Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C873E509F6A3828672B2D64DBA5322E773160936.cer
File:                     C873E509F6A3828672B2D64DBA5322E773160936.cer (raw, json)
Hash identifier:          aT4uAh13+mZw0V2fIMe5EKtjh1ri8qAhOIE89srG13s=
Subject key identifier:   C8:73:E5:09:F6:A3:82:86:72:B2:D6:4D:BA:53:22:E7:73:16:09:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7299B0236973B594DD1008B7AE7E4709229E5FC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/1/C873E509F6A3828672B2D64DBA5322E773160936.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:56:58 +0000
Certificate not after:    Wed 02 Apr 2025 19:01:58 +0000
Subordinate resources:    AS: 52652
                          IP: 177.66.156.0/23
                          IP: 2801:80:510::/48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:b0:23:69:73:b5:94:dd:10:08:b7:ae:7e:47:09:22:9e:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:56:58 2024 GMT
            Not After : Apr  2 19:01:58 2025 GMT
        Subject: CN=C873E509F6A3828672B2D64DBA5322E773160936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:54:74:51:aa:79:ca:c4:89:9c:db:42:91:
                    6e:d2:de:01:f3:13:37:ea:50:ef:96:f6:ff:bc:ed:
                    d3:e5:3e:16:30:85:62:68:82:81:d4:ce:18:4b:bc:
                    95:7b:ba:16:1f:96:c0:c4:13:12:07:0b:0d:43:f2:
                    6a:e9:07:34:0e:e8:c2:4a:30:91:3e:f1:3d:a8:8f:
                    53:c3:3a:87:af:ce:d3:e4:2c:e1:7a:bd:ad:5a:5b:
                    62:c1:bd:1c:11:88:3d:fa:0a:52:91:33:e6:30:0f:
                    1a:2b:23:66:39:6c:03:ae:15:15:29:42:76:b9:b5:
                    d6:2f:fc:e7:57:ab:2f:42:6d:f7:42:4e:65:db:de:
                    04:ce:02:d8:7f:bb:1c:37:a1:85:bd:6b:eb:4a:c3:
                    60:96:c7:48:6c:7a:4b:86:0e:ce:3b:c5:05:2a:c6:
                    36:5f:f6:86:df:d0:eb:56:b1:33:43:10:39:e6:99:
                    24:f9:f2:7c:5f:4b:ad:6b:01:e4:65:fa:f2:b7:08:
                    d5:96:33:ee:71:56:e9:50:6e:bd:c4:a8:24:2d:4a:
                    20:47:f5:ed:90:75:77:f0:68:d2:6b:ad:ab:ba:8b:
                    53:ea:17:5e:9b:be:f6:c5:27:41:1e:0a:b9:a4:17:
                    d7:50:58:e9:0d:15:86:b4:df:66:1e:ae:21:80:3c:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:73:E5:09:F6:A3:82:86:72:B2:D6:4D:BA:53:22:E7:73:16:09:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/1/C873E509F6A3828672B2D64DBA5322E773160936.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.156.0/23
                IPv6:
                  2801:80:510::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52652

    Signature Algorithm: sha256WithRSAEncryption
         03:89:a4:4e:27:fa:ee:fa:9c:6b:29:ff:6e:df:bb:ac:e8:ad:
         9f:40:11:25:47:cf:30:67:40:1c:0b:80:8c:3d:d2:da:86:71:
         d1:9e:6d:8d:6e:83:ba:e3:b9:e5:e5:f6:61:e0:ae:e7:4d:2e:
         80:5a:ba:d3:25:27:6d:23:c9:46:d8:50:2d:55:93:c0:60:1e:
         91:9a:57:55:fb:9e:ba:71:bf:38:3c:db:f9:ff:26:72:7c:ef:
         b9:d4:d0:a0:1b:f3:57:2b:1f:4e:98:ae:ab:2c:3c:07:10:5e:
         8d:05:d6:33:22:75:0a:87:e2:0a:56:a4:58:9c:fb:37:cd:b5:
         20:54:09:d9:d6:e8:c1:d1:7b:92:01:0b:b0:97:57:61:89:f0:
         f8:8d:d2:dc:5f:45:39:8d:fe:67:81:cb:59:93:b3:6e:71:d0:
         18:2a:83:ce:1c:b3:a0:72:06:79:9d:59:60:0f:c5:01:83:78:
         12:3b:41:99:8e:2c:99:dd:38:5c:7d:e8:19:d9:a9:ae:d7:19:
         7e:a0:57:b0:a6:ef:09:29:aa:38:d5:91:b2:06:14:a5:57:ea:
         f2:df:fc:f1:d5:07:7e:1b:47:0e:5d:8a:8a:e6:ce:fe:63:94:
         2e:3e:8c:6b:8e:e1:ac:fe:54:35:b4:50:87:cf:d7:06:25:04:
         6e:92:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org