Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.cer
File:                     4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.cer (raw, json)
Hash identifier:          oOrixRKm1KlTggGu+AUdcuOkIO94LZ6xUyOzpUNRZ1E=
Subject key identifier:   4D:6F:8B:E8:1F:22:62:8A:4B:E2:D6:3E:20:0E:B3:FD:3A:60:F3:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17DD5C2358779B53F35D80CA93C3FA2CAC82508D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2024 16:32:15 +0000
Certificate not after:    Tue 26 Aug 2025 16:37:15 +0000
Subordinate resources:    AS: 271681
                          IP: 200.107.76.0/22
                          IP: 2804:7f54::/32

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 13:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dd:5c:23:58:77:9b:53:f3:5d:80:ca:93:c3:fa:2c:ac:82:50:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 16:32:15 2024 GMT
            Not After : Aug 26 16:37:15 2025 GMT
        Subject: CN=4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:57:37:68:37:09:f4:62:2c:1e:e9:b3:d2:
                    8e:0e:0f:a6:20:4d:e2:8d:35:9e:aa:8e:63:81:71:
                    52:0e:f9:af:54:7d:54:6e:e0:fd:f1:71:19:3d:29:
                    87:ef:63:d7:1c:ea:ab:f3:52:ed:27:44:83:56:a4:
                    93:e5:5e:b7:d3:e4:4d:45:d8:34:5c:a8:89:89:f3:
                    48:dc:48:08:1d:f9:51:5c:24:f1:6b:aa:3d:40:63:
                    b4:20:96:ff:ed:c5:fc:d3:8f:c0:c1:b2:ca:03:10:
                    a8:a3:ed:7e:20:93:dd:c6:49:68:50:bc:47:4d:86:
                    8c:a4:ab:33:6a:84:63:e1:a5:b7:7e:eb:59:47:48:
                    d7:6b:c5:77:67:01:36:3e:7b:65:50:3a:4a:03:be:
                    4b:6e:e2:e7:7b:01:cc:2c:d5:f7:cb:7e:6d:e6:8a:
                    eb:9b:cf:b1:ea:6b:b6:ff:90:39:4f:a3:86:af:6e:
                    5b:78:a8:47:20:f9:28:df:fc:b9:14:e9:64:53:ba:
                    02:38:af:8e:7c:de:d6:de:48:bc:a1:bb:98:b5:35:
                    da:9f:f4:2e:9f:b3:52:0e:e5:28:12:fb:04:1e:5c:
                    8f:e2:33:6b:ee:c8:5e:3a:27:e2:83:95:26:d7:a3:
                    47:d7:73:11:d5:ef:4b:3d:e5:e5:a6:51:a5:7a:2a:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:6F:8B:E8:1F:22:62:8A:4B:E2:D6:3E:20:0E:B3:FD:3A:60:F3:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.76.0/22
                IPv6:
                  2804:7f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271681

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:86:77:b5:7d:48:13:eb:5c:60:66:11:9c:14:2e:78:5e:
         db:f3:b0:51:3a:28:b3:e7:46:6b:32:ae:3a:b8:75:c4:3e:f1:
         a3:ad:df:01:08:8a:20:91:77:bd:5b:2a:e6:5a:c3:d6:68:ae:
         f8:20:74:34:cd:8d:1c:92:f2:b9:db:1e:67:b3:1b:34:d5:50:
         e5:40:cd:94:c4:c6:83:07:5e:bc:d2:af:8a:19:a0:f2:99:8f:
         fa:fd:43:4c:80:0e:6e:15:a8:d3:5e:61:3a:3e:20:6b:32:02:
         64:03:b3:36:d1:2c:5f:87:c0:25:51:de:bf:97:89:a6:de:ec:
         67:91:23:43:c6:93:72:13:13:34:19:94:72:9d:73:0e:da:0e:
         1f:12:5a:ae:61:51:cf:5e:44:39:a3:c1:a8:cd:d9:02:6c:31:
         a9:fd:60:b3:11:f1:61:4c:89:fc:56:19:24:b4:e1:26:14:f1:
         17:87:b4:90:92:7a:f8:2a:e1:a7:33:c8:52:b7:32:43:bc:48:
         77:0d:70:99:83:ea:92:c2:08:91:d9:69:6e:c6:25:16:d6:b2:
         91:07:b8:92:39:62:79:f0:1b:eb:ac:7d:7e:cc:1e:57:6d:6c:
         f7:96:6e:b8:b3:d2:4f:c1:e7:c6:57:f6:4b:56:de:59:da:37:
         03:f2:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 17:45:11 2024 by rpki-client on console-ams.rpki-client.org