Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
File:                     870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer (raw, json)
Hash identifier:          j08SGlbDaSb3kj+oTvRBGLjhhL2Vft9NfaCdw6PyRaM=
Subject key identifier:   87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2639514655FE0393BC14AAFD5398AF35C1F76EA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 23:04:25 +0000
Certificate not after:    Thu 03 Apr 2025 23:09:25 +0000
Subordinate resources:    AS: 270266
                          IP: 200.115.104.0/22
                          IP: 2804:6960::/32

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 22:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:39:51:46:55:fe:03:93:bc:14:aa:fd:53:98:af:35:c1:f7:6e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 23:04:25 2024 GMT
            Not After : Apr  3 23:09:25 2025 GMT
        Subject: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:6e:e4:18:22:0f:b8:1a:6f:05:59:d6:3f:
                    80:24:23:b6:42:05:0c:1c:fe:3e:94:09:a0:3a:a1:
                    42:e7:e5:f4:ca:37:42:2f:ec:3b:23:3c:ba:be:57:
                    d4:6f:fd:1a:3f:4a:2a:e3:04:ca:29:ab:6a:bb:44:
                    0f:9d:e3:39:95:dd:2d:c2:73:58:1e:d8:a7:a3:d7:
                    10:2d:83:55:59:b8:c3:e3:3a:cd:8d:70:a4:d3:0c:
                    85:ec:fd:a3:ed:02:1e:20:fc:fd:f4:35:d8:2c:25:
                    75:a9:99:17:6e:af:c5:a4:ac:e0:c2:f5:9e:65:65:
                    6b:f1:a4:99:61:73:a0:a6:5d:19:5a:b9:46:e1:cd:
                    29:c7:4b:61:6d:5c:0f:a9:ff:9b:40:c4:4f:e9:83:
                    b8:10:08:cb:30:14:6e:0f:77:f7:70:a0:31:86:c6:
                    49:6b:04:55:9e:35:e6:4a:b7:57:34:85:87:5a:29:
                    ff:ca:57:16:7e:57:e7:de:3a:e3:d8:36:b2:0e:86:
                    ee:ef:01:2b:e0:f7:a5:2e:1a:ab:a3:67:5d:7e:c4:
                    a6:3e:eb:4a:5e:eb:84:fb:5e:9a:3d:6d:f5:53:18:
                    a3:89:71:d6:dc:25:34:80:d2:8d:f9:93:86:8c:50:
                    b0:90:88:ec:c9:39:93:ee:98:97:5d:07:5e:5b:5b:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/22
                IPv6:
                  2804:6960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270266

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:4d:93:1e:7a:49:9b:ee:1a:57:e1:e9:34:fd:26:17:b7:
         3c:6d:76:40:2d:a2:7a:1e:79:59:97:32:9d:d5:28:58:14:59:
         11:00:84:53:a5:18:5d:39:df:4d:a4:0e:a4:b2:5c:20:96:af:
         b5:74:02:9b:91:3e:44:1f:00:b6:c2:d6:4a:60:cc:18:b2:2e:
         38:aa:1b:e4:ea:23:0a:d2:ea:c8:92:9f:fd:1e:8e:07:f1:dc:
         9d:f3:ef:a6:73:1c:c3:78:87:b0:3c:a9:b9:62:3c:e0:de:6b:
         35:fe:e4:6e:19:34:c6:6f:62:88:0d:d8:07:a0:34:55:f3:a5:
         b7:84:a5:de:4b:70:b9:db:da:bd:3b:43:16:bd:bd:44:a6:b1:
         b9:01:8d:b0:83:dd:17:75:b2:6d:1a:5b:3d:ee:66:61:0a:00:
         c7:0a:5c:30:a1:39:f7:01:a9:b0:00:a8:17:cd:74:49:0f:22:
         8e:06:79:42:56:0f:9a:bd:e7:7e:e8:5d:7b:7d:b5:b2:1b:cc:
         7e:84:ee:35:bf:11:c3:3f:c9:ae:0a:1f:97:88:0e:7b:d8:97:
         f5:08:9a:8a:1c:2b:9f:61:a0:80:01:31:0f:88:09:ab:ab:0c:
         48:b0:7d:a6:78:db:61:e6:4b:b1:7a:91:88:32:98:bb:fb:f1:
         ac:8e:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 23:31:20 2024 by rpki-client on console-fra.rpki-client.org