Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer
File:                     4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer (raw, json)
Hash identifier:          iAFx6IyM1UJul7HxsNUb1FvkjrGR9TGJIB8rPakMyIE=
Subject key identifier:   4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26AEEDA1E317BF06E3A8B3B911A4CB419859118A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:21:28 +0000
Certificate not after:    Thu 03 Apr 2025 03:26:28 +0000
Subordinate resources:    AS: 267940
                          IP: 45.165.216.0/22
                          IP: 2804:5588::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 19:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ae:ed:a1:e3:17:bf:06:e3:a8:b3:b9:11:a4:cb:41:98:59:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:21:28 2024 GMT
            Not After : Apr  3 03:26:28 2025 GMT
        Subject: CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:b8:5c:38:6d:be:e4:66:60:cb:ab:c4:1e:
                    bf:1f:24:60:37:ae:8c:47:ab:2e:37:0f:06:bf:88:
                    a8:1d:4a:77:d6:d0:b7:a1:3f:98:26:e6:8e:99:5a:
                    38:3b:00:ff:78:a6:83:12:b5:9a:8d:9e:08:97:cf:
                    db:78:ba:7a:10:6d:1a:0d:07:7b:3b:c2:41:85:69:
                    da:cc:aa:7f:8e:1f:26:f7:12:c8:f4:a0:a3:44:33:
                    ef:f3:b6:87:f2:d2:10:1c:b2:8f:a8:bc:32:f1:b6:
                    f8:dc:32:4a:1c:9c:c6:6a:98:b9:99:26:19:b2:e2:
                    5c:19:2b:43:b7:a4:63:de:de:82:62:2d:67:43:32:
                    19:66:2a:84:65:f0:61:1c:63:4c:d3:a8:04:2c:3d:
                    b1:21:c9:7d:da:41:9f:a4:12:6f:bb:c4:b5:68:84:
                    ad:9e:01:6b:2c:e5:a5:d8:7a:59:fd:5a:bb:f5:c8:
                    7b:d3:b3:5f:bf:03:ec:48:1d:8f:ff:24:ac:84:e5:
                    55:37:b5:16:37:45:88:c2:bf:fc:a0:9d:75:25:39:
                    9b:76:ab:7f:66:96:75:dc:06:23:d6:bf:44:3b:52:
                    b9:14:bd:cc:96:d8:2a:82:43:22:09:91:fd:63:db:
                    64:04:da:fe:c4:11:52:a1:07:6d:0e:57:cb:f1:d4:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22
                IPv6:
                  2804:5588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267940

    Signature Algorithm: sha256WithRSAEncryption
         80:30:5f:84:9e:c6:1b:e3:c8:c2:6c:01:00:8a:29:6c:8c:c2:
         cd:8c:a8:6d:20:00:2d:47:9a:75:cf:bc:99:bd:e0:22:44:bc:
         b3:73:13:87:4b:67:b7:b9:71:30:08:01:cf:39:09:8c:92:ec:
         c3:94:6a:61:be:a1:a0:6e:78:78:09:ec:ea:1e:20:8f:69:1a:
         f1:b9:71:14:d3:96:e0:52:82:dc:fe:8a:52:90:23:73:74:03:
         2d:35:3f:51:c3:24:ed:85:d4:90:19:99:bd:64:92:be:f9:e6:
         bc:e9:c6:39:d6:85:8c:9f:e7:cf:cd:9b:7e:97:d0:26:ed:f7:
         0c:50:23:c0:9a:a3:db:dd:bf:18:ff:a7:b0:4a:a4:e7:dd:47:
         f6:b7:bb:fe:cf:af:c8:64:d7:61:a8:7c:75:8e:00:eb:5b:d0:
         fc:05:d6:09:b7:b8:98:49:29:1c:39:da:7c:ec:e6:80:2c:88:
         88:e5:39:7b:8a:38:de:9f:57:ce:9f:28:28:5b:b3:80:60:2b:
         fa:da:a2:d9:65:ee:db:52:b5:21:ee:4d:5e:ab:50:c1:84:b6:
         1c:f0:81:af:1f:d7:98:7e:30:28:14:46:ee:a2:75:9c:9a:1f:
         12:16:8b:a6:22:59:80:09:e6:14:86:7e:29:e6:f4:d6:86:bd:
         1d:ac:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org