Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer
File:                     47C18131B7D329782CEBCA1510BDB6291781E507.cer (raw, json)
Hash identifier:          rZP4cV49AGHMNUK7BsbJMES/62509xLfdBrSPDWS/yI=
Subject key identifier:   47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04CDB20077601F0F09F79C5D76C3D2475C416F19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/47C18131B7D329782CEBCA1510BDB6291781E507.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:59:17 +0000
Certificate not after:    Thu 03 Apr 2025 12:04:17 +0000
Subordinate resources:    AS: 265141
                          IP: 143.255.12.0/22
                          IP: 170.0.216.0/22
                          IP: 170.246.108.0/22
                          IP: 2804:2b38::/32

Validation:               Failed, certificate revoked on Tue 07 May 2024 23:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cd:b2:00:77:60:1f:0f:09:f7:9c:5d:76:c3:d2:47:5c:41:6f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:59:17 2024 GMT
            Not After : Apr  3 12:04:17 2025 GMT
        Subject: CN=47C18131B7D329782CEBCA1510BDB6291781E507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:83:e0:54:0c:99:78:fb:14:e2:d5:da:06:
                    b3:cc:ed:3b:a1:61:e4:e0:e1:36:47:92:ed:50:e8:
                    73:bf:8d:bd:32:d2:e6:90:a4:31:b5:c8:98:51:7b:
                    87:11:3b:89:02:b4:be:b1:c3:87:51:3d:24:7f:26:
                    c1:58:0c:03:f4:dc:51:43:66:b9:15:6e:a8:56:5b:
                    ad:fd:52:ae:aa:e2:f5:bc:cb:0b:be:11:cd:01:fa:
                    0e:c7:b1:c8:60:38:ec:5b:56:a6:32:c4:75:4e:4e:
                    70:58:80:76:b3:4b:0f:a4:21:e4:15:d5:41:90:b2:
                    f8:a2:dc:b8:96:23:c1:44:88:7a:41:f6:ed:b4:17:
                    22:fe:81:fd:4c:91:57:ea:c4:59:cc:ab:d8:8f:16:
                    61:7f:f8:be:e8:60:20:e3:8e:d1:5c:43:80:1e:16:
                    40:89:23:00:f6:7f:97:fb:31:63:96:16:25:07:6d:
                    00:7b:c8:46:a9:f8:8f:e8:dd:bb:0d:dd:b2:1d:77:
                    2d:18:17:a4:a9:ed:c5:a7:97:85:72:c2:8a:3e:d9:
                    ae:df:be:57:6d:af:f8:80:80:e9:b5:17:a0:e9:d1:
                    26:b5:56:d3:8e:4a:62:19:c4:0a:bc:75:38:d3:af:
                    7f:2d:35:99:df:80:8a:ee:e5:c1:e8:59:46:c6:24:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/47C18131B7D329782CEBCA1510BDB6291781E507.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.12.0/22
                  170.0.216.0/22
                  170.246.108.0/22
                IPv6:
                  2804:2b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265141

    Signature Algorithm: sha256WithRSAEncryption
         38:09:3e:a1:2f:73:38:80:4c:70:9e:ae:d3:40:07:a0:40:0f:
         38:fd:46:5b:e6:8d:a2:0f:52:48:9f:8b:a5:6d:bd:ea:4e:0f:
         66:45:4f:42:b3:1a:13:66:21:5c:99:29:bf:c9:63:ac:88:2c:
         fb:e5:34:32:db:b2:bd:5d:63:b2:ce:6b:37:9b:4b:91:c3:76:
         f6:58:d0:cf:f4:74:97:7a:54:37:08:61:64:9f:64:e5:56:a9:
         24:84:e0:ab:5d:10:71:82:6a:ad:f3:2e:2a:7d:b8:3e:d1:84:
         d6:c2:d7:5f:71:06:e8:5e:60:31:6f:3f:c1:33:21:42:b6:12:
         1a:8e:d2:9f:8c:1e:d7:19:14:fa:84:69:7b:b7:57:16:c7:8f:
         6f:89:c0:74:0a:5f:35:dc:e2:d9:51:28:5e:01:33:64:70:a3:
         97:fd:1e:8a:84:41:9e:23:41:04:3f:a9:36:dd:b1:0f:07:5d:
         e3:5b:a8:ff:37:57:31:76:a2:16:02:5e:3f:3a:e4:f3:0f:27:
         fb:9e:b8:e5:e3:56:17:b5:b7:be:8f:e1:90:5a:9f:d0:cc:20:
         4e:38:40:00:b4:d7:ca:78:d6:13:85:56:c6:82:20:aa:6c:bc:
         73:0e:7a:2a:66:67:e8:51:54:73:c0:10:e5:5f:af:68:dc:ef:
         a0:38:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org