Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
File:                     4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer (raw, json)
Hash identifier:          VGddQXBEKty+13HnyuJ7Dtnb83Db4pA3HBwrRUJwiS4=
Subject key identifier:   4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DEDAC5988631FB783A3280C1F68D4252E5207F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:58:03 +0000
Certificate not after:    Thu 03 Apr 2025 20:03:03 +0000
Subordinate resources:    AS: 28610
                          IP: 186.209.88.0/22
                          IP: 2804:dc0::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 12:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:ac:59:88:63:1f:b7:83:a3:28:0c:1f:68:d4:25:2e:52:07:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:58:03 2024 GMT
            Not After : Apr  3 20:03:03 2025 GMT
        Subject: CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:58:b7:12:4d:67:90:b3:d3:55:bd:75:fe:
                    75:ad:22:6a:b8:34:4d:4e:80:07:92:08:3b:ac:7c:
                    9d:2c:91:e4:cd:87:2b:e5:2c:0f:d9:1f:88:1e:02:
                    be:5c:e6:4a:8c:6a:d1:dc:f0:45:4b:4e:8d:7c:01:
                    f3:1f:c6:ee:66:1d:e3:58:70:20:eb:e3:9c:1d:95:
                    5d:fa:b4:29:93:6d:31:a2:20:57:8f:26:0f:eb:cf:
                    2c:e2:5a:8d:95:dc:37:31:58:1f:cc:2e:45:07:bb:
                    55:74:da:22:7a:45:c7:24:59:70:21:7b:c2:8e:ca:
                    6b:c1:c3:2f:2f:66:08:37:ff:cb:15:a8:4a:85:c9:
                    56:54:90:f0:d9:03:1d:ee:7c:dc:a0:84:75:b9:39:
                    15:82:48:11:aa:b1:48:70:e8:b2:f8:94:4a:f3:fc:
                    79:76:50:79:7b:d7:a0:ab:a8:e7:59:ab:66:e7:ef:
                    7b:3b:a1:f3:50:26:2c:1c:32:f9:dd:d7:4d:88:59:
                    01:0c:52:18:b2:26:30:99:ec:84:e9:8e:5f:53:8f:
                    b6:f9:b1:77:5c:2d:05:10:b8:ad:27:a2:c4:3f:51:
                    f7:87:6b:c9:18:af:a6:f2:65:d3:bf:69:2a:d0:47:
                    6d:a3:f9:e3:67:a8:ca:0e:15:99:d0:a5:7f:c7:b9:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/22
                IPv6:
                  2804:dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28610

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:3a:9f:20:7d:e0:89:08:ca:ff:77:3e:0c:79:92:ce:99:
         21:ba:df:58:80:38:ee:bf:ac:36:e4:2e:f1:ed:77:c1:f6:14:
         77:15:54:fd:25:76:ad:35:6c:fc:17:37:a9:df:ed:d0:91:cb:
         e8:b1:aa:c9:07:e1:f1:11:a4:aa:32:0e:a8:0b:4f:09:5c:4a:
         29:6a:d1:54:7d:45:a1:83:88:8b:0a:8d:d3:de:73:3c:e0:f9:
         b7:56:60:e1:7c:79:c3:0a:ff:75:75:4a:56:3c:3d:b1:a9:c7:
         cf:54:16:04:7a:f3:7f:f3:c4:b1:1a:20:d4:30:c9:0a:73:27:
         02:0c:99:cf:ac:13:68:94:b1:f7:c9:15:a1:e8:67:e2:18:c4:
         90:d1:ff:3f:cc:f8:12:11:9d:71:2f:2d:e8:14:4a:fe:5c:5a:
         5f:cc:ba:d7:45:bb:ab:e6:68:90:cb:69:0d:4e:79:0c:3e:82:
         88:c9:aa:98:0d:08:fe:29:1d:57:b0:23:53:71:43:52:fb:86:
         e9:0f:99:bb:99:29:e7:25:e7:cc:5a:6d:45:e9:f2:44:b0:05:
         e1:12:c7:79:f6:d6:2a:00:e0:44:c0:f1:02:4c:0a:ff:70:cb:
         db:92:b6:4f:f7:02:bc:a5:6b:38:fb:86:fd:54:95:c7:65:e3:
         5c:36:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:04:05 2024 by rpki-client on console-ams.rpki-client.org