Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
File:                     49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer (raw, json)
Hash identifier:          rztY0zzgfjUlYNbZ2PDJYW6MUt/uKPzqeY9duMj/NYY=
Subject key identifier:   49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       040F1B3C40B5E3B43C5365A4AB5327ECDCE53F70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:13:29 +0000
Certificate not after:    Thu 03 Apr 2025 01:18:29 +0000
Subordinate resources:    AS: 271336
                          IP: 177.71.100.0/22
                          IP: 2804:79ec::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 07:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:1b:3c:40:b5:e3:b4:3c:53:65:a4:ab:53:27:ec:dc:e5:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:13:29 2024 GMT
            Not After : Apr  3 01:18:29 2025 GMT
        Subject: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:47:4b:de:f8:43:ae:2b:95:63:c2:b0:88:
                    ad:35:54:a3:92:b2:3c:5b:a8:1b:6f:09:27:d9:12:
                    99:36:54:f3:8b:57:65:c9:0c:71:59:f2:43:46:de:
                    2b:bc:c4:e6:de:68:cb:ae:c0:3f:5a:e0:fb:23:4b:
                    32:e3:d9:2e:d7:ae:9f:b7:cc:8b:79:97:9b:1e:b6:
                    c8:c2:35:7e:31:17:70:d1:88:b4:0e:f6:35:aa:23:
                    b8:f8:a9:82:29:3f:1a:98:24:eb:a3:4b:53:c1:0a:
                    78:d8:b9:16:8b:01:1d:08:4f:6e:73:11:64:c1:79:
                    33:c2:4e:2f:84:d1:d4:0c:c0:c4:60:fc:95:be:57:
                    a1:86:93:fa:70:c8:fd:07:df:65:62:9c:71:70:84:
                    1b:5b:bf:82:40:0a:c4:0b:c7:2c:bc:a1:60:b1:66:
                    2e:7c:cf:a2:2c:26:18:ba:d8:c6:01:24:9c:e1:fd:
                    bf:f2:79:41:26:1a:39:ab:a3:4c:75:88:28:72:1d:
                    c0:be:15:b9:8a:7a:2f:f9:34:25:b1:a6:7b:0b:fe:
                    61:4f:40:52:c9:46:a4:be:f6:95:c8:88:5a:16:80:
                    fa:62:61:ba:de:55:18:bf:ca:b0:4a:30:d1:6c:d4:
                    17:a5:f9:2e:af:46:38:4d:e1:1f:5d:49:c7:70:a9:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/22
                IPv6:
                  2804:79ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271336

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:22:62:95:62:ec:dd:54:fe:95:24:2c:06:c3:72:7a:55:
         73:79:c3:d4:71:a3:56:b6:11:66:f7:e2:1e:b6:12:85:da:ac:
         02:f6:6f:45:65:ed:cc:dc:80:a0:73:79:5a:a4:a8:b1:ec:a1:
         8a:ee:68:65:f0:fc:4c:ed:9c:36:d8:6e:31:c5:45:c7:d4:d9:
         7f:07:0d:e5:3c:64:36:16:e3:13:94:48:b8:70:7d:70:de:8d:
         2d:76:8e:6c:e6:ae:ec:58:ef:f5:b9:db:0c:57:91:c6:dc:c9:
         e2:34:a8:53:5e:d6:1c:cb:93:c1:e8:ab:47:46:b9:8f:1a:91:
         36:88:9e:7c:be:1f:33:53:01:88:dd:be:74:9f:c2:db:b7:6a:
         93:6a:49:b9:8d:05:e3:ad:35:f0:e1:65:4a:16:da:f0:1f:52:
         6d:f3:ae:eb:41:13:38:42:74:42:64:68:79:ad:35:f9:83:a4:
         41:c0:18:65:23:25:df:ea:d3:7b:9f:1e:2c:af:bf:c2:9f:4f:
         6a:18:13:3e:a7:52:60:61:95:7c:b4:bf:69:d9:d0:65:3b:31:
         56:2e:31:f2:78:28:49:6f:f9:02:d5:d9:5f:2a:aa:e7:6c:79:
         2a:1f:83:c9:bb:3e:ec:59:60:76:af:7c:bb:c6:25:3c:da:2e:
         8a:b8:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:04:39 2024 by rpki-client on console-fra.rpki-client.org