Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC4D79F45E40C36664D30A76E754A2116B122B7F.cer
File:                     DC4D79F45E40C36664D30A76E754A2116B122B7F.cer (raw, json)
Hash identifier:          DdmDzo5j+NZcP4FmRv00T7FxcDhx0gtU80lgc0TF+Fk=
Subject key identifier:   DC:4D:79:F4:5E:40:C3:66:64:D3:0A:76:E7:54:A2:11:6B:12:2B:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71196B4E670F90561B71D7606D12CA170E4012C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/1/DC4D79F45E40C36664D30A76E754A2116B122B7F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:04:19 +0000
Certificate not after:    Wed 02 Apr 2025 19:09:19 +0000
Subordinate resources:    AS: 271297
                          IP: 45.229.136.0/24
                          IP: 192.231.175.0/24
                          IP: 2804:794c::/32

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 19:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:6b:4e:67:0f:90:56:1b:71:d7:60:6d:12:ca:17:0e:40:12:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:04:19 2024 GMT
            Not After : Apr  2 19:09:19 2025 GMT
        Subject: CN=DC4D79F45E40C36664D30A76E754A2116B122B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:95:b0:a5:df:d0:ce:00:d6:10:09:45:2d:
                    9b:6e:eb:01:b8:04:f0:4b:d2:e0:88:09:cb:bb:6a:
                    5c:7e:67:bc:99:65:40:34:6e:c4:f3:aa:43:46:b8:
                    07:eb:7a:ba:88:73:f0:7b:4b:e6:60:aa:24:cd:76:
                    5f:af:46:4c:4a:36:8b:19:e1:6c:a1:a9:90:b0:53:
                    fa:9b:87:ec:dc:81:d3:37:0e:4f:c7:f1:88:6a:ac:
                    45:70:20:6b:6a:8e:b7:e4:cd:41:29:6e:c3:2b:82:
                    df:4e:e4:05:7c:85:e5:61:b0:bb:c3:6b:ce:62:96:
                    42:10:48:73:8c:87:35:18:f1:00:8e:96:fb:2c:a8:
                    51:60:be:bb:ec:ba:9a:47:10:89:4f:7a:10:f9:5e:
                    5c:69:38:f8:34:f7:ea:6b:db:9d:f1:36:a9:ed:a1:
                    e5:40:0f:47:f1:e8:a0:aa:37:ee:6a:72:d7:e5:54:
                    49:45:82:df:6c:18:ff:8e:a9:9c:81:6f:50:92:99:
                    31:0e:9a:2b:8e:46:bb:81:f6:d4:88:66:b0:7f:61:
                    68:5c:2a:1f:83:0b:ee:33:db:3c:d3:99:99:1a:36:
                    90:7d:19:6d:b4:c2:0f:33:2c:3e:ec:49:b6:b9:9e:
                    ed:f8:28:23:82:fe:24:54:91:a8:8c:13:95:84:d6:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:4D:79:F4:5E:40:C3:66:64:D3:0A:76:E7:54:A2:11:6B:12:2B:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/1/DC4D79F45E40C36664D30A76E754A2116B122B7F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.136.0/24
                  192.231.175.0/24
                IPv6:
                  2804:794c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271297

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:8e:08:ea:b1:8d:66:88:22:23:69:a1:34:48:c3:5f:58:
         b8:d6:c0:6e:ec:40:b3:fa:ce:bf:b8:61:ae:dc:e8:4f:d9:17:
         06:76:08:db:cb:69:1a:0c:e9:60:5d:a7:83:50:dc:5c:8c:62:
         0b:90:d4:8b:03:e3:19:ab:8b:29:71:80:ba:4f:4d:d6:62:11:
         6c:95:e8:f6:7b:05:7b:39:73:ec:21:a2:63:54:d8:9d:cf:e0:
         01:93:84:28:18:35:6f:df:c6:80:af:90:a0:06:70:e2:60:75:
         20:dd:eb:cb:88:85:dc:cb:7e:8d:20:fc:fb:59:9a:72:71:94:
         d2:d2:52:86:46:6f:d8:8a:f6:25:4b:e7:00:14:a1:c6:8b:b9:
         88:12:8f:c0:76:55:7a:86:7c:af:7d:d3:2e:a4:ba:80:24:b2:
         34:7f:81:52:e5:2f:4b:92:53:df:5e:c5:c3:08:cd:7d:9f:21:
         59:33:66:20:97:08:80:53:3f:c4:76:ba:e3:02:4d:03:33:f0:
         c5:23:12:07:51:b5:f2:b0:fe:46:7f:56:59:20:71:19:8e:40:
         58:4d:c2:3b:fd:72:be:d2:55:c1:15:5a:ad:2f:1a:83:f4:56:
         5f:c2:78:f1:3a:35:16:94:25:e6:68:97:82:e7:5a:9e:22:a1:
         9a:1e:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 22:00:53 2024 by rpki-client on console-ams.rpki-client.org