Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4945AF79A9E9D631C984CDFDD1526314768E5FDD.cer
File:                     4945AF79A9E9D631C984CDFDD1526314768E5FDD.cer (raw, json)
Hash identifier:          j9G+6rk4IsIXdU5Cgqdf4XuZFuOFn+GmetLTsT5e4XY=
Subject key identifier:   49:45:AF:79:A9:E9:D6:31:C9:84:CD:FD:D1:52:63:14:76:8E:5F:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1247A952041896A87F208589ED1AE5B4FAE9AA4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/1/4945AF79A9E9D631C984CDFDD1526314768E5FDD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:55:48 +0000
Certificate not after:    Wed 02 Apr 2025 19:00:48 +0000
Subordinate resources:    AS: 264125
                          IP: 138.94.44.0/22
                          IP: 2804:22d4::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:47:a9:52:04:18:96:a8:7f:20:85:89:ed:1a:e5:b4:fa:e9:aa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:55:48 2024 GMT
            Not After : Apr  2 19:00:48 2025 GMT
        Subject: CN=4945AF79A9E9D631C984CDFDD1526314768E5FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:3a:cd:51:93:d2:f4:79:7f:0a:71:ef:67:
                    c8:9c:20:ef:fd:ca:96:d2:a7:e1:27:3d:10:95:72:
                    dc:db:c1:c0:60:83:18:12:77:71:7f:80:cd:70:f3:
                    57:3c:7d:02:78:ae:09:f5:c6:ab:e0:9e:19:f4:b0:
                    1e:91:ae:e6:86:df:da:b3:f5:e5:c6:da:68:fb:17:
                    d5:61:8f:95:ab:79:ea:a4:e0:22:96:b8:34:d4:0a:
                    b7:9e:66:db:f4:ef:f6:9a:a2:38:f7:25:ef:2c:b1:
                    f8:36:99:0d:26:31:50:10:bb:25:10:04:0e:30:3a:
                    a7:a9:de:0f:03:39:67:32:99:39:f8:2d:51:43:3a:
                    48:ee:e7:3f:a6:76:86:83:1e:40:09:50:09:65:cf:
                    8b:ba:5f:a3:2f:18:cf:4e:99:ce:e6:ca:86:2c:45:
                    3f:64:29:7e:d3:d6:eb:cb:8b:54:17:8e:62:e1:dd:
                    86:28:5b:08:2a:f7:b0:02:fa:5b:7e:ff:9c:9a:a4:
                    4a:36:d9:96:94:0e:f3:3b:ba:db:f2:39:ca:91:95:
                    4e:86:34:57:ea:2f:81:8a:66:bc:29:69:53:72:45:
                    8b:e5:ec:45:17:5f:b1:20:c7:14:36:27:ac:72:67:
                    85:09:38:fd:a0:c7:db:9c:6b:87:6b:ad:fd:d3:f6:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:45:AF:79:A9:E9:D6:31:C9:84:CD:FD:D1:52:63:14:76:8E:5F:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/1/4945AF79A9E9D631C984CDFDD1526314768E5FDD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/22
                IPv6:
                  2804:22d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264125

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:94:f1:91:98:66:0a:36:8a:b2:ff:7f:31:0c:74:94:02:
         4a:c8:f4:fa:56:b2:8f:6c:79:ba:48:73:6b:46:df:d6:29:0f:
         f3:2b:ba:16:d4:69:f1:93:2d:1c:18:cd:dc:06:ef:86:4e:cf:
         63:aa:a5:26:96:c8:5c:49:17:c1:0e:ab:20:88:5f:14:9e:57:
         9a:16:9b:de:d7:e2:49:95:62:fd:dc:89:b3:16:53:14:97:40:
         6c:04:56:36:65:ef:06:0e:c3:fa:b8:2d:8b:b2:6a:1d:b0:5a:
         96:b0:89:ab:25:28:f7:fd:db:8b:d6:f9:47:e0:d1:28:6f:b8:
         26:b4:30:33:fb:2a:6e:74:4b:5b:9d:c1:12:16:c6:73:c8:3c:
         c2:36:f2:aa:22:6a:8f:4d:3c:a9:3c:3e:d9:62:09:fc:59:44:
         5a:a7:b0:53:ad:f6:a1:8d:28:db:e7:06:41:de:be:01:cd:d6:
         cb:63:b8:b9:0f:0c:79:04:6c:22:53:aa:06:7b:bc:24:c8:01:
         49:e1:d4:31:df:5a:df:d3:11:bd:fe:a5:f7:b6:00:83:08:7e:
         4d:93:c2:68:59:df:d9:80:f4:ff:08:23:ad:3c:bb:84:c6:2f:
         eb:22:c5:0a:16:83:05:4d:1d:f7:0a:25:2d:de:4f:1b:66:bd:
         75:4f:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org