Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4450472826579B4CE6B255EA1F9A95D732359F68.cer
File:                     4450472826579B4CE6B255EA1F9A95D732359F68.cer (raw, json)
Hash identifier:          xjWO5HhOLEY4ycs4+qeLNxVcYo1Yi2B9mwNI8qhI18g=
Subject key identifier:   44:50:47:28:26:57:9B:4C:E6:B2:55:EA:1F:9A:95:D7:32:35:9F:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F654F7A3BAFEB0A958C58C526716F265727C916
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/4450472826579B4CE6B255EA1F9A95D732359F68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 16:22:26 +0000
Certificate not after:    Tue 22 Jul 2025 16:27:26 +0000
Subordinate resources:    AS: 262626
                          IP: 2804:80c8::/32

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 00:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:65:4f:7a:3b:af:eb:0a:95:8c:58:c5:26:71:6f:26:57:27:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 16:22:26 2024 GMT
            Not After : Jul 22 16:27:26 2025 GMT
        Subject: CN=4450472826579B4CE6B255EA1F9A95D732359F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:a1:12:f2:9f:71:f8:4e:91:5b:78:97:9c:
                    4c:fd:5b:7e:5b:48:cf:e8:4f:81:f7:0a:1e:2d:20:
                    ca:ad:8c:0e:c2:63:a4:dc:77:39:03:70:c7:c2:91:
                    52:e0:7b:64:db:0c:8d:8c:e5:b4:bf:24:83:2d:0a:
                    45:de:79:a6:44:11:90:e9:76:85:46:1b:48:df:d3:
                    9d:9c:4d:da:3e:ef:53:bf:4e:37:d1:c4:2e:4c:94:
                    6a:73:71:82:32:24:c6:52:e0:4e:ec:2b:cf:a5:f1:
                    40:32:f0:f5:68:22:78:93:27:f9:87:89:d5:b9:58:
                    7e:a0:a7:8e:fc:cf:ed:e6:ec:a2:8d:a1:89:17:43:
                    8c:bd:a1:72:dc:0e:5a:d3:ae:2a:db:3c:8d:42:33:
                    1c:5a:90:a2:16:0b:5e:7e:fe:fc:7a:0e:7c:de:f9:
                    8d:52:3f:ff:26:25:dd:9f:67:c5:7d:55:eb:a7:55:
                    b1:a7:7d:80:88:de:8b:bd:0a:dd:87:03:fd:2d:d7:
                    38:eb:5e:99:d5:f9:8d:fa:6f:48:0a:3e:5f:a0:aa:
                    dd:2d:dd:a1:da:cb:3c:18:3d:2c:2a:6c:5b:2a:e5:
                    2b:11:71:55:5b:c6:a9:34:d4:4b:41:07:09:d3:59:
                    f2:25:9c:bc:03:91:ed:6a:88:06:58:70:d2:3b:f8:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:50:47:28:26:57:9B:4C:E6:B2:55:EA:1F:9A:95:D7:32:35:9F:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/4450472826579B4CE6B255EA1F9A95D732359F68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262626

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:69:c1:2b:84:94:a0:9a:f5:fd:f2:13:1e:d5:49:fb:62:
         a6:72:e1:1d:3f:b8:49:90:7d:cc:f5:c5:bc:4f:1e:96:b7:25:
         51:c0:7a:00:f2:79:25:7d:ce:ab:ec:a9:5e:af:65:b4:75:3a:
         09:bb:f1:57:15:a6:9e:01:ea:30:58:0f:6b:ea:f6:1d:aa:5d:
         05:94:0f:11:e1:b8:59:26:20:c3:61:b5:49:de:67:3f:75:bd:
         4e:0c:79:fc:58:db:e1:68:28:c9:bd:0c:92:28:95:b5:59:7f:
         cf:9d:d7:ed:a3:a7:50:3b:25:b5:ce:0b:50:8c:97:46:dd:88:
         7e:92:7e:60:21:4c:37:1c:1b:33:32:a1:59:78:92:5c:22:50:
         60:17:e8:be:f7:6a:66:db:49:99:5d:6b:69:82:94:31:77:04:
         a5:af:44:26:cc:65:3b:e3:3a:a8:f5:70:cf:49:62:c4:b4:55:
         2d:8c:fa:9a:59:1d:0e:f6:ce:ba:a7:8a:fb:f2:c7:13:c4:88:
         0e:c3:52:6f:58:ae:9f:62:9c:e9:c5:00:29:8f:94:f0:8a:b7:
         f0:3b:8e:e5:1b:96:19:e8:7a:6c:35:a5:e3:02:73:e2:3e:9b:
         f4:3e:be:cb:10:84:40:f5:ad:e7:42:e1:85:2f:34:22:37:2d:
         40:6a:75:aa
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUL2VPejuv6wqVjFjFJnFvJlcnyRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjMxNjIyMjZaFw0yNTA3MjIxNjI3MjZaMDMxMTAvBgNV
BAMTKDQ0NTA0NzI4MjY1NzlCNENFNkIyNTVFQTFGOUE5NUQ3MzIzNTlGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDqES8p9x+E6RW3iXnEz9W35b
SM/oT4H3Ch4tIMqtjA7CY6TcdzkDcMfCkVLge2TbDI2M5bS/JIMtCkXeeaZEEZDp
doVGG0jf052cTdo+71O/TjfRxC5MlGpzcYIyJMZS4E7sK8+l8UAy8PVoIniTJ/mH
idW5WH6gp478z+3m7KKNoYkXQ4y9oXLcDlrTrirbPI1CMxxakKIWC15+/vx6Dnze
+Y1SP/8mJd2fZ8V9VeunVbGnfYCI3ou9Ct2HA/0t1zjrXpnV+Y36b0gKPl+gqt0t
3aHayzwYPSwqbFsq5SsRcVVbxqk01EtBBwnTWfIlnLwDke1qiAZYcNI7+NQ1AgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREUEcoJlebTOay
VeofmpXXMjWfaDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vd3R1
Q3FHVERtOXl0eFdzM2oyaFpKeTZCVGRON29GMzR3MWRLRTF3cHliaC8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vd3R1
Q3FHVERtOXl0eFdzM2oyaFpKeTZCVGRON29GMzR3MWRLRTF3cHliaC8wLzQ0NTA0
NzI4MjY1NzlCNENFNkIyNTVFQTFGOUE5NUQ3MzIzNTlGNjgubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEgMgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAHi
MA0GCSqGSIb3DQEBCwUAA4IBAQBKMGnBK4SUoJr1/fITHtVJ+2KmcuEdP7hJkH3M
9cW8Tx6WtyVRwHoA8nklfc6r7Kler2W0dToJu/FXFaaeAeowWA9r6vYdql0FlA8R
4bhZJiDDYbVJ3mc/db1ODHn8WNvhaCjJvQySKJW1WX/Pndfto6dQOyW1zgtQjJdG
3Yh+kn5gIUw3HBszMqFZeJJcIlBgF+i+92pm20mZXWtpgpQxdwSlr0QmzGU74zqo
9XDPSWLEtFUtjPqaWR0O9s66p4r78scTxIgOw1JvWK6fYpzpxQApj5TwirfwO47l
G5YZ6HpsNaXjAnPiPpv0Pr7LEIRA9a3nQuGFLzQiNy1AanWq
-----END CERTIFICATE-----