Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer
File:                     788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer (raw, json)
Hash identifier:          gmGzhEkRGUK3Zplh4xu4OimAYh+zt5ldx9k6y0fCeHg=
Subject key identifier:   78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65FBC945E7A8E5DE991346BAA68A1C3463549107
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:23:47 +0000
Certificate not after:    Wed 02 Apr 2025 20:28:47 +0000
Subordinate resources:    AS: 270348
                          IP: 190.83.28.0/22
                          IP: 2801:80:38b0::/48

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fb:c9:45:e7:a8:e5:de:99:13:46:ba:a6:8a:1c:34:63:54:91:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:23:47 2024 GMT
            Not After : Apr  2 20:28:47 2025 GMT
        Subject: CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:b6:18:dd:61:23:b0:68:7e:90:17:47:cf:
                    67:18:5b:d4:9a:e7:90:14:ae:55:1c:1d:2f:9e:a6:
                    05:37:81:72:2b:db:b3:86:0a:f1:6f:ae:23:2f:b3:
                    81:26:a3:70:75:02:53:b0:2f:6e:be:18:b8:e1:db:
                    59:18:e6:36:60:c7:d0:e7:4d:80:c2:23:2e:03:d8:
                    9b:a6:59:52:f1:db:89:e5:45:c7:e4:d4:d5:42:71:
                    07:11:f2:ba:07:16:79:eb:20:49:fc:53:a0:b1:e7:
                    2d:d8:73:ef:70:3e:4a:30:c0:99:5d:67:cb:2e:bd:
                    dc:ba:4e:5d:c3:40:77:63:81:80:6f:16:3b:ed:55:
                    9b:64:b1:8d:5c:f4:61:3f:04:fe:78:b5:17:78:2e:
                    14:74:25:7b:06:f9:7e:c9:24:79:e8:5d:60:dc:af:
                    16:a9:e3:9e:fe:87:e9:9f:8d:c2:d2:ee:95:a5:be:
                    e3:ba:e6:03:de:d2:35:67:76:41:62:ac:28:63:41:
                    b9:de:4a:1c:fe:af:49:1c:d6:fc:92:86:fa:02:62:
                    01:62:34:73:30:c9:d5:05:f5:54:71:38:65:0c:22:
                    49:5c:52:a4:32:cd:20:ae:34:5f:88:c0:d8:5a:81:
                    53:6c:37:7b:b6:68:28:a3:8a:04:4a:fe:5f:17:90:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.28.0/22
                IPv6:
                  2801:80:38b0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270348

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:2f:ec:74:06:77:40:72:ac:88:f4:aa:bd:35:7d:d8:15:
         db:98:2a:87:41:02:3c:9a:cb:33:30:17:cb:88:f7:31:4b:c0:
         3b:e5:51:52:20:7e:6b:90:a9:fe:fc:93:8d:fd:bf:af:09:a7:
         cd:12:91:56:26:25:26:d3:8f:b4:48:fa:60:7b:e2:82:16:f9:
         2c:1d:9b:ac:2b:fe:13:ac:8f:c0:f8:e3:a0:c6:d9:b1:7a:4f:
         f8:33:b8:38:ce:ee:1c:e1:f9:11:ef:f2:d6:7b:2b:bf:21:91:
         e3:ef:ed:a9:5e:d3:6e:86:90:cb:cb:f8:fa:da:0c:5a:d1:e3:
         d1:a8:b3:b3:a1:78:1d:80:c4:51:ed:e5:2d:2c:ab:bc:fc:30:
         75:16:7b:a2:35:79:23:78:1b:fe:1d:df:e5:e0:d6:70:ed:8c:
         67:64:01:49:54:9e:6e:c6:fd:f5:3b:2b:70:3f:34:7c:33:10:
         07:59:01:de:f3:1f:ae:8f:29:b8:fe:a7:6a:cc:3b:42:7e:a7:
         10:a9:eb:36:4e:df:0a:bf:95:4c:04:72:ea:f6:78:fb:a5:cc:
         b9:09:b1:ec:ce:ff:75:79:db:83:4c:36:81:a6:eb:e3:b5:a5:
         f4:93:24:f6:b3:61:b7:23:9a:61:ac:4b:67:f5:ac:85:69:98:
         9b:a1:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 22:34:21 2024 by rpki-client on console-ams.rpki-client.org