Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49C542D6A23FCE1ECD9F86BBD2A57A408A20B614.cer
File:                     49C542D6A23FCE1ECD9F86BBD2A57A408A20B614.cer (raw, json)
Hash identifier:          kHx+pDI17pTohsxtOR7AkCPavPruXNImO98J4UCm0CU=
Subject key identifier:   49:C5:42:D6:A2:3F:CE:1E:CD:9F:86:BB:D2:A5:7A:40:8A:20:B6:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1105572CA276CEFD742614F3B9730A738E54F778
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/1/49C542D6A23FCE1ECD9F86BBD2A57A408A20B614.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:48 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:48 +0000
Subordinate resources:    AS: 271011
                          IP: 190.8.172.0/22
                          IP: 2804:74e8::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 16:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:05:57:2c:a2:76:ce:fd:74:26:14:f3:b9:73:0a:73:8e:54:f7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:48 2024 GMT
            Not After : Apr  2 18:32:48 2025 GMT
        Subject: CN=49C542D6A23FCE1ECD9F86BBD2A57A408A20B614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:ac:33:2a:8b:ba:1e:2b:23:0d:68:9e:28:
                    9e:28:fb:16:97:97:b6:7a:77:cb:aa:0f:99:45:86:
                    2f:6b:5f:ff:46:e0:95:ba:e1:c5:dc:d5:84:93:22:
                    93:6a:1e:5e:c6:39:11:77:df:d1:fb:95:ea:1d:b1:
                    d0:e9:9d:69:2e:3e:65:9d:80:25:d8:db:a6:f7:b2:
                    d9:30:8e:fe:4b:52:3a:69:5e:33:15:82:67:de:5c:
                    5c:9c:ac:83:8a:e7:9a:68:cf:89:38:d5:02:76:5a:
                    e1:a3:46:f7:af:6d:44:f5:8b:2f:ae:79:6a:48:a3:
                    5d:29:94:1c:1b:ef:dc:56:5f:bf:e7:0b:f1:ec:c8:
                    b1:31:ed:b5:fa:e0:82:ce:6c:c9:e9:78:39:01:10:
                    b7:65:f5:be:a6:b1:e0:15:14:04:cc:9a:f8:d2:db:
                    7e:a1:2b:ed:35:90:be:b3:ee:59:1e:68:d0:af:e5:
                    e1:a9:07:17:7c:96:b7:71:89:93:bf:a6:0a:a6:5a:
                    a5:95:2d:d7:eb:ab:ef:eb:19:ad:c9:08:13:68:7b:
                    e3:93:e2:67:65:75:99:41:fe:2f:eb:60:4c:bd:a0:
                    bf:83:04:a4:64:e4:bb:ec:29:4f:a2:af:d9:40:95:
                    62:2b:c2:0b:45:11:20:dd:0d:ce:4d:3a:8a:9d:4a:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:C5:42:D6:A2:3F:CE:1E:CD:9F:86:BB:D2:A5:7A:40:8A:20:B6:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/1/49C542D6A23FCE1ECD9F86BBD2A57A408A20B614.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.172.0/22
                IPv6:
                  2804:74e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271011

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:81:b8:bd:4b:06:77:f9:3d:80:3d:e1:61:15:37:98:59:
         c3:a8:60:b0:a4:05:05:4c:ca:1b:01:f1:16:c9:79:e6:9f:66:
         53:2d:b2:56:ab:28:1f:56:11:bc:52:db:97:cf:0a:18:c9:6a:
         cb:fe:24:78:b6:61:79:6a:03:eb:04:c4:d1:f0:d0:be:a9:90:
         a0:f4:52:54:fb:7f:b5:8b:90:d8:9c:ea:f6:2c:f2:a0:09:f7:
         6b:d6:b0:b1:12:38:11:f1:ed:ee:f9:cb:9b:01:ab:21:73:59:
         f2:0c:34:69:8d:03:20:43:99:cf:39:17:7f:57:d9:04:08:b6:
         17:6e:4c:63:f9:bc:9d:21:4d:67:48:36:30:11:42:a6:05:85:
         47:4a:ab:95:a5:74:00:1b:17:d7:20:5f:17:6d:b8:ea:9d:6d:
         4b:fd:fc:b7:8a:48:6f:6d:a4:25:5f:f2:0e:27:3d:00:ea:8c:
         cb:11:cd:00:35:23:10:67:8d:81:e0:a6:63:1c:2b:21:4c:f0:
         c2:24:e0:d0:7b:21:cb:2c:b4:e4:aa:32:3a:3a:48:a5:aa:81:
         7b:90:72:81:0f:dd:c8:c0:9c:a4:be:62:f2:c0:6d:b6:b3:58:
         58:ab:83:0c:55:dd:4b:a7:23:b5:f4:6e:2a:88:fa:3f:1b:17:
         9c:c5:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:50 2024 by rpki-client on console-ams.rpki-client.org