4f:d6:9b:76:2f:92:95:2f:2c:
         06:a9:3b:c3:c4:b6:f2:78:ee:ab:c3:c1:11:ce:f9:f0:df:43:
         1c:a4:5c:9f:74:1e:8c:fd:62:0b:2a:cc:08:2b:c5:52:39:4b:
         ec:39:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org