Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.cer
File:                     4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.cer (raw, json)
Hash identifier:          EN1dFHR9w2lNsVAw9EZBQH7ObLh/ezmHJOSeGCeO0/o=
Subject key identifier:   48:74:C5:2F:CE:FE:A5:B5:43:D0:BC:6B:3F:A6:58:91:A7:8D:EC:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79C292EF02985B0C2CEAF5EEE0A43A97BBBFC4C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:46 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:46 +0000
Subordinate resources:    AS: 262587
                          IP: 143.255.184.0/22
                          IP: 177.84.144.0/21
                          IP: 2804:2b60::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 12:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c2:92:ef:02:98:5b:0c:2c:ea:f5:ee:e0:a4:3a:97:bb:bf:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:46 2024 GMT
            Not After : Apr  2 18:30:46 2025 GMT
        Subject: CN=4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:c8:f5:ef:4d:4a:de:ea:a9:6e:a8:16:36:
                    b1:6d:7b:cb:a7:89:ce:cc:bf:fa:9c:24:ab:d7:a4:
                    0a:fa:0a:79:b9:01:f4:e2:5e:0f:cf:68:0d:c9:c9:
                    0e:79:cb:9a:04:21:95:90:22:7b:a7:12:eb:96:c3:
                    83:ac:e7:35:a4:a5:d3:56:f8:93:24:73:b6:ef:31:
                    55:f2:af:23:a6:d7:7b:07:df:3c:6e:c1:62:5f:d0:
                    34:83:19:6a:47:0a:ef:47:f0:7e:74:fb:aa:89:3f:
                    81:67:06:92:94:9a:08:57:24:78:c2:e7:44:1d:08:
                    52:39:97:a4:8b:5f:3e:e2:2f:1a:11:5d:a8:b8:37:
                    18:e4:ad:8e:56:d8:ae:8e:65:12:f5:34:67:09:2b:
                    8e:03:9e:b3:04:8e:37:83:77:44:6f:a4:3d:4e:3d:
                    e8:4d:58:72:19:97:19:d5:aa:67:5d:6e:c3:be:6f:
                    9f:ed:62:b9:aa:b0:98:69:4e:42:f8:ff:3c:d7:02:
                    3e:cf:13:fa:16:72:e8:39:57:f4:d5:1b:a6:13:8b:
                    f2:a4:42:29:2e:ed:17:6f:c4:9a:c9:df:b1:78:48:
                    98:3a:3f:01:e6:38:bb:65:b1:d9:45:0b:5b:75:e4:
                    ca:0f:82:1f:47:a2:3e:94:fe:91:e3:5e:c0:3d:77:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:74:C5:2F:CE:FE:A5:B5:43:D0:BC:6B:3F:A6:58:91:A7:8D:EC:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.184.0/22
                  177.84.144.0/21
                IPv6:
                  2804:2b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262587

    Signature Algorithm: sha256WithRSAEncryption
         cd:ee:29:b4:8b:c5:11:36:d3:94:50:05:ec:e9:db:ac:e8:85:
         fd:3c:dd:5a:c4:72:eb:3a:62:88:e2:da:52:a6:91:9b:ca:eb:
         33:c1:9b:27:91:e1:83:4b:b4:6a:85:89:c8:ad:9a:88:3f:20:
         b6:31:50:a1:0f:ec:51:f9:6b:d2:bc:13:c8:55:a5:3f:56:81:
         a3:c3:dc:6b:ac:04:47:5b:f7:b9:6d:6c:5d:e3:82:e8:14:c4:
         d8:6f:a8:24:63:dc:61:e4:76:ad:b2:44:dd:a0:47:ae:56:17:
         b3:de:ad:b2:f6:f1:3a:43:e1:8a:07:65:b1:d2:2c:8b:d7:a7:
         54:f1:32:3e:ab:00:a7:36:23:41:fe:9d:b5:02:8d:6e:05:43:
         5c:b6:05:8e:23:8b:c7:16:7b:6f:13:46:58:87:6d:5f:b6:ac:
         ee:e2:7b:ef:4d:d5:53:69:6c:1c:69:c1:75:b8:7f:e9:35:2e:
         1a:a9:d6:a7:d6:71:07:3b:23:88:f2:5d:19:00:95:bc:6f:93:
         80:9c:67:84:e1:39:8a:63:8d:d0:b0:5e:ae:6d:fd:78:bf:b2:
         b9:ff:56:5a:d6:b1:0f:c1:e2:c9:e0:51:ec:c5:66:66:3c:71:
         fc:d1:84:82:84:a3:77:1d:6c:1b:15:52:16:a3:93:7e:3b:95:
         96:59:b5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 14:46:57 2024 by rpki-client on console-fra.rpki-client.org