Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BE51240CCABD50479983A27F9662DE2441631E7.cer
File:                     4BE51240CCABD50479983A27F9662DE2441631E7.cer (raw, json)
Hash identifier:          Jjohoop9Y8F4Xb71SKWdz8P6KKvzc3RT6XjgH4c+fg0=
Subject key identifier:   4B:E5:12:40:CC:AB:D5:04:79:98:3A:27:F9:66:2D:E2:44:16:31:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C4B746A334EFA3AE2FC478349B5F73125BA6466
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/1/4BE51240CCABD50479983A27F9662DE2441631E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:57:23 +0000
Certificate not after:    Wed 02 Apr 2025 19:02:23 +0000
Subordinate resources:    AS: 267078
                          IP: 45.228.148.0/22
                          IP: 2804:47d0::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4b:74:6a:33:4e:fa:3a:e2:fc:47:83:49:b5:f7:31:25:ba:64:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:57:23 2024 GMT
            Not After : Apr  2 19:02:23 2025 GMT
        Subject: CN=4BE51240CCABD50479983A27F9662DE2441631E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:ba:8b:57:1c:88:39:fe:c0:20:f0:2a:df:
                    ea:fd:74:18:a4:13:a4:cd:b1:ed:09:d4:3e:a5:09:
                    5b:18:17:e2:bc:b2:12:a6:e7:6e:d0:b7:31:d9:20:
                    9e:00:3d:36:44:93:42:18:e6:df:5b:3a:cb:58:7d:
                    d7:ce:2f:b8:01:3e:39:ba:c3:3c:cc:de:a1:8a:19:
                    41:b7:e9:3d:8b:57:95:63:1b:7d:e9:73:9d:43:00:
                    1f:90:34:fe:4a:f7:b4:9f:30:03:43:0b:d8:ce:79:
                    b1:a1:56:10:bf:33:cb:b9:f9:8c:ac:5c:65:8e:58:
                    1a:c5:f2:9d:f0:49:e0:25:e0:e3:9a:33:02:36:17:
                    6a:21:6f:ab:8f:08:f4:8f:3b:7e:41:10:8a:70:34:
                    c8:95:b8:96:15:46:24:04:2a:9b:ad:4c:14:7b:60:
                    cc:8b:22:a8:95:bc:78:22:ad:a1:c3:f8:1a:a4:f0:
                    24:b0:31:06:d2:c9:1d:27:b0:0c:8f:ae:5a:5a:ba:
                    90:ed:7b:05:4c:53:88:5b:90:44:c8:3f:4e:0d:2a:
                    e9:21:6a:61:75:99:49:90:f2:aa:6e:08:07:cd:b8:
                    66:4a:be:26:fe:09:01:27:aa:9b:d2:28:f9:78:4d:
                    65:38:74:21:db:15:83:2c:cb:0d:78:1d:8f:e0:2c:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:E5:12:40:CC:AB:D5:04:79:98:3A:27:F9:66:2D:E2:44:16:31:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/1/4BE51240CCABD50479983A27F9662DE2441631E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.148.0/22
                IPv6:
                  2804:47d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267078

    Signature Algorithm: sha256WithRSAEncryption
         c1:b3:87:3c:e0:89:48:43:91:1c:65:de:7d:5a:9e:6a:3e:4e:
         b1:4b:0c:fd:79:c2:f9:c5:0e:fa:4d:97:5d:a1:a0:bc:f7:20:
         27:6c:a8:32:7c:ca:8d:35:26:d1:20:a0:ad:9a:cc:f5:45:99:
         be:4e:2b:0e:02:8b:c0:83:72:a1:fb:2f:1e:61:de:80:fd:b9:
         c3:f1:ce:a0:45:4d:e9:b8:fc:1c:7e:0b:e1:58:fa:69:df:65:
         b5:f4:46:0b:58:ab:86:46:89:e1:54:df:fd:ee:c5:12:f4:aa:
         c0:da:1c:f8:ed:f2:4a:9a:0d:15:c5:88:fb:a1:5d:73:b0:6f:
         18:d0:bb:33:8c:d1:42:a2:da:26:c3:45:35:2f:24:77:c3:8f:
         34:2f:42:b0:13:5f:94:a7:3e:d3:a1:0b:1e:f6:f6:e7:c8:e8:
         8f:a4:24:40:02:36:bf:99:86:be:0b:3e:27:98:2c:a1:cf:98:
         2a:c8:a8:f6:2b:5a:e0:d6:e1:1a:3b:83:89:56:2a:2b:21:70:
         3a:db:92:91:cb:2d:7f:ab:82:03:51:5d:81:af:6d:69:49:79:
         4b:f0:f8:ec:33:45:b1:3d:18:fe:ef:67:ad:28:97:79:e2:2a:
         9d:2a:a5:8c:d2:78:5e:cd:20:bb:8f:0d:96:2d:aa:6b:63:11:
         02:8f:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org