Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47DBD811070D1FBBC15422CC201AF243255EA29F.cer
File:                     47DBD811070D1FBBC15422CC201AF243255EA29F.cer (raw, json)
Hash identifier:          12qxFd5kvvKkPHX4xH6LDwenKTyNWXNqCbdj/HuW3GE=
Subject key identifier:   47:DB:D8:11:07:0D:1F:BB:C1:54:22:CC:20:1A:F2:43:25:5E:A2:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6789E46DE57702B0F1FE0F27CAFFF15E679BC93B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/1/47DBD811070D1FBBC15422CC201AF243255EA29F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:54:53 +0000
Certificate not after:    Wed 02 Apr 2025 18:59:53 +0000
Subordinate resources:    AS: 269246
                          IP: 45.182.192.0/22
                          IP: 2804:61a0::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:89:e4:6d:e5:77:02:b0:f1:fe:0f:27:ca:ff:f1:5e:67:9b:c9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:54:53 2024 GMT
            Not After : Apr  2 18:59:53 2025 GMT
        Subject: CN=47DBD811070D1FBBC15422CC201AF243255EA29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:49:28:dc:7f:7b:93:43:85:7f:68:d5:1c:
                    9e:06:24:b3:8a:a6:73:9a:51:13:93:72:53:21:ae:
                    17:dd:11:28:78:02:b1:81:6a:25:3c:08:57:97:ea:
                    1a:14:98:82:54:59:9b:b7:a8:7a:35:a2:ff:af:4b:
                    8a:47:7f:5d:a6:33:d8:33:3a:5b:f6:e7:f1:b9:27:
                    f8:0b:95:97:ed:7c:d2:5f:05:5a:6c:c8:e7:aa:0f:
                    37:1e:8d:2a:7e:86:fc:a0:b5:87:88:e8:7b:b1:2b:
                    94:23:39:37:cf:51:0e:f0:e3:cc:1f:c6:79:d1:c5:
                    56:f7:9e:a5:29:94:85:af:4e:96:7d:27:d5:59:92:
                    cf:04:20:bc:9d:ff:93:d3:a3:d2:d6:c4:a9:6c:96:
                    67:c0:29:67:01:f8:68:17:8f:ac:e5:b7:48:da:bd:
                    14:c2:b4:8a:92:7c:c9:99:7e:00:f6:52:d7:cc:a2:
                    0a:6e:ff:d0:75:f5:a1:f4:ab:02:4b:e8:e9:38:1c:
                    06:fd:fe:a1:ce:63:b2:e6:2f:44:c1:2f:54:e8:7e:
                    8e:cb:aa:94:ae:33:4c:26:cb:b5:88:cb:26:d4:23:
                    df:60:69:1b:8a:e4:a7:32:58:3f:52:7b:42:d5:44:
                    a0:85:d7:e3:ce:62:7d:3d:c7:46:b1:69:76:50:d7:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:DB:D8:11:07:0D:1F:BB:C1:54:22:CC:20:1A:F2:43:25:5E:A2:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/1/47DBD811070D1FBBC15422CC201AF243255EA29F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.192.0/22
                IPv6:
                  2804:61a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269246

    Signature Algorithm: sha256WithRSAEncryption
         84:01:c9:47:a1:73:e9:4d:00:57:0c:cd:bf:75:b5:09:7f:b9:
         0b:a7:c5:2d:b7:85:92:39:ef:68:33:49:01:64:d6:aa:4a:82:
         dd:6c:06:38:db:18:92:af:0b:21:9c:78:f4:a8:5a:b5:4a:37:
         92:a8:c7:bf:f8:e6:3e:40:ea:8a:7c:93:89:9b:93:35:40:ee:
         96:34:08:79:bd:b3:9a:b2:43:c9:4d:05:30:46:6e:0c:1c:b5:
         67:8c:1c:37:97:72:10:64:72:98:61:b0:ce:61:8d:8b:48:d4:
         73:d6:0d:34:50:48:c5:0e:ad:44:9a:1d:0b:92:72:40:3e:2a:
         31:d2:45:59:fc:85:95:4c:47:05:33:67:2c:eb:a2:db:9b:60:
         5d:dd:98:ee:1c:77:00:27:fa:b4:33:86:d3:34:f8:67:8d:cb:
         72:a8:00:de:28:77:c9:10:9d:20:da:8a:08:5b:b9:e5:75:c0:
         80:bc:a3:48:11:b6:5b:bb:fb:cf:8e:79:16:44:b2:8c:1a:ac:
         99:83:c8:bb:15:d0:82:61:f6:c4:73:5d:e0:75:c1:b9:5c:f8:
         66:7b:f6:11:cb:72:03:4f:bf:3b:56:4c:15:1e:ab:7c:a3:4b:
         bc:c4:c0:75:8d:32:82:b8:16:b7:61:86:32:16:04:e8:34:7c:
         df:b3:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org