Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
File:                     79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer (raw, json)
Hash identifier:          S8cQFgWDN+K/Dul0T6PEVJIK0v9xtfBoajgWeqaasQY=
Subject key identifier:   79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A25C534F2B91C59D5F787EDB6822B375487FC6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 16:56:18 +0000
Certificate not after:    Thu 15 May 2025 17:01:18 +0000
Subordinate resources:    AS: 270760
                          IP: 179.109.116.0/22
                          IP: 2804:70fc::/32

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 05:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:25:c5:34:f2:b9:1c:59:d5:f7:87:ed:b6:82:2b:37:54:87:fc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 16:56:18 2024 GMT
            Not After : May 15 17:01:18 2025 GMT
        Subject: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:64:90:22:c4:49:7a:bd:fa:05:ea:8f:43:
                    a7:fb:57:70:0b:4f:96:cf:34:e8:7a:38:84:0c:df:
                    cf:65:1f:c7:da:73:d2:9e:29:81:a1:23:64:fb:b6:
                    20:e2:02:b5:db:0f:c0:16:e0:a2:ec:40:bb:19:70:
                    fa:06:07:88:15:c1:d4:f1:98:4b:f1:3b:88:42:d0:
                    be:ee:aa:a6:df:1a:87:9d:db:ea:2f:0f:6f:86:6f:
                    1b:9a:27:21:48:0e:f3:ff:16:27:5c:33:91:e6:2b:
                    73:00:5f:9d:aa:ad:3f:26:ea:fa:a9:8d:ef:40:5a:
                    07:d1:a4:41:bc:8e:cb:21:6d:63:1f:f0:22:7a:26:
                    54:07:4b:de:25:7c:22:7f:e9:6d:38:33:8f:e0:32:
                    c0:92:89:bb:29:ed:69:86:e0:eb:ef:e6:ff:4b:2b:
                    02:1b:c0:fb:7f:ec:d1:c3:93:1f:92:a6:21:5b:61:
                    ce:74:df:07:3b:25:8c:db:dc:8a:2e:9e:9c:d3:a4:
                    8d:63:a5:52:4a:34:53:b9:1b:f3:01:59:9c:d6:96:
                    52:26:0b:f1:a8:81:95:f6:65:b4:59:09:46:5d:4a:
                    fd:2d:4b:99:d8:a8:5d:19:f4:44:fb:4d:67:fe:3d:
                    0e:80:0a:60:4e:aa:b0:b9:cb:4a:34:5f:37:6e:13:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22
                IPv6:
                  2804:70fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270760

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:63:0f:4c:1e:78:ac:cc:2d:a5:f8:78:a1:ec:b7:65:6f:
         72:03:1b:9c:d7:7e:23:09:31:f4:8a:11:ca:67:86:7a:5f:18:
         04:7b:cf:f2:07:cf:cb:d5:5b:b3:fe:e9:3e:fb:fa:20:a1:5e:
         ec:e6:77:2d:e2:d4:08:f3:af:5b:ed:8b:30:e2:18:2e:53:6d:
         8b:52:02:85:aa:e1:c5:be:b4:3d:b5:e6:2e:87:19:36:af:c0:
         bd:64:00:8b:fc:71:17:85:31:93:96:f3:02:4b:7e:14:c5:0d:
         7a:9b:4e:0e:c8:79:dc:2d:c4:b5:76:00:20:f1:c1:29:7c:01:
         88:12:0b:f0:41:ae:13:07:0d:3b:a4:bb:18:65:66:15:77:20:
         fb:fd:ce:69:12:2f:63:cd:6a:05:ff:39:72:b6:ba:36:68:39:
         50:91:7c:cd:65:1b:a9:44:4a:0f:e2:9e:be:4c:cb:35:ab:4b:
         04:6e:15:31:88:d4:9f:05:01:4b:61:e6:8e:a7:2e:d7:d0:f3:
         3d:b9:b0:2f:e9:8b:75:58:ce:01:87:9f:7b:3b:1d:bb:51:d0:
         d8:3c:82:c5:f4:1e:0e:3d:6c:b0:75:09:a4:76:c2:76:61:84:
         72:11:e7:41:bb:78:b9:e0:c9:4e:2f:21:e6:66:14:67:54:47:
         ca:86:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 06:58:36 2024 by rpki-client on console-fra.rpki-client.org