Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A5F398F3CAF6336066786D92FC4F51FD3AEC1E3.cer
File:                     4A5F398F3CAF6336066786D92FC4F51FD3AEC1E3.cer (raw, json)
Hash identifier:          AdrI7IzHili3YlYvEkMqEx6Ltgasl2zAlnlq4QG6+kA=
Subject key identifier:   4A:5F:39:8F:3C:AF:63:36:06:67:86:D9:2F:C4:F5:1F:D3:AE:C1:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2084E404BD2DFEB65713271556C48824B33BD974
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/1/4A5F398F3CAF6336066786D92FC4F51FD3AEC1E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:21 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:21 +0000
Subordinate resources:    AS: 270253
                          IP: 200.110.204.0/22
                          IP: 2804:692c::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:84:e4:04:bd:2d:fe:b6:57:13:27:15:56:c4:88:24:b3:3b:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:21 2024 GMT
            Not After : Apr  2 19:03:21 2025 GMT
        Subject: CN=4A5F398F3CAF6336066786D92FC4F51FD3AEC1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:f5:8f:0a:02:74:62:ee:bd:c0:6e:eb:f5:
                    a0:d2:4c:df:0c:aa:1c:48:38:d8:6b:cf:b3:4f:f9:
                    24:3c:c0:91:1c:89:14:57:55:3a:58:35:2b:f7:60:
                    42:49:95:05:df:9e:6a:47:aa:2d:24:b6:d4:95:9b:
                    d6:a4:e4:eb:b5:81:4d:22:72:a0:dc:34:39:c0:5b:
                    ce:2b:c2:fb:a1:e6:ae:6f:25:bd:ff:12:9f:27:bd:
                    9c:0c:a1:45:76:f9:25:b4:33:5a:a8:5b:f1:a1:23:
                    9f:61:b4:6e:d7:fa:c9:cb:dc:35:30:f9:e0:1d:92:
                    be:79:ed:6d:04:96:da:84:3e:35:cf:7c:80:66:8d:
                    7c:aa:a8:1e:e2:de:65:92:72:42:fc:62:21:e3:a0:
                    f1:dc:0d:03:2d:1c:a3:e4:d5:be:87:13:9f:91:d3:
                    e1:a4:59:20:de:7f:ea:9c:02:81:48:be:bf:19:d7:
                    70:ed:be:e7:a3:96:1d:1d:01:28:87:d5:9f:b6:71:
                    b9:33:00:a9:71:12:95:ba:76:6e:9e:04:43:14:0b:
                    b1:86:3d:b7:a9:0b:2d:1a:c0:c4:3d:24:a9:39:01:
                    9a:a9:17:c0:5a:d5:94:6b:01:16:3d:77:26:b8:8c:
                    5c:19:b2:75:a0:4f:ad:ef:08:80:e8:9f:ae:51:a7:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:5F:39:8F:3C:AF:63:36:06:67:86:D9:2F:C4:F5:1F:D3:AE:C1:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/1/4A5F398F3CAF6336066786D92FC4F51FD3AEC1E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22
                IPv6:
                  2804:692c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270253

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:96:16:1b:24:67:13:b3:9d:5c:2e:9c:8b:a5:10:96:1a:
         fe:3f:69:c5:3a:50:0e:9f:15:a7:74:2d:ab:c9:e5:5f:59:14:
         b8:a2:66:e4:c5:ed:82:77:47:07:81:32:91:4b:55:0c:9b:9c:
         6c:0f:98:41:54:11:55:70:c7:5e:48:a4:d7:22:9a:f8:78:a9:
         be:48:72:3f:76:90:6d:65:23:0d:58:a4:32:67:01:27:7e:6b:
         c5:10:e8:31:f8:63:a4:97:7a:6d:55:1a:78:d0:ce:44:c0:d7:
         3a:67:11:37:d0:31:de:04:74:92:55:7f:08:30:da:30:2a:3a:
         ef:a4:d4:aa:87:ea:c8:e3:81:4f:aa:df:3b:25:42:37:92:d0:
         76:11:43:73:dd:5f:c7:5f:3b:f4:eb:07:12:03:4b:06:e8:76:
         07:cd:92:55:c2:aa:c0:6d:43:7c:e5:29:93:d7:a9:c9:2b:c6:
         19:3f:80:cc:17:d0:af:ab:15:2b:73:b2:5c:95:55:17:7c:ef:
         4e:a9:37:f4:92:a7:60:28:90:16:6d:68:db:26:57:d6:7f:65:
         6a:97:fb:d0:e6:36:d9:c8:78:02:23:fa:69:77:1c:83:a4:0f:
         75:a1:83:65:99:f7:b2:b1:14:de:8c:2e:bd:7e:3d:24:6f:92:
         28:66:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org