Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B59DF12CF0956AA547E3E84787034B037ED4F0EB.cer
File:                     B59DF12CF0956AA547E3E84787034B037ED4F0EB.cer (raw, json)
Hash identifier:          MQX4r4LvGm77I+1irm4lAlEigtftI1VlJA/6CmqOuRA=
Subject key identifier:   B5:9D:F1:2C:F0:95:6A:A5:47:E3:E8:47:87:03:4B:03:7E:D4:F0:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2165118774571E455FFC7CC0E02EC7FFE77C6568
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B59DF12CF0956AA547E3E84787034B037ED4F0EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 19:07:43 +0000
Certificate not after:    Thu 24 Apr 2025 19:12:43 +0000
Subordinate resources:    AS: 263634
                          IP: 170.81.48.0/22
                          IP: 179.125.112.0/21
                          IP: 2804:1068::/32

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:11:87:74:57:1e:45:5f:fc:7c:c0:e0:2e:c7:ff:e7:7c:65:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 19:07:43 2024 GMT
            Not After : Apr 24 19:12:43 2025 GMT
        Subject: CN=B59DF12CF0956AA547E3E84787034B037ED4F0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:83:4e:13:30:26:94:a2:fb:88:20:5c:d1:
                    5a:98:5e:28:d3:ab:6b:9f:8c:17:f6:01:60:34:e9:
                    8d:57:77:66:d8:6a:ec:70:58:1a:7d:2e:26:e0:4f:
                    bd:85:3e:bc:ec:d1:b6:47:bf:ac:71:db:e9:62:22:
                    14:ac:7c:d7:df:ab:ea:7c:ab:bd:33:72:45:d2:54:
                    63:e8:93:06:99:4e:de:c3:75:d3:e9:85:b5:c7:0a:
                    65:c4:99:c1:55:59:d4:ac:79:9c:21:3f:86:a0:94:
                    c5:1a:69:b2:0a:d1:d1:80:b0:ff:25:c6:db:e6:8a:
                    a0:cf:a0:e6:d2:bc:f6:db:45:0c:7d:8a:44:52:82:
                    03:1b:b5:3c:e6:60:a6:1c:41:12:22:f1:de:cf:b7:
                    19:2e:9c:da:e0:27:a1:d1:48:a1:8d:34:72:17:50:
                    cc:ce:51:ec:7d:ea:ca:3e:dd:51:b9:28:aa:30:b7:
                    ce:b6:20:72:7a:18:ba:cc:21:d1:ea:a0:a6:53:b4:
                    f3:d5:e3:9e:30:8d:83:b6:65:d5:06:13:11:ea:f1:
                    15:a6:49:4a:92:ae:b4:95:ca:bd:53:f1:19:1d:fb:
                    34:b9:0a:f9:d0:77:46:e8:a3:db:d5:d3:44:31:b6:
                    d4:87:e5:ba:b7:d8:c4:c5:e1:c0:b9:c8:07:1e:32:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:9D:F1:2C:F0:95:6A:A5:47:E3:E8:47:87:03:4B:03:7E:D4:F0:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B59DF12CF0956AA547E3E84787034B037ED4F0EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22
                  179.125.112.0/21
                IPv6:
                  2804:1068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263634

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:3e:4e:10:c7:00:b3:5e:e6:7e:6a:bf:47:79:63:bb:4e:
         19:5e:2e:e0:c5:e4:f4:b8:fc:f4:10:63:66:66:a3:34:b8:7b:
         cb:d0:72:95:61:82:d5:cb:7c:f6:2c:f2:fa:87:41:bb:dc:bc:
         12:08:4f:22:c5:53:fc:b3:39:76:b1:e9:b2:cd:53:76:4e:53:
         e1:62:f8:0b:33:bb:49:92:0a:b5:e9:3b:0f:99:13:2b:73:2a:
         bb:d3:c9:0f:85:a4:70:da:1d:ca:d0:03:e6:b2:27:47:aa:20:
         65:39:f3:a3:80:4b:37:0e:45:06:4f:e4:96:81:53:f3:73:42:
         8b:78:50:56:21:28:1a:d2:f4:e1:50:17:14:57:24:bd:e8:c3:
         e5:0b:2d:47:f3:55:37:5c:78:06:40:5b:7e:32:62:17:d2:ac:
         3f:bc:ac:e2:db:f0:52:c2:ba:da:ae:59:13:5f:94:e9:5e:1c:
         14:68:3f:ca:46:d8:36:af:8c:50:b2:e4:82:b6:37:8d:ce:ba:
         9b:bc:eb:6d:1b:d7:13:88:67:71:3b:79:26:59:81:cf:36:62:
         a8:03:5e:04:b5:1d:7a:d4:40:4b:6a:d1:56:8b:98:4d:8a:33:
         c5:cd:c5:7f:9e:65:de:d2:12:61:18:a8:c0:54:9d:2f:5d:65:
         97:08:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 07:05:05 2024 by rpki-client on console-fra.rpki-client.org