Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/04E982D7D294A7E0F87DE970AF764F81059CF205.cer
File:                     04E982D7D294A7E0F87DE970AF764F81059CF205.cer (raw, json)
Hash identifier:          mdXDbnZJrph766hsKxSB1gP7Yd9og9XY4GL0XLoM34c=
Subject key identifier:   04:E9:82:D7:D2:94:A7:E0:F8:7D:E9:70:AF:76:4F:81:05:9C:F2:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60FD304F8548CBCACD6706D510AF8DE9809240EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/04E982D7D294A7E0F87DE970AF764F81059CF205.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:39:56 +0000
Certificate not after:    Thu 03 Apr 2025 18:44:56 +0000
Subordinate resources:    AS: 28194
                          IP: 187.33.56.0/21
                          IP: 2804:4390::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 17:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:30:4f:85:48:cb:ca:cd:67:06:d5:10:af:8d:e9:80:92:40:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:39:56 2024 GMT
            Not After : Apr  3 18:44:56 2025 GMT
        Subject: CN=04E982D7D294A7E0F87DE970AF764F81059CF205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:eb:b1:86:0f:7c:5c:68:f6:ca:02:70:67:
                    55:49:16:3a:25:d3:12:bb:3a:ac:76:92:a2:6b:81:
                    f0:bc:40:23:d6:08:53:72:89:a2:bd:cc:09:6a:0f:
                    65:e8:0b:13:fa:39:25:a1:62:42:26:f5:de:a5:0e:
                    6e:61:c9:1f:df:23:87:a4:61:05:c4:43:a3:ac:9b:
                    3b:74:b7:c4:d2:86:60:81:3e:4e:1d:4f:a9:15:52:
                    e4:26:f1:72:6e:43:e5:7a:52:b2:1f:6e:cf:dd:52:
                    94:97:f9:9e:7a:a3:12:be:f6:03:ca:34:47:28:dd:
                    59:34:71:13:0c:b7:b5:a3:10:73:00:9c:09:e4:06:
                    ef:6b:04:c2:e5:64:77:25:57:2e:4d:c0:f5:ee:5d:
                    4c:31:d8:63:32:14:dc:70:cb:5c:b7:c4:e0:0d:1e:
                    1e:41:f5:30:40:a2:2a:d2:f9:20:02:a6:87:d5:af:
                    24:8f:5f:60:5c:5e:94:25:dd:1d:9d:48:a6:0b:7c:
                    b5:72:b6:b4:93:2f:91:40:bf:3a:f0:de:86:52:78:
                    ae:c2:63:1b:63:f5:b9:74:4b:d6:a0:34:9f:9c:f1:
                    cf:d8:ff:d2:63:98:f6:0a:55:5c:e9:69:e9:5f:8d:
                    3d:1b:19:40:24:3c:95:ce:71:eb:48:10:e0:de:c5:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:E9:82:D7:D2:94:A7:E0:F8:7D:E9:70:AF:76:4F:81:05:9C:F2:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/04E982D7D294A7E0F87DE970AF764F81059CF205.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.56.0/21
                IPv6:
                  2804:4390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28194

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:96:d4:bd:70:80:65:b8:ae:bb:3f:08:b5:8e:ce:f3:fa:
         6a:26:41:f8:bf:c7:23:0b:46:fb:a5:ba:c8:55:f4:df:d1:fa:
         0b:1c:d3:f1:ea:67:4f:d9:fd:fb:ed:60:a0:6a:5b:e0:c0:6c:
         2a:3a:56:b7:ad:df:e6:e8:87:46:ea:5f:36:4b:53:f6:97:3f:
         63:a4:13:5f:3b:9e:ae:db:fb:8c:05:7e:32:26:26:4a:49:8b:
         cb:44:14:5a:59:ac:1f:90:87:e6:79:c1:4d:c1:13:11:f1:2c:
         dc:62:f3:a4:fe:d5:19:48:da:cf:2f:9b:59:b3:27:99:85:09:
         b5:8a:f1:bd:30:84:81:03:fd:9d:80:8d:0b:d0:0e:75:67:a1:
         67:39:63:51:52:ed:b4:37:92:3b:91:cf:57:df:81:2b:02:be:
         e2:b2:8e:88:37:ed:88:9a:95:55:da:48:50:75:95:18:68:9f:
         61:5b:21:01:8f:9d:67:3d:3b:48:df:4e:3d:27:7e:da:75:4c:
         f0:c0:bd:34:41:fc:45:c9:12:04:0a:7b:d7:f6:01:72:9e:b3:
         d0:cd:3c:30:d1:31:b4:71:a3:fb:29:78:2d:4c:2d:bc:44:a4:
         ad:87:6d:20:a2:ba:13:25:93:d3:ed:38:2a:51:8a:8b:64:09:
         c2:c6:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:42 2024 by rpki-client on console-ams.rpki-client.org