Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D187A46F38AB20F497723148DA4CAEE9D2D378C.cer
File:                     4D187A46F38AB20F497723148DA4CAEE9D2D378C.cer (raw, json)
Hash identifier:          UuHrtzH1Rwt+L4RXiWcoeuQPK5iUPy4VLsTnEyy2JcM=
Subject key identifier:   4D:18:7A:46:F3:8A:B2:0F:49:77:23:14:8D:A4:CA:EE:9D:2D:37:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AC5FA483254B7B10EF710B2AD6108474E3435BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/4D187A46F38AB20F497723148DA4CAEE9D2D378C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:53:23 +0000
Certificate not after:    Thu 03 Apr 2025 19:58:23 +0000
Subordinate resources:    AS: 267169
                          IP: 45.230.148.0/22
                          IP: 2804:4930::/32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 20:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c5:fa:48:32:54:b7:b1:0e:f7:10:b2:ad:61:08:47:4e:34:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:53:23 2024 GMT
            Not After : Apr  3 19:58:23 2025 GMT
        Subject: CN=4D187A46F38AB20F497723148DA4CAEE9D2D378C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:4d:25:96:fd:c7:27:5b:8e:1f:6c:e8:f9:
                    5c:13:14:e9:32:08:77:55:23:a1:4a:2e:91:5f:15:
                    f7:df:f0:aa:7e:dc:c3:1f:b5:3f:b1:41:4a:9a:ed:
                    bf:5e:b4:c6:90:c9:b2:2b:02:3b:63:7c:4c:0e:0b:
                    c4:6e:db:d2:d0:cf:2b:e2:4a:91:b6:f1:9c:27:1b:
                    44:1b:94:a2:4a:de:22:38:64:68:0a:9b:c5:68:bf:
                    72:77:23:61:84:4a:c8:3c:20:d8:12:2d:14:a6:18:
                    4c:b0:ce:56:5c:e3:83:f2:40:49:a0:3c:3f:60:10:
                    58:34:e0:32:e9:b8:30:20:31:b6:f8:9a:bc:48:da:
                    04:40:4e:86:87:a0:32:e6:ca:1a:cd:58:47:34:b3:
                    05:7d:71:3f:05:ce:f6:34:fc:e8:29:24:b7:fa:06:
                    5e:31:64:e9:41:9c:8b:59:46:e1:a9:89:80:b8:49:
                    06:37:90:ce:43:85:f6:dd:38:bb:b7:2a:61:47:f6:
                    64:5c:dd:9b:d5:c4:fa:25:d6:f7:61:97:08:c9:6b:
                    75:36:c8:63:54:fa:ad:ae:5f:43:c9:90:6f:36:14:
                    e6:73:af:c9:73:3e:a4:2b:5f:db:95:58:5e:82:7b:
                    d8:02:02:4e:e7:bb:54:f1:2e:00:2b:3a:75:e0:cb:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:18:7A:46:F3:8A:B2:0F:49:77:23:14:8D:A4:CA:EE:9D:2D:37:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/4D187A46F38AB20F497723148DA4CAEE9D2D378C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.148.0/22
                IPv6:
                  2804:4930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267169

    Signature Algorithm: sha256WithRSAEncryption
         41:17:07:50:c5:ec:5b:10:b9:9e:bf:06:c8:f6:a4:cf:80:7f:
         30:6e:31:b8:5f:a8:3b:88:ad:65:0d:7d:72:6b:cb:d3:3f:3f:
         ff:4a:5e:f2:7e:48:2c:2b:09:0f:90:d0:14:70:a2:d3:65:13:
         b7:a6:66:34:8e:fe:bd:bc:49:d5:0a:dd:4f:d8:85:62:ed:c6:
         11:97:20:e9:d6:62:10:8a:4d:21:6f:7b:24:fe:5a:73:9e:60:
         3e:d2:bb:e1:aa:bf:78:c5:66:7e:fc:83:c4:98:96:6f:59:46:
         f8:63:1d:5a:b5:d7:68:f7:2d:99:4a:57:42:bb:4c:e3:f1:0b:
         f4:59:ff:db:21:9d:07:a8:93:f6:16:73:52:52:8d:68:14:a9:
         f6:9f:29:16:db:24:e4:6b:36:a7:be:60:80:bc:5b:67:04:02:
         5e:2a:ea:e5:e6:91:69:a9:6f:82:f8:44:da:95:72:06:6c:0d:
         6a:2c:78:17:50:d4:44:3e:4a:d4:50:ee:ce:99:3d:d5:3f:e5:
         15:88:14:bc:90:b7:6a:ed:d9:46:3d:89:e2:98:8e:b6:fb:78:
         d1:2d:64:ec:be:5b:f3:44:57:86:67:69:bc:78:25:7b:8b:00:
         f1:14:1c:be:eb:09:ea:36:3d:1b:b7:dd:0a:32:a0:cf:de:04:
         82:df:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 22:17:03 2024 by rpki-client on console-fra.rpki-client.org