Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
File:                     C7DC1B24AD54C5A941093FBA50F385A50A175975.cer (raw, json)
Hash identifier:          5tRu146UlfMX6+EOB/fla+JpoLPjg/xLTt0Zu/Z9XCA=
Subject key identifier:   C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E3A94024EF1E69D705B20370E0B655EADD35F36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:08:28 +0000
Certificate not after:    Thu 03 Apr 2025 22:13:28 +0000
Subordinate resources:    AS: 264208
                          IP: 138.97.224.0/22
                          IP: 2804:2434::/32

Validation:               Failed, certificate revoked on Fri 31 May 2024 11:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:94:02:4e:f1:e6:9d:70:5b:20:37:0e:0b:65:5e:ad:d3:5f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:08:28 2024 GMT
            Not After : Apr  3 22:13:28 2025 GMT
        Subject: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:0d:c8:ff:cf:80:21:2e:28:89:0d:5b:7f:
                    bd:10:4e:30:45:25:1b:ed:15:f2:11:ba:1d:77:35:
                    49:b0:47:00:6c:03:20:f8:1a:eb:61:11:5c:51:26:
                    3e:64:98:2a:25:54:cf:16:52:60:46:97:79:34:6c:
                    66:6f:b5:cc:1e:a9:83:98:b3:9e:06:a6:2f:93:0b:
                    af:ef:d0:44:b1:13:62:e0:15:07:ed:ed:0b:39:4e:
                    74:5f:ab:6e:8f:37:71:9b:6a:ad:a4:3b:71:c3:a7:
                    ed:5c:f1:1a:f0:f7:d7:69:64:57:4d:a5:31:fd:43:
                    40:59:79:7e:5f:9a:33:8c:2c:b3:9c:e7:3f:0d:35:
                    d9:14:c3:28:57:81:8a:d4:1d:5a:c7:69:92:b2:0e:
                    84:5e:ce:13:4c:03:4d:90:5f:d7:09:8f:16:ec:54:
                    68:01:37:42:f8:d1:6f:68:02:72:ae:28:e4:9f:20:
                    ed:2b:0d:7a:d3:a0:3d:30:92:bc:78:84:a1:33:54:
                    d5:7d:4f:6e:93:43:bb:88:8b:7d:7f:60:fd:a0:58:
                    08:28:d0:33:06:0c:cc:a1:2f:cc:09:1f:cf:a2:42:
                    3e:97:fa:2b:a6:26:45:aa:b2:56:75:f3:5e:37:cc:
                    7f:f8:ce:57:2b:9b:7a:ed:7b:55:fb:78:5f:fd:4f:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.224.0/22
                IPv6:
                  2804:2434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264208

    Signature Algorithm: sha256WithRSAEncryption
         90:98:80:c3:0a:78:9e:29:ce:9a:f6:32:29:e8:8c:d2:cb:4b:
         87:00:78:1a:4a:4e:11:4b:86:72:14:ed:e0:d7:de:0d:59:aa:
         e5:62:82:a4:ed:82:61:a2:70:29:f5:35:b1:20:1b:46:2d:9a:
         5e:db:61:d1:be:a2:e2:ae:f3:05:bd:99:58:eb:f2:92:29:c7:
         d8:48:b6:5b:93:ec:75:e4:47:21:a0:6d:16:da:9c:ec:88:f0:
         fa:10:2e:39:c0:f2:39:97:48:9a:1e:48:62:ee:ce:6c:b9:6e:
         bd:02:28:92:e7:66:50:c3:b2:eb:01:a4:5c:7e:89:a4:b3:a5:
         cf:05:e3:e8:39:fd:1a:ec:65:79:6c:fb:8d:c5:7e:d9:a1:28:
         10:7c:8c:be:da:fa:8a:f9:78:19:c1:e8:4c:3a:6f:11:06:13:
         70:b0:94:f3:a0:a2:d8:47:1e:02:4f:41:08:28:0b:4d:25:9a:
         f5:f7:e5:ce:87:6a:c2:c7:7f:35:b8:71:d8:ad:74:f3:73:58:
         a3:ef:ce:8f:ef:11:a5:3f:74:9f:ab:98:3c:46:fa:0c:90:59:
         31:32:a4:fe:d2:66:1a:81:b5:58:4a:e0:4c:50:af:00:77:e4:
         f6:79:07:b6:12:8b:5a:9a:c3:fc:2c:d1:04:5d:2c:2a:17:6d:
         c9:b6:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org