Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer
File:                     D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer (raw, json)
Hash identifier:          g/921gd2Sch9yIwmWOddw3BVMjFwUM6bNXNWhC3m/ok=
Subject key identifier:   D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A269679FE39DFDDD77A510DA2B53C8F686E6314
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 17:28:58 +0000
Certificate not after:    Thu 17 Apr 2025 17:33:58 +0000
Subordinate resources:    AS: 270826
                          IP: 200.219.28.0/22
                          IP: 2804:7200::/32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 12:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:26:96:79:fe:39:df:dd:d7:7a:51:0d:a2:b5:3c:8f:68:6e:63:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 17:28:58 2024 GMT
            Not After : Apr 17 17:33:58 2025 GMT
        Subject: CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:c3:e6:19:1e:38:0d:b5:e3:c7:84:8a:63:
                    d5:c1:55:d8:d6:ad:f2:f3:f5:9d:2a:eb:d7:d1:73:
                    95:36:30:20:06:74:c5:e5:6a:e7:82:3d:95:78:0a:
                    08:86:df:32:b5:c8:53:73:b0:8a:2c:37:25:15:56:
                    90:e6:b5:2c:fe:85:5f:e6:58:18:f0:c5:02:bb:cc:
                    ab:8e:e1:30:83:97:70:3e:85:c7:3e:b4:8e:c2:58:
                    d3:7e:3e:32:c0:02:6a:0c:a3:94:f5:16:95:2d:9c:
                    07:de:12:65:08:e5:bd:67:a3:ba:73:2a:4f:f7:a8:
                    6a:43:70:25:4e:25:64:7f:69:d7:49:7d:31:ee:f1:
                    79:15:b6:f9:97:7e:62:20:21:0f:b9:d3:e2:1a:af:
                    51:9b:3d:a4:26:ad:9f:7f:98:a8:cf:7c:8b:08:04:
                    d7:0b:bb:04:83:51:35:e2:57:20:13:35:00:e6:e2:
                    b7:fb:c8:62:4a:fa:cc:7e:4d:c6:cf:da:1d:11:69:
                    c1:e2:85:2a:15:f5:8b:09:06:56:e2:e7:77:4c:59:
                    81:1f:f2:22:17:c1:4c:ff:d2:16:f2:43:52:a0:d2:
                    89:d8:eb:cb:79:29:33:c8:d6:2d:c9:d0:0d:49:64:
                    3f:55:b5:ea:ce:31:65:af:46:d2:1b:61:7b:39:98:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.28.0/22
                IPv6:
                  2804:7200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270826

    Signature Algorithm: sha256WithRSAEncryption
         97:14:a5:f8:04:d5:80:89:a5:1f:eb:79:77:4e:0e:5a:10:14:
         8d:07:3e:ca:b9:00:d5:bf:d9:95:98:c4:21:09:9d:7a:e7:69:
         32:eb:76:ee:e8:65:23:0b:2a:4a:cf:35:d1:a4:d8:bd:2e:a0:
         57:13:90:09:5e:d2:48:db:c1:7d:21:fd:63:c0:55:48:7b:37:
         c4:c7:82:82:31:e2:45:40:d4:f3:c0:ce:10:de:6d:a9:db:a7:
         26:a1:7f:cb:a8:5f:2a:28:6b:77:05:42:29:08:47:95:d9:f3:
         34:79:5a:9a:eb:25:f9:fc:77:9d:0d:48:3d:26:8d:76:f4:44:
         c0:3b:64:8e:26:b3:d1:5d:3f:36:49:80:e4:27:fd:fc:f3:24:
         b7:40:32:e6:d7:1e:a2:08:7f:ab:d9:7b:95:fe:66:7c:02:06:
         17:8d:c2:49:80:b4:f0:0b:a7:d7:21:a7:25:33:af:80:3e:76:
         12:21:be:b6:82:e0:11:54:72:30:74:dd:92:d2:b0:ec:0d:ff:
         5d:9b:bd:37:b4:a0:43:51:4e:48:4d:04:cc:8a:b5:25:84:68:
         3b:33:eb:9c:8d:d9:a1:41:29:0a:23:f1:04:be:60:08:cf:d7:
         0a:f9:a9:85:f6:26:1c:01:ff:e1:15:ea:a8:1b:52:8c:c5:55:
         2a:d0:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 15:15:12 2024 by rpki-client on console-ams.rpki-client.org