Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B701661D0786F450AC9334C4A061B64DF27F953A.cer
File:                     B701661D0786F450AC9334C4A061B64DF27F953A.cer (raw, json)
Hash identifier:          tALAOm8nMvo0771jf5RmuMHOPwGKHfpY+/cIiwGSWL0=
Subject key identifier:   B7:01:66:1D:07:86:F4:50:AC:93:34:C4:A0:61:B6:4D:F2:7F:95:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30232F5CBE160A1B0B9AA8A696630FA6F4C28373
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/B701661D0786F450AC9334C4A061B64DF27F953A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:04:04 +0000
Certificate not after:    Thu 03 Apr 2025 12:09:04 +0000
Subordinate resources:    AS: 268798
                          IP: 45.171.140.0/22
                          IP: 2804:5ad0::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 02:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:23:2f:5c:be:16:0a:1b:0b:9a:a8:a6:96:63:0f:a6:f4:c2:83:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:04:04 2024 GMT
            Not After : Apr  3 12:09:04 2025 GMT
        Subject: CN=B701661D0786F450AC9334C4A061B64DF27F953A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:98:bb:d0:49:9e:65:b7:55:70:91:52:6a:
                    d1:3c:a6:fe:bb:05:f8:01:39:18:94:2b:a8:f0:52:
                    a1:83:ba:b9:4b:8d:e4:2b:32:4b:4c:58:2f:64:8f:
                    35:a7:8e:7b:0c:ee:66:06:c3:4b:db:a5:eb:09:b8:
                    2d:be:c4:44:5d:0d:03:8f:83:12:59:56:76:c8:18:
                    bc:c8:d1:e4:ab:24:4a:5f:a5:17:e5:7f:24:6f:ab:
                    ee:38:f6:db:ff:f2:7d:a2:8f:94:bf:8e:18:24:1e:
                    3e:d1:b0:04:6f:1d:d2:80:25:51:83:95:e4:a9:26:
                    7e:42:97:4f:11:4f:55:47:f6:64:dc:56:e9:8a:34:
                    8f:c7:9a:ef:72:18:af:85:62:3f:11:bf:23:9c:92:
                    9c:29:ec:89:aa:cc:35:ad:e3:33:23:53:1a:bc:c3:
                    97:00:2a:a7:f3:31:de:ae:58:93:e4:85:b2:ac:8d:
                    50:b4:0f:e8:2a:51:c7:af:6b:f9:77:59:5f:f6:a7:
                    20:73:d2:23:67:17:eb:f1:bf:09:9f:5a:65:62:89:
                    fb:e8:b1:5c:0d:b2:28:02:04:da:a4:6d:9f:e0:df:
                    95:0a:dd:04:3c:47:e8:a5:b8:b9:3c:44:fc:6e:8f:
                    1a:03:ff:f4:23:ee:ac:64:8f:99:4f:08:6d:53:0b:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:01:66:1D:07:86:F4:50:AC:93:34:C4:A0:61:B6:4D:F2:7F:95:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/B701661D0786F450AC9334C4A061B64DF27F953A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.140.0/22
                IPv6:
                  2804:5ad0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268798

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:e1:2f:ea:1f:12:e9:81:b9:26:26:f9:a4:88:11:85:97:
         ce:bc:04:60:d3:f5:cd:ac:64:1c:ee:6f:9e:42:4b:96:22:02:
         ef:3f:82:e0:11:ee:b9:5b:d0:b6:25:1c:2c:cb:0b:00:45:a4:
         7c:7b:12:a0:37:ab:f0:75:2a:44:eb:59:3b:b6:83:cd:e5:33:
         e6:8d:ca:b7:af:73:b7:2c:ba:65:0d:54:16:2e:11:f2:a1:26:
         d5:25:3c:43:a9:c1:3d:f4:36:3d:2a:6a:99:10:b6:1f:1b:55:
         87:d0:13:44:79:5d:0c:66:d0:d4:01:cf:e7:a1:e2:49:97:de:
         e9:2d:22:68:42:41:0a:7d:1e:e5:a1:d7:27:14:4f:cf:54:ad:
         9e:49:95:2f:57:ec:f5:e3:ea:c2:28:07:8d:49:71:f3:a5:dd:
         41:9a:a5:53:0b:e0:c8:b3:1a:01:d4:78:91:49:1a:98:7b:c6:
         83:08:95:a6:15:6b:a7:11:f8:a7:27:5b:a3:8a:4c:a9:23:7b:
         f6:36:3e:55:cc:b7:b6:8a:16:03:1e:96:62:16:02:dc:c8:67:
         cc:4c:46:ec:82:48:4b:d0:41:9a:ab:e7:6d:3c:33:4d:ff:09:
         e0:78:d4:45:b5:be:b2:a0:9e:08:02:54:07:c8:dc:a1:2d:41:
         26:17:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org