Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/79B1C3495EAA8374BE4710E679520B2AF3E48EB2.cer
File:                     79B1C3495EAA8374BE4710E679520B2AF3E48EB2.cer (raw, json)
Hash identifier:          Xk3XI4aZhIgkmHxTfuygBy1LaFH8XbMEzIHNpv2GvYw=
Subject key identifier:   79:B1:C3:49:5E:AA:83:74:BE:47:10:E6:79:52:0B:2A:F3:E4:8E:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59BD9C0B14B94A9D80739582722A8A615DE5F529
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/1/79B1C3495EAA8374BE4710E679520B2AF3E48EB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:43 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:43 +0000
Subordinate resources:    AS: 270976
                          IP: 179.43.16.0/22
                          IP: 2804:745c::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 17:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bd:9c:0b:14:b9:4a:9d:80:73:95:82:72:2a:8a:61:5d:e5:f5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:43 2024 GMT
            Not After : Apr  2 18:32:43 2025 GMT
        Subject: CN=79B1C3495EAA8374BE4710E679520B2AF3E48EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:eb:2b:97:b3:a4:88:2a:92:ac:43:e1:82:
                    82:f8:00:1e:5e:b5:3e:e5:72:26:81:c1:bb:79:66:
                    81:46:7d:c2:c5:9e:6f:91:91:3a:75:05:ef:e3:40:
                    ea:a4:14:23:47:0d:d9:e2:00:68:bf:52:2d:0f:26:
                    b6:c2:ec:72:40:27:96:f1:8e:f4:52:99:4f:86:79:
                    3c:bd:3c:ce:e8:d4:4c:bc:d7:cc:a4:24:4e:d2:60:
                    be:b0:b9:89:55:6c:01:8e:08:6b:ad:fe:c7:6b:09:
                    03:7f:78:26:9e:c0:db:f1:51:e8:55:8b:51:b0:fa:
                    ac:f6:63:bc:66:18:fe:32:e1:dc:3e:23:b1:cd:ac:
                    9e:e8:72:87:71:05:1e:2a:de:5c:86:43:41:dc:44:
                    29:dc:f8:88:d3:c3:46:36:3e:f2:dc:6f:8d:26:c8:
                    5a:4b:a5:39:ea:dc:88:a5:08:02:12:fa:db:2a:f1:
                    ad:46:63:df:a0:93:38:52:7c:4b:55:b3:8f:a0:6f:
                    df:c2:b0:85:0e:ce:e3:18:86:ea:84:a5:0c:d9:96:
                    93:1b:22:89:d3:78:fd:70:f4:cc:3b:21:8f:6e:17:
                    fa:81:eb:11:d3:e4:dd:d5:fc:4f:9b:26:7d:ec:a1:
                    52:19:80:82:bb:2d:3a:33:0b:7a:ec:d3:17:3e:5b:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:B1:C3:49:5E:AA:83:74:BE:47:10:E6:79:52:0B:2A:F3:E4:8E:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/1/79B1C3495EAA8374BE4710E679520B2AF3E48EB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/22
                IPv6:
                  2804:745c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270976

    Signature Algorithm: sha256WithRSAEncryption
         ac:95:cc:01:8f:9f:e6:ad:a0:65:5b:5f:de:29:57:f1:fa:f0:
         51:eb:6f:e7:2c:78:46:1a:7b:f0:c4:03:8f:8c:78:4b:31:0f:
         ec:ad:2d:84:c7:76:2d:09:19:b0:d3:05:1a:63:11:80:93:5d:
         91:dd:d5:4e:44:bb:a4:fb:eb:4f:76:dd:3a:cb:d8:de:fb:fd:
         5c:02:44:fc:76:16:5d:76:f6:91:b8:46:a1:f0:2c:26:54:72:
         94:b1:47:aa:f8:6e:ee:e4:b0:99:79:9b:68:6e:4c:22:e6:08:
         e3:97:46:bb:ef:ae:6d:4c:f6:01:57:84:bf:8d:d8:85:97:0d:
         f7:2c:4f:2a:37:d5:d4:6c:5d:05:4e:e2:fb:7d:37:6e:84:39:
         36:ba:0b:98:26:89:d2:4a:97:f0:e2:5c:61:a1:62:40:d7:4d:
         60:e9:4b:59:de:de:93:08:2d:3c:85:d4:bf:1e:fb:c6:74:80:
         d0:74:96:a8:c7:42:32:e6:c0:75:3a:37:d8:9c:df:f4:b8:65:
         bc:20:52:ce:80:60:dc:5a:79:ba:e3:87:c4:8f:e3:95:ba:6b:
         a0:61:98:dd:06:d0:83:f0:23:0e:7b:c9:f9:92:ef:78:87:d5:
         d2:62:06:48:50:9a:c1:b6:89:a4:1c:d3:6b:66:2e:ae:4f:bb:
         4d:4b:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:50 2024 by rpki-client on console-ams.rpki-client.org