Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49296F18D7D257E39C50652D5346D83D79757534.cer
File:                     49296F18D7D257E39C50652D5346D83D79757534.cer (raw, json)
Hash identifier:          DenC3fbZJHbwL/fY+wJpmu3UtggjKqPw6Qm/u4XGA5s=
Subject key identifier:   49:29:6F:18:D7:D2:57:E3:9C:50:65:2D:53:46:D8:3D:79:75:75:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1089D601C87BD1368DD6AE0338A46257FE81B254
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/49296F18D7D257E39C50652D5346D83D79757534.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 18:36:57 +0000
Certificate not after:    Tue 22 Apr 2025 18:41:57 +0000
Subordinate resources:    AS: 270874
                          IP: 186.195.244.0/23
                          IP: 2804:72c4::/32

Validation:               Failed, certificate revoked on Mon 13 May 2024 04:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:89:d6:01:c8:7b:d1:36:8d:d6:ae:03:38:a4:62:57:fe:81:b2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 18:36:57 2024 GMT
            Not After : Apr 22 18:41:57 2025 GMT
        Subject: CN=49296F18D7D257E39C50652D5346D83D79757534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:ce:bf:3f:cb:f5:81:1d:a5:76:dd:88:86:
                    9a:45:0d:60:1c:e7:b2:c0:20:a7:68:c8:b6:31:99:
                    7b:a9:66:c3:8d:df:54:58:c8:80:4b:99:ff:6f:d6:
                    0c:52:a7:5b:22:e7:48:4c:5e:4f:b7:c5:19:5d:95:
                    c9:2c:f9:24:7d:f4:81:ef:44:11:c3:f2:9c:4d:20:
                    01:11:3d:cd:15:5b:7e:cc:cf:7d:fc:bf:10:1b:55:
                    02:2b:0d:57:74:6c:f2:bc:71:52:32:a0:49:47:b5:
                    28:11:e8:34:ac:38:33:c1:bb:83:97:1d:c0:aa:b3:
                    20:d8:e5:8d:05:8f:ed:66:05:72:12:9a:38:f0:fe:
                    44:ea:71:c7:3c:5a:5e:9e:75:8e:29:3f:8d:0a:fe:
                    90:8a:8c:68:8f:df:93:4f:9e:7e:b8:84:97:6d:9a:
                    89:59:af:43:32:c8:24:0d:a4:3b:1e:a4:df:4d:9d:
                    e3:e7:f1:5b:34:33:1f:13:56:ce:f5:37:69:b8:8a:
                    82:83:2a:ca:12:c0:37:41:d0:96:5c:7f:e9:0c:40:
                    02:8e:3d:6c:45:c7:f7:aa:b6:79:cf:e6:0c:2c:d3:
                    96:ee:ef:76:3e:50:8b:b0:53:dd:1e:5d:e6:df:0c:
                    d7:a3:87:2d:35:65:7f:0e:b1:79:a3:72:e4:77:8e:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:29:6F:18:D7:D2:57:E3:9C:50:65:2D:53:46:D8:3D:79:75:75:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/49296F18D7D257E39C50652D5346D83D79757534.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.244.0/23
                IPv6:
                  2804:72c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270874

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:8f:89:76:a5:c0:79:d7:67:e1:1b:60:ec:4a:e1:3c:9f:
         94:96:e1:8b:bd:ec:09:25:e3:32:82:a5:eb:4f:57:e3:6f:10:
         00:48:24:f2:6b:c4:14:ee:ee:d6:06:2d:96:da:b1:fa:3d:ff:
         aa:48:e6:4a:15:46:a5:f7:98:56:73:56:59:e1:6e:c8:74:a4:
         ba:a9:e6:6d:ae:fe:b2:33:e3:66:80:cd:08:db:04:a1:e1:47:
         7a:0e:3e:f7:29:3d:d9:39:d1:48:1e:23:f7:8a:81:1d:76:c8:
         6f:65:62:b3:a0:e5:e9:cc:88:f3:0d:bb:f9:1d:3e:4f:60:c0:
         53:d4:5c:e1:d0:2a:3b:e0:b9:96:cf:ed:3e:cf:d7:3f:f5:ad:
         c4:0e:17:ef:9b:50:20:65:47:38:ba:16:ea:68:a4:d7:29:4d:
         89:50:1f:c3:ee:c7:e0:94:44:af:6c:7f:8d:e2:8d:62:4a:7d:
         20:41:15:09:28:b1:5e:8b:1c:d0:47:75:7b:ec:00:2e:ff:ca:
         0a:d7:71:be:79:8b:35:8d:67:8f:11:b1:48:3d:3c:93:14:46:
         eb:3b:05:84:d6:b4:77:7e:14:57:3c:78:67:64:53:6b:c8:55:
         f7:d3:8f:f8:43:95:cf:7d:86:4e:c4:98:c8:7b:49:b1:a8:7b:
         3a:db:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org