Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer
File:                     0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer (raw, json)
Hash identifier:          zVKOBoKbak5Sh2uLAYxTUYKRYr/xR+0Kzc6weIwsftU=
Subject key identifier:   04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74C641C90B6BADF1687D07D625606E7B926730A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:27:06 +0000
Certificate not after:    Thu 03 Apr 2025 13:32:06 +0000
Subordinate resources:    AS: 269548
                          IP: 45.189.16.0/22
                          IP: 2804:6650::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 06:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c6:41:c9:0b:6b:ad:f1:68:7d:07:d6:25:60:6e:7b:92:67:30:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:27:06 2024 GMT
            Not After : Apr  3 13:32:06 2025 GMT
        Subject: CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:e1:fa:62:dd:df:27:1f:ba:e3:f8:cd:8b:
                    e3:48:1f:7a:64:f5:e4:30:6f:46:bf:54:44:1b:37:
                    08:59:a0:f5:8d:c2:6a:34:b0:fe:62:10:85:3c:fd:
                    b5:db:30:c5:b6:7a:46:73:00:9d:b4:7c:47:f7:4d:
                    e1:be:83:41:0b:f4:5f:c1:f1:8c:d7:28:1d:a7:4b:
                    a9:fc:46:7e:48:f2:02:56:96:28:52:75:33:c2:c9:
                    d3:86:e7:c5:bc:a6:0c:98:9f:37:4d:6a:be:50:cc:
                    0a:9e:95:47:f8:c6:a3:c1:16:35:e9:78:0d:dc:d5:
                    13:23:ee:22:70:65:9d:dc:a9:4b:67:87:b6:c6:8f:
                    cd:2c:73:67:ab:e3:ca:99:53:b9:74:39:f9:c7:b7:
                    8a:38:db:50:8e:15:dc:f5:be:42:29:fb:61:1e:1a:
                    9c:74:83:b6:b4:f2:97:cc:14:a2:41:f6:7e:50:85:
                    1a:c5:86:9f:21:77:db:bc:84:2a:50:43:fd:21:56:
                    2c:f0:95:5a:0f:9d:2f:f0:fd:1a:3b:b5:15:11:46:
                    0d:07:f4:68:b8:4e:07:96:3f:69:9c:ce:bf:13:1c:
                    5f:67:5b:95:b3:f9:4c:98:67:c2:ae:37:d7:65:19:
                    dd:69:2b:5c:64:66:f3:e8:15:43:45:de:a9:58:80:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.16.0/22
                IPv6:
                  2804:6650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269548

    Signature Algorithm: sha256WithRSAEncryption
         15:22:0f:88:89:5e:f8:e8:77:19:f3:16:32:08:69:f1:18:37:
         4d:bb:12:63:96:9c:6b:6a:ee:51:12:06:6b:9d:6c:28:14:a2:
         9f:11:3b:d0:45:e0:fc:4f:7c:e2:6f:73:e9:be:85:2e:5f:84:
         f0:9a:a9:0b:78:a6:ce:2f:44:f8:94:13:fa:a0:ed:f8:03:51:
         6e:21:30:7b:8b:fe:ae:c1:bf:95:c0:dd:44:2c:e9:fb:01:65:
         4e:4b:45:b6:e8:96:93:af:53:ac:94:ad:91:d2:18:15:5b:b5:
         f9:32:fe:de:e8:9d:27:c9:14:32:b3:52:33:4e:58:7f:48:2e:
         c5:59:93:31:0c:92:46:40:c0:31:e0:3c:4a:bf:f2:5c:71:0c:
         3d:6c:07:ee:89:ce:d9:9a:41:e6:5b:6d:cb:07:8d:cf:4a:fc:
         81:be:53:b7:5c:73:f4:d3:13:c3:9d:a5:29:82:60:d5:0e:ac:
         0b:b9:85:7b:c0:36:c9:cc:8e:56:9c:91:9c:81:77:99:cd:7f:
         27:f6:ae:90:ea:d3:14:69:c8:ce:eb:1e:a2:c0:4f:41:ea:f0:
         6a:38:51:5a:31:ba:a6:ee:61:dc:97:b8:6a:ac:56:48:0e:66:
         cd:87:36:e2:f8:24:47:62:8e:d7:84:8b:54:63:03:00:44:6a:
         9a:f2:88:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org