Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.cer
File:                     4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.cer (raw, json)
Hash identifier:          J+f2CDHAB6FiZH5nq1G/Im0gprl2rvX9F8W4okZbFec=
Subject key identifier:   4D:37:A0:4C:3C:53:C5:97:EA:82:B0:D8:8B:B7:A3:82:0B:44:DB:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2507863FC324B75005939020B99F40DE88A7530F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 22:25:20 +0000
Certificate not after:    Mon 07 Apr 2025 22:30:20 +0000
Subordinate resources:    AS: 269537
                          IP: 45.188.168.0/22
                          IP: 2804:6624::/32

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 05:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:07:86:3f:c3:24:b7:50:05:93:90:20:b9:9f:40:de:88:a7:53:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 22:25:20 2024 GMT
            Not After : Apr  7 22:30:20 2025 GMT
        Subject: CN=4D37A04C3C53C597EA82B0D88BB7A3820B44DB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:cb:8a:e4:18:b6:be:30:3a:0b:7f:aa:87:
                    8f:42:4a:ec:27:8f:a2:b6:ea:d8:75:55:5c:48:27:
                    57:7c:f8:18:b9:cf:27:52:d6:d3:ed:14:ac:8f:02:
                    5b:de:01:2e:35:a1:1a:a9:03:78:ea:8f:6b:02:e8:
                    36:9f:a4:b0:0d:47:85:b4:bf:3c:66:82:ea:96:47:
                    97:e4:45:0b:d5:87:ba:61:60:ac:05:b6:c1:22:e8:
                    d5:b0:19:24:7c:62:ac:53:21:cd:42:8f:c8:a3:c9:
                    e4:25:3c:d2:4d:cf:0c:97:fd:46:08:10:61:a6:eb:
                    f1:dc:49:07:85:de:be:1d:79:ce:df:a0:ef:a5:2e:
                    05:57:bb:f3:40:1d:0f:d5:6d:3c:13:f4:4c:aa:1c:
                    58:5b:20:7b:25:4c:f5:73:e8:98:e4:4e:48:ac:f6:
                    3f:04:b5:8a:e9:8a:bd:68:f6:41:f8:23:c8:b5:10:
                    31:9f:1b:2c:55:80:f8:4c:10:56:99:da:2a:fb:f0:
                    fd:63:b0:71:98:d7:0c:96:2d:67:3f:0c:86:a2:25:
                    d6:87:24:54:20:b4:15:22:2d:d4:d0:b9:f5:ea:76:
                    f1:b0:45:86:5a:e5:f2:21:e0:47:09:d2:d6:11:b6:
                    79:49:6e:6a:84:0e:84:a6:a3:5b:06:bb:4a:e1:79:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:37:A0:4C:3C:53:C5:97:EA:82:B0:D8:8B:B7:A3:82:0B:44:DB:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22
                IPv6:
                  2804:6624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269537

    Signature Algorithm: sha256WithRSAEncryption
         b4:35:0c:08:82:c6:3c:e0:ea:e7:90:9c:58:89:4f:d1:7c:7a:
         8c:2c:39:70:0b:3e:c9:fe:24:1d:b7:e6:1c:bb:86:d3:a9:73:
         44:2c:a6:ed:1c:15:33:9c:a8:3d:60:fd:ea:e8:0a:58:1f:d7:
         b9:4d:a1:06:1a:20:1e:1a:40:c2:b9:85:84:5e:ff:fa:f6:fd:
         03:53:3f:de:ce:f1:7f:79:d0:d3:dc:8d:50:d3:0e:41:e7:b4:
         9f:0a:a0:dc:f7:bc:a2:49:a6:a6:a4:bf:b2:47:75:17:fe:ce:
         9d:89:45:98:d2:a4:08:d7:c7:54:ad:e4:4b:5d:7d:dd:52:52:
         d7:77:53:a6:e4:87:8b:63:6d:4c:80:fd:7b:b4:3e:91:3e:06:
         48:23:5a:73:dd:a1:3b:dd:93:21:a9:19:b1:03:19:68:2f:97:
         54:f7:c4:88:2c:ec:9b:75:32:3f:65:a0:7c:65:f7:b7:27:3b:
         07:b1:68:3b:4c:f9:5d:1b:36:5b:c1:75:04:ee:b3:df:16:7f:
         1c:b9:5d:6c:99:97:09:5a:34:cb:da:28:6f:8b:8c:3e:52:d2:
         56:96:0c:d7:27:c5:45:5b:b4:ae:84:04:db:87:89:8b:9a:99:
         49:a0:4b:c3:37:15:78:61:4c:1f:6b:60:0f:04:16:b0:8b:1c:
         dc:52:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 06:42:45 2024 by rpki-client on console-fra.rpki-client.org