Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.cer
File:                     4D40EC400BCF161D5176F6C2E3A646EBEADEB546.cer (raw, json)
Hash identifier:          Fz9FB/BT2Qx8OPaAkgAZ6kudk5IdQSUoPDHYTnLdyFY=
Subject key identifier:   4D:40:EC:40:0B:CF:16:1D:51:76:F6:C2:E3:A6:46:EB:EA:DE:B5:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7643D48514A4C887F3AC407338D6D97D510F775E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 11 Aug 2024 03:38:30 +0000
Certificate not after:    Sun 10 Aug 2025 03:43:30 +0000
Subordinate resources:    AS: 265463
                          IP: 168.197.12.0/22
                          IP: 2804:3484::/32

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 21:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:43:d4:85:14:a4:c8:87:f3:ac:40:73:38:d6:d9:7d:51:0f:77:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 11 03:38:30 2024 GMT
            Not After : Aug 10 03:43:30 2025 GMT
        Subject: CN=4D40EC400BCF161D5176F6C2E3A646EBEADEB546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:15:75:c4:a8:97:d2:33:63:cf:b4:cf:7d:
                    5f:2f:28:bb:13:bf:8a:e3:e4:12:85:c2:84:51:68:
                    89:2e:0b:49:45:c6:e3:0f:12:da:2f:b0:fc:18:a0:
                    53:e3:88:b1:fd:17:df:cd:98:2c:eb:38:9c:8d:8e:
                    94:7f:86:2a:7e:92:97:81:ee:95:42:32:49:f9:72:
                    8a:bf:8f:44:18:eb:f8:b6:bd:e0:1a:bc:a1:7f:85:
                    8d:63:ab:97:96:e9:6c:8a:1c:fa:13:0a:19:df:0f:
                    0f:0c:2c:f5:35:40:29:2a:16:48:22:33:7a:c1:89:
                    4a:f3:61:23:ee:da:3d:2a:3b:c8:a5:18:93:11:4e:
                    39:2e:47:df:72:54:90:61:ff:08:cf:ed:c6:43:cc:
                    f1:06:d7:86:97:9c:2a:27:16:5d:2a:45:27:40:e1:
                    4a:18:e5:b6:6e:61:f2:f9:1d:43:51:59:e2:9d:51:
                    14:fe:97:1e:7f:04:72:8c:49:74:ed:24:62:9b:7f:
                    29:43:7c:0d:8c:63:a8:2a:45:76:05:33:cc:2d:7b:
                    a6:3f:dc:61:79:d5:9e:a0:3a:7b:c3:f7:d1:fb:3e:
                    2c:67:b8:2f:c8:86:62:b0:17:88:fa:7d:1c:1e:47:
                    ef:d7:62:ba:c0:f4:d3:e5:9c:98:d7:d2:fd:30:ea:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:40:EC:40:0B:CF:16:1D:51:76:F6:C2:E3:A6:46:EB:EA:DE:B5:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22
                IPv6:
                  2804:3484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265463

    Signature Algorithm: sha256WithRSAEncryption
         50:37:7e:c6:d7:1f:15:d5:f8:b0:b9:29:70:b9:d7:90:f2:37:
         ab:c9:58:c2:71:c7:3d:de:f0:56:82:ca:c8:c4:4d:ba:58:72:
         7b:51:6c:83:50:ca:ae:49:11:c7:90:c0:86:cb:6f:cd:80:06:
         2c:dd:71:ce:84:13:ee:b6:0e:03:47:cd:78:e0:e0:d2:26:72:
         d4:01:a9:16:9e:c0:11:9a:d2:2a:1f:ad:20:f6:a9:0f:95:9a:
         71:37:8a:91:2e:51:9e:e7:0d:81:ef:15:65:1a:7a:aa:dc:4c:
         78:99:04:2e:d2:4c:18:aa:91:f0:21:4f:99:4d:42:d2:e7:42:
         37:01:b1:a2:19:c7:24:69:c4:68:c9:d5:b3:d5:69:15:17:84:
         92:d7:32:63:06:83:34:ce:30:5b:50:27:30:28:e5:e9:cf:23:
         38:b9:3c:a8:54:3f:c6:77:23:03:72:bd:9b:55:10:ec:5a:93:
         4f:78:89:ae:53:7f:3c:d0:0e:db:78:94:bc:3a:a6:d6:9d:2f:
         8e:a3:c8:eb:ed:72:7b:cb:91:87:a8:e6:59:fc:dd:91:1c:a8:
         97:66:5e:77:69:19:fe:14:b1:5e:88:4b:02:41:42:39:b6:e4:
         74:9d:44:dd:14:e7:92:36:7e:d2:54:ac:33:6a:e2:c5:9d:15:
         b4:98:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----