Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.cer
File:                     4A6149A4F78C72B47BD82323BFC897F76AFA79B7.cer (raw, json)
Hash identifier:          wi11Tns0xATpmC9vteQ6ghfBlfeUdE4wkfiPY8xGimw=
Subject key identifier:   4A:61:49:A4:F7:8C:72:B4:7B:D8:23:23:BF:C8:97:F7:6A:FA:79:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39DFE81A7A4DD44784D2387FC1D9ED427E386ABF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:00:45 +0000
Certificate not after:    Thu 03 Apr 2025 08:05:45 +0000
Subordinate resources:    AS: 264340
                          IP: 138.185.56.0/22
                          IP: 2804:2650::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 20:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:df:e8:1a:7a:4d:d4:47:84:d2:38:7f:c1:d9:ed:42:7e:38:6a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:00:45 2024 GMT
            Not After : Apr  3 08:05:45 2025 GMT
        Subject: CN=4A6149A4F78C72B47BD82323BFC897F76AFA79B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:82:45:dc:e2:4d:83:8b:12:c5:51:a1:63:
                    37:98:16:c3:4e:46:44:1e:0e:57:4b:65:8e:08:4c:
                    2a:a8:7a:75:38:5d:f3:1b:da:58:ce:78:58:77:dd:
                    8e:5e:e7:c1:d0:4f:31:86:8b:cc:1b:94:84:d7:02:
                    e2:4d:2b:d6:24:df:2f:a9:67:90:fc:96:93:03:13:
                    df:ff:1f:a3:b3:0d:7c:c5:4c:a1:78:6d:79:e8:b0:
                    83:dd:ee:48:57:e7:c6:ca:ec:8a:ab:e3:b4:7d:4f:
                    cc:0c:e2:d1:fe:ef:9d:39:c5:c7:2f:fc:7d:74:06:
                    16:4a:e3:3e:17:fa:65:23:76:59:1c:b7:0b:8d:37:
                    31:5f:9b:ac:97:d6:6a:2a:78:dc:f5:88:c9:ca:be:
                    86:d5:9e:9b:d6:6e:9c:17:6f:26:51:77:b5:67:c1:
                    d8:46:ee:ef:98:fb:66:ab:b4:d5:ca:75:ca:d4:33:
                    de:d4:4e:ee:fc:05:c4:5b:e8:57:42:ed:70:e9:ab:
                    90:c3:3a:8b:13:38:9c:c8:e4:8b:0e:d3:61:41:6c:
                    66:b1:ab:8e:d1:60:08:cb:3f:d5:41:9a:2c:7b:7d:
                    69:85:b5:f0:f5:8d:30:73:16:1c:cf:61:87:16:9c:
                    1a:14:8b:9d:c3:a9:05:cb:89:41:85:08:0c:e1:c5:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:61:49:A4:F7:8C:72:B4:7B:D8:23:23:BF:C8:97:F7:6A:FA:79:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.56.0/22
                IPv6:
                  2804:2650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264340

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:24:4a:d4:33:e1:71:d5:aa:f2:38:f3:2c:eb:d3:7a:90:
         ad:ab:48:59:6b:49:ed:6d:e9:c5:5e:43:ad:41:8d:38:8f:4d:
         96:90:ab:a0:83:f6:8b:57:28:b0:51:15:44:f2:96:9b:c9:8c:
         3f:cc:8b:21:d2:10:1a:a5:ca:4f:62:6a:29:bb:0d:ab:03:b4:
         5b:9a:c6:d0:83:44:9b:24:db:a4:b5:65:b8:9f:e2:4a:98:6d:
         9a:8a:73:10:92:80:9e:cd:ef:90:3d:e2:d6:13:bc:29:af:79:
         9e:1e:26:25:05:f4:8a:50:db:3e:da:cf:87:de:26:88:ab:18:
         61:2e:b1:40:36:c8:53:90:43:08:7b:ab:73:86:91:d4:c8:36:
         e8:68:3e:83:01:bb:55:05:36:91:61:42:ee:7a:f0:d6:d4:0a:
         83:b1:94:7a:64:83:92:ab:5e:16:91:84:70:69:b0:90:b9:da:
         75:45:bf:a4:d3:a5:cd:2a:03:92:b5:c2:f5:25:2b:de:f6:2e:
         18:aa:4d:73:ac:5f:d0:94:62:8d:0d:88:fb:c1:d2:3a:2c:d2:
         15:51:29:77:ae:e2:ec:a9:41:1d:d5:9d:93:b1:10:b6:43:18:
         d8:b8:c0:3c:6f:40:95:2e:53:7f:a2:7f:da:c6:42:98:45:31:
         87:d0:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 22:44:12 2024 by rpki-client on console-fra.rpki-client.org