Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer
File:                     CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer (raw, json)
Hash identifier:          OsxtPEbjDDB0XuroQ7ioa3MBwA8DUcJigve1y9iafVQ=
Subject key identifier:   CF:77:95:52:DE:5E:A3:7B:1A:37:7A:CC:79:C7:AF:3B:D8:07:BB:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55EDC81EF5453A8875944D2283A0BEAE9C8148BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:33:35 +0000
Certificate not after:    Thu 03 Apr 2025 22:38:35 +0000
Subordinate resources:    AS: 267270
                          IP: 45.232.156.0/22
                          IP: 2804:4ae4::/32

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 15:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ed:c8:1e:f5:45:3a:88:75:94:4d:22:83:a0:be:ae:9c:81:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:33:35 2024 GMT
            Not After : Apr  3 22:38:35 2025 GMT
        Subject: CN=CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:b2:a5:cb:13:2e:7e:07:9c:6c:f9:89:fc:
                    2b:3a:0e:69:82:69:e4:12:2c:5e:86:d5:e5:a8:2f:
                    66:19:85:d6:5f:29:fb:49:e6:9e:df:62:33:82:dd:
                    29:89:f0:11:72:5f:49:60:75:93:fd:0d:44:c2:44:
                    62:4b:18:04:21:83:0c:fb:33:00:59:93:ae:c6:9a:
                    e7:b0:70:74:85:18:cb:a0:d7:6c:94:0c:b0:a5:5f:
                    c8:76:53:c8:73:28:df:05:63:eb:42:34:b3:5d:3e:
                    4f:25:56:8b:06:ce:61:7e:24:52:c5:7a:c3:ab:a5:
                    a7:6d:f9:ec:06:00:88:8b:de:bb:9a:bd:94:64:a3:
                    57:91:90:eb:44:82:65:08:6d:80:31:78:03:16:f5:
                    d5:9e:03:21:00:bb:22:db:be:10:65:83:0b:ca:ba:
                    02:c5:f0:86:3b:a3:5a:42:38:6e:de:5b:1e:0b:17:
                    24:90:1e:73:65:21:f3:09:9b:59:eb:6d:2a:8b:dd:
                    9c:ee:7f:16:d0:14:c2:71:92:4e:b8:ea:6a:7e:70:
                    e9:69:dd:61:2f:a3:3a:91:91:93:60:6e:87:59:ba:
                    49:61:f2:d4:ea:03:33:ab:59:f5:a5:5d:81:f9:f1:
                    9a:94:31:79:e6:c6:5c:7d:1e:49:67:82:c1:46:d5:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:77:95:52:DE:5E:A3:7B:1A:37:7A:CC:79:C7:AF:3B:D8:07:BB:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22
                IPv6:
                  2804:4ae4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267270

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:9c:29:79:61:4d:28:ce:fe:63:f8:0f:9a:54:07:35:fc:
         ff:81:00:e1:26:e6:61:79:32:7a:b4:c1:59:c3:9b:17:15:65:
         76:ae:5e:b8:62:43:ad:ff:b9:ad:ab:43:80:89:e7:63:81:3f:
         1a:14:27:f1:87:c6:d5:e9:ab:d2:12:b0:b5:d9:b1:02:a1:2e:
         8e:e3:50:e0:12:b3:6f:15:c4:b0:31:78:6b:9e:7e:89:cf:3f:
         89:8f:23:3c:8e:1d:1a:fe:80:33:90:34:81:a0:57:bb:43:5e:
         48:f2:c1:0e:0f:21:9c:81:4d:d5:9c:14:3e:91:32:31:5d:5f:
         85:e0:ff:bf:46:e7:d5:d4:45:18:20:73:69:96:8b:96:6c:1b:
         86:72:ec:f1:55:d5:4a:e7:ff:0b:05:59:80:92:52:0d:bd:be:
         01:73:0b:2d:db:8e:7a:f2:f0:11:19:27:bc:34:56:32:b9:58:
         7c:35:7e:f2:f3:d2:66:67:3b:77:94:87:6f:71:88:5b:c8:1f:
         a5:11:38:c3:8f:80:80:c0:a4:ab:95:48:62:9e:17:97:4b:c2:
         a5:0f:e9:4e:24:6d:e0:00:7c:e3:d6:a9:03:d7:ea:73:22:d1:
         dc:0a:49:86:e7:b6:9b:eb:e7:03:6d:a1:99:cd:b4:fc:1c:dd:
         44:02:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:23:17 2024 by rpki-client on console-fra.rpki-client.org