Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.cer
File:                     4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.cer (raw, json)
Hash identifier:          oToe9TvRSFIjGofoewkTLOHCC83mFD7IBQsHS4lNoQs=
Subject key identifier:   42:88:B4:C9:2C:50:CB:FA:D8:4B:9A:EE:EA:D7:A4:A4:BB:B3:BF:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3174D649F629F85CB4B7E4C269EFA9B9F5604D85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2024 15:50:03 +0000
Certificate not after:    Thu 04 Sep 2025 15:55:03 +0000
Subordinate resources:    AS: 271496
                          IP: 181.224.48.0/22
                          IP: 2804:7c70::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 03:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:74:d6:49:f6:29:f8:5c:b4:b7:e4:c2:69:ef:a9:b9:f5:60:4d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 15:50:03 2024 GMT
            Not After : Sep  4 15:55:03 2025 GMT
        Subject: CN=4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:d3:ed:05:4b:cd:a4:ae:14:9e:fa:fa:69:
                    bb:b1:e6:61:89:15:98:66:88:55:23:7a:83:bc:bc:
                    53:f1:84:9d:e0:e9:e0:5d:09:81:f8:74:60:2a:9b:
                    7d:31:e7:34:a3:8b:c1:89:ea:1f:0d:e7:a7:7e:7f:
                    c1:db:a7:07:ea:d8:20:d6:11:03:8b:cf:09:a7:f1:
                    12:d3:49:11:76:10:9f:87:3a:47:9b:83:45:61:80:
                    1b:ff:93:7a:c8:49:b4:9b:4f:7e:68:00:9c:28:8b:
                    7a:f4:b7:57:93:28:c9:6c:7a:e2:e0:18:5c:25:5e:
                    f6:c6:25:56:4a:d7:58:41:48:56:40:c4:a9:0a:88:
                    ff:06:98:9c:30:a5:39:ca:9b:fb:2c:a8:14:60:59:
                    36:6f:62:77:49:45:2f:bc:c1:e1:28:fe:b2:36:73:
                    80:0b:17:bc:b3:a1:d8:81:82:32:79:7e:ed:9b:d9:
                    d7:53:52:58:a4:0f:2c:11:53:ac:d1:11:f0:d2:cb:
                    45:92:04:9e:fa:89:25:f3:3f:ef:c4:53:94:be:d1:
                    3c:05:c7:97:41:04:45:35:92:e3:b6:e2:68:cc:46:
                    29:3a:27:a9:ca:26:db:82:67:4d:12:31:08:60:e0:
                    ca:68:bd:45:69:93:3c:3f:3a:75:ed:49:de:53:09:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:88:B4:C9:2C:50:CB:FA:D8:4B:9A:EE:EA:D7:A4:A4:BB:B3:BF:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.48.0/22
                IPv6:
                  2804:7c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271496

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:be:0a:20:6f:d8:e2:90:3a:8a:f6:16:df:62:e1:da:3a:
         ab:f8:dd:24:0c:3d:5b:d1:63:aa:a5:65:2f:77:5d:ef:e5:96:
         d7:31:dc:d3:ac:1c:e8:93:32:1c:3a:61:01:f4:ad:b2:e5:aa:
         01:45:7d:42:2e:ab:2a:fa:8e:48:ec:fb:e5:a0:39:97:a6:37:
         da:1b:42:4e:8f:05:63:c3:d8:71:53:6e:28:b8:5a:7b:0f:9e:
         b5:cc:e1:a4:ea:51:ae:c3:38:bd:10:7c:9d:45:09:5d:ae:75:
         ce:8c:13:8b:4d:82:b4:12:53:cb:55:af:4a:80:f7:2d:71:9a:
         9e:00:c2:c5:b2:fd:79:6f:61:c8:d6:51:64:ff:66:6d:5f:3e:
         4d:bd:6d:dc:c2:07:fa:60:f1:fe:d9:51:c4:ce:6e:5f:4d:a0:
         ce:5c:1d:b1:5d:3b:b3:af:8d:40:6e:8c:51:4c:67:61:b6:57:
         19:09:e7:e9:af:8e:bc:16:7c:4b:02:b6:82:60:7a:25:14:94:
         8e:e4:9e:73:8b:6b:0e:1d:12:a6:54:6b:37:2e:8d:4c:aa:78:
         7d:79:52:52:e1:d6:d1:77:4e:e1:f5:96:c5:b5:a2:d1:db:b0:
         1d:93:c6:72:bc:42:11:57:8f:ef:ce:39:60:a2:72:9c:9a:07:
         a1:d7:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 07:12:07 2024 by rpki-client on console-ams.rpki-client.org