Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
File:                     4CE208B60A335AC817BD8345B866877953FA18BA.cer (raw, json)
Hash identifier:          jYhlAyrFZ/qneo4129BIfaAZV4KwDKnl8/lDwhHt/Gg=
Subject key identifier:   4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30A885905F7AC82B6662E147ACD02AB2BF8E025F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 May 2024 15:47:55 +0000
Certificate not after:    Sat 03 May 2025 15:52:55 +0000
Subordinate resources:    AS: 272581
                          IP: 2804:8578::/32

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a8:85:90:5f:7a:c8:2b:66:62:e1:47:ac:d0:2a:b2:bf:8e:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  4 15:47:55 2024 GMT
            Not After : May  3 15:52:55 2025 GMT
        Subject: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:8d:fa:e9:86:c6:a6:67:27:f4:2e:1e:31:
                    04:9d:7a:14:fc:48:83:36:3c:30:08:81:8a:4b:9f:
                    f8:5b:d6:51:c7:3e:e5:1b:97:ed:70:37:c9:51:d4:
                    69:d3:0c:e6:b0:06:92:23:09:65:a5:4f:49:02:13:
                    02:37:dc:b2:bf:61:4b:42:8b:aa:48:18:fe:3d:41:
                    7a:21:9b:c1:7e:07:67:90:c3:fc:3c:0d:08:af:25:
                    80:5e:ea:10:62:fb:b4:ae:f2:31:40:ad:e3:42:9d:
                    f7:6e:8d:e5:8c:ef:b2:53:30:00:cf:67:9d:5f:9b:
                    aa:77:8a:dd:ce:70:64:69:a3:10:be:b6:7d:49:9f:
                    7a:fc:5e:8c:65:9f:89:7f:f3:36:53:5f:b0:4a:64:
                    1f:fa:45:dc:e5:74:a7:83:7f:56:31:a1:56:9b:f7:
                    ae:bc:63:42:c7:7e:f8:dc:6f:23:4f:bd:7a:18:28:
                    05:fc:22:d4:7e:35:c8:e7:0a:83:c4:12:06:4c:a7:
                    7d:51:f6:68:07:de:51:0f:e5:60:f2:27:cd:e4:69:
                    d4:b6:54:0f:ef:94:d4:90:84:9d:04:d8:2b:f7:73:
                    d4:29:7c:05:b8:2a:d1:d0:bb:93:da:45:51:6b:fe:
                    2c:ce:ac:54:3f:40:59:34:7f:97:57:a0:9b:b9:c5:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272581

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:d1:43:86:b9:48:1d:c1:48:2b:bb:e9:8f:e1:5b:9d:59:
         5a:bd:98:35:5e:f0:e6:0f:b8:86:84:f3:2e:63:b7:48:52:4e:
         94:1b:11:9b:51:72:6b:e4:f6:1e:5f:60:0c:23:9b:75:d0:a3:
         36:24:15:c3:a1:0d:05:61:da:d8:3a:f2:f7:55:ff:06:f7:73:
         a6:2a:09:50:c4:f3:2e:4d:62:08:45:8f:69:ce:a4:73:34:0b:
         04:a4:d6:66:7c:5e:0a:4f:6d:1e:9c:8b:6b:0a:e1:64:d9:71:
         f9:70:f8:95:13:45:63:b9:2f:d4:48:83:07:1a:b0:73:85:80:
         d5:36:b0:ad:1e:b7:52:44:08:c0:77:46:dd:9a:a1:b3:ad:e4:
         c2:68:89:9d:43:1c:e1:dc:e6:66:93:e5:1f:bb:93:23:07:21:
         9c:a3:7d:13:25:e0:8d:02:e6:18:ed:90:bf:da:3b:eb:c0:f5:
         cc:7e:dc:02:56:ee:36:25:6d:93:27:09:3f:d9:04:d6:1d:b6:
         26:df:a0:54:9c:f1:af:74:7a:6c:80:45:ef:27:c6:9f:27:aa:
         8f:ea:68:e1:3c:58:01:82:33:8f:ad:dc:fc:30:f2:5f:4a:39:
         6e:8c:03:41:a6:24:e3:04:05:d1:ea:05:f4:63:04:f5:e0:8a:
         83:28:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 05:02:42 2024 by rpki-client on console-ams.rpki-client.org