Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8559016835EC22243929486F6B477BAEFB162FDC.cer
File:                     8559016835EC22243929486F6B477BAEFB162FDC.cer (raw, json)
Hash identifier:          fbB8OmtmGEJT4VIWhcHaPZG+IdvPPhlDZuOdS+ipyQE=
Subject key identifier:   85:59:01:68:35:EC:22:24:39:29:48:6F:6B:47:7B:AE:FB:16:2F:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       02067559193DD42AC992B3A1E6CB062B5770E3E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:54:47 +0000
Certificate not after:    Wed 02 Apr 2025 18:59:47 +0000
Subordinate resources:    AS: 271240
                          IP: 179.48.48.0/22
                          IP: 2804:7868::/32

Validation:               Failed, certificate revoked on Sat 25 May 2024 00:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:06:75:59:19:3d:d4:2a:c9:92:b3:a1:e6:cb:06:2b:57:70:e3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:54:47 2024 GMT
            Not After : Apr  2 18:59:47 2025 GMT
        Subject: CN=8559016835EC22243929486F6B477BAEFB162FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:6b:8d:2c:39:db:fe:d5:d1:ec:98:99:a1:
                    fc:df:5d:15:3e:34:34:e1:03:d4:c2:f9:df:76:e7:
                    24:0c:7d:84:23:8d:87:03:3a:ce:b1:60:c0:e8:f4:
                    4a:1f:9c:89:90:0d:28:ec:ba:ab:d3:a0:ee:be:a3:
                    b8:82:f9:bf:cc:b7:37:93:f5:72:bc:90:3f:a2:0b:
                    e0:a8:17:96:08:a3:b2:ed:94:eb:4f:74:12:54:2c:
                    62:ad:c2:e3:c3:05:3b:dc:f4:34:04:1c:28:a0:58:
                    3c:cb:50:42:39:ea:bf:78:b6:e0:80:29:25:3e:c3:
                    28:e7:19:51:96:20:86:56:1a:cb:fc:ee:48:69:98:
                    ca:ca:d3:14:02:fe:27:9c:02:c4:63:6d:a8:23:2b:
                    e8:68:e7:66:53:76:c4:4b:39:48:61:52:43:e7:fa:
                    75:84:a7:5e:76:af:9f:7c:d7:f5:c0:1e:23:b0:ad:
                    34:b4:e7:5c:34:4f:e5:b4:27:0a:31:ee:74:9a:7d:
                    7f:06:ee:21:c9:f9:68:64:04:ad:e5:31:65:47:dc:
                    da:43:c9:05:94:cf:b5:08:df:54:16:1f:d6:9b:2e:
                    89:bb:a7:8e:e1:48:95:1e:2f:87:5b:57:56:dc:c2:
                    2e:0e:86:e1:1c:7b:4c:d2:67:2d:99:35:66:6f:38:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:59:01:68:35:EC:22:24:39:29:48:6F:6B:47:7B:AE:FB:16:2F:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/22
                IPv6:
                  2804:7868::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271240

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:7d:26:d5:f3:71:8b:88:b5:2a:38:63:76:b2:f5:23:8f:
         3f:94:fc:cb:6c:83:05:01:46:54:ad:e7:32:ed:c6:0c:20:24:
         2f:3d:ee:5a:68:95:c0:fa:95:54:3b:2e:c6:c6:78:ce:9b:ad:
         dc:ef:37:34:38:42:05:2a:12:2c:0b:b2:9c:e2:c8:f9:66:cb:
         1e:28:d8:c7:77:8f:b3:c3:71:f0:89:67:04:96:49:90:1a:f1:
         2d:c9:eb:65:cd:4c:fa:60:c4:4f:f5:ce:46:f2:84:5f:f7:89:
         af:7f:d2:df:5f:23:b5:c5:87:57:6e:81:3d:4d:4d:9b:36:c1:
         ab:de:0b:6b:97:c1:be:97:9b:c4:52:0f:0d:1c:aa:62:38:92:
         0d:19:0e:30:47:95:00:c9:6e:34:b3:e1:f2:6c:98:47:d7:26:
         db:45:6e:9d:76:04:67:18:35:ff:ac:73:f1:44:69:4b:0c:fa:
         0a:bc:ce:72:81:f5:6d:dd:95:5c:94:99:d1:27:91:cf:43:90:
         00:83:6a:a0:84:a3:d1:db:44:47:36:1d:c1:bd:e0:b5:4b:af:
         3e:6d:92:2d:d9:2f:52:71:7a:5e:b5:3b:fd:dd:ad:b0:fc:54:
         39:86:1c:97:c5:60:d1:0c:a3:6c:f6:3f:c3:ad:57:cc:c8:e6:
         16:f4:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org