Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4398E7A61FC50FD45A4B30728979890C6FD9EB3A.cer
File:                     4398E7A61FC50FD45A4B30728979890C6FD9EB3A.cer (raw, json)
Hash identifier:          AZ6bnWI8TUg9jlZ2CyDQiOYRP0fmVNyUmHbtcPSrEfc=
Subject key identifier:   43:98:E7:A6:1F:C5:0F:D4:5A:4B:30:72:89:79:89:0C:6F:D9:EB:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57CA46093A1FD7A015AEB77B57FE08A7665560E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/4398E7A61FC50FD45A4B30728979890C6FD9EB3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Sep 2024 23:19:03 +0000
Certificate not after:    Tue 09 Sep 2025 23:24:03 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 14:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ca:46:09:3a:1f:d7:a0:15:ae:b7:7b:57:fe:08:a7:66:55:60:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 10 23:19:03 2024 GMT
            Not After : Sep  9 23:24:03 2025 GMT
        Subject: CN=4398E7A61FC50FD45A4B30728979890C6FD9EB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:b7:83:6e:eb:58:2c:23:96:95:a0:17:a1:
                    48:78:71:c6:d6:7a:d2:f8:80:21:8d:ba:c6:f9:6f:
                    85:96:30:60:f5:6f:3a:f2:c4:df:de:bb:0c:7e:28:
                    07:88:92:52:67:db:a9:a6:b4:b8:73:ef:a1:b1:2f:
                    63:1f:f9:2c:a6:a7:f1:2e:d6:69:75:fe:c8:48:d2:
                    96:24:80:3a:7d:4c:be:70:04:96:76:03:0a:bf:d1:
                    24:9b:c7:50:77:e6:11:77:4e:9d:b0:8a:03:71:ec:
                    75:3d:e4:75:f4:2e:3c:8d:ca:9c:40:d5:fe:9e:00:
                    cd:33:3f:e1:9d:2f:e2:97:f8:d2:d2:91:0d:aa:fa:
                    b8:33:e5:e1:08:61:a0:a6:4b:d7:2f:52:f0:06:d8:
                    13:17:92:31:3a:3a:2f:89:f6:99:c2:60:3b:77:8e:
                    f2:a3:a4:72:3b:6d:9e:7c:16:7b:ca:5b:73:74:41:
                    7e:74:a8:79:b4:44:00:e4:10:84:63:44:22:e5:b2:
                    49:e0:50:ae:1e:e1:9c:fa:46:dd:4b:d5:23:df:e8:
                    8b:90:87:37:6b:3f:7f:f5:7e:fc:0c:c6:a9:99:6b:
                    7a:2f:81:dc:ab:0d:2d:a4:ef:8e:ef:31:75:70:49:
                    2c:70:fd:98:7f:22:75:48:d1:f3:a9:4d:06:6a:ad:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:98:E7:A6:1F:C5:0F:D4:5A:4B:30:72:89:79:89:0C:6F:D9:EB:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/4398E7A61FC50FD45A4B30728979890C6FD9EB3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:de:6a:b8:ae:cc:b9:ac:e2:2f:41:27:69:1c:a8:af:6e:
         0e:43:22:7a:62:80:58:2f:15:98:6a:66:4b:98:71:20:41:c6:
         95:29:eb:8e:f4:9a:e7:b0:0f:99:bc:98:c9:08:ab:ee:0d:6b:
         53:d5:7f:4d:b2:98:9d:4c:8d:46:1d:4b:77:82:16:e2:ee:5d:
         dc:cf:44:2f:6d:74:30:7e:eb:12:9e:5a:f8:9c:82:78:4e:c3:
         57:f1:84:66:e3:93:ba:41:bc:f4:db:0e:69:b3:6b:ab:3d:ca:
         18:7e:b9:a5:67:e5:85:1c:49:b9:2d:f6:4a:53:34:e2:cc:6e:
         e1:c9:97:bc:f1:f5:94:99:cb:22:13:4a:f7:66:82:c9:bd:eb:
         c2:a0:89:d9:4b:e7:79:dd:36:e5:2b:94:59:a0:c9:62:4a:af:
         9c:f1:69:7e:d1:db:42:ec:10:13:6d:d0:fa:ea:4c:18:05:72:
         91:59:66:10:ef:89:d3:f0:e2:70:2c:37:d5:1e:eb:97:61:b1:
         84:0f:09:58:5a:28:0a:2d:f7:4d:4a:a6:15:77:47:ff:6d:81:
         b5:3b:c1:f2:0c:79:9c:a5:6c:f3:74:0f:ce:cb:0b:00:85:81:
         ba:dc:95:6c:58:b1:c2:b1:5d:e7:7a:dd:37:1d:92:38:f8:be:
         20:da:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:04:05 2024 by rpki-client on console-ams.rpki-client.org