Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
File:                     4D75809E071D4433F365FE41E48F4C2BED13B507.cer (raw, json)
Hash identifier:          rD9Y4YKJTjPFfR2VVKE00VLy18FCahTYckiXfcSk+YQ=
Subject key identifier:   4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7DE6037155B63F18C5919281A2F3903DCB3DBF16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 15:19:17 +0000
Certificate not after:    Wed 13 Aug 2025 15:24:17 +0000
Subordinate resources:    AS: 268596
                          IP: 45.164.41.0 -- 45.164.43.255
                          IP: 2804:53a0::/32

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e6:03:71:55:b6:3f:18:c5:91:92:81:a2:f3:90:3d:cb:3d:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 15:19:17 2024 GMT
            Not After : Aug 13 15:24:17 2025 GMT
        Subject: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:c9:d4:ab:34:36:9a:0e:e3:69:f8:4f:be:
                    27:13:7e:31:f8:0b:dc:ef:79:61:53:93:d5:06:18:
                    b9:6c:c2:31:ab:82:84:47:34:a1:98:03:4b:ec:a7:
                    5d:1e:bc:ea:54:4f:9d:55:8e:79:27:29:5d:d6:36:
                    24:36:67:54:b4:93:52:f9:4e:76:58:43:a7:42:da:
                    54:d3:04:74:c4:c4:24:1d:33:ed:98:53:ab:a9:03:
                    12:cf:ea:66:35:ea:ab:ed:72:2e:06:a1:e1:9d:b7:
                    39:59:bc:ae:60:da:43:45:30:8d:65:d1:0d:d4:f6:
                    2a:c6:6f:74:f6:07:bc:1b:87:b2:f4:43:2f:e9:6f:
                    88:3e:a4:79:e2:8c:eb:18:98:6e:13:38:a5:87:63:
                    71:6e:ab:9d:1f:9c:91:84:04:59:11:aa:ac:41:a3:
                    a0:44:9e:e8:d2:75:98:0e:1f:c3:b7:20:7d:7c:8f:
                    13:c3:d6:81:de:92:33:15:9a:96:2d:7c:41:e6:a5:
                    29:de:55:bb:3c:90:1e:8c:45:32:62:71:08:9c:65:
                    0f:fd:11:cb:fa:75:ba:5c:67:a8:74:6c:00:b4:9d:
                    4b:c1:13:c5:3b:21:96:93:c7:dd:02:ab:1e:3c:b9:
                    da:27:43:b6:c2:06:19:1d:53:ed:61:dd:37:9d:20:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.41.0-45.164.43.255
                IPv6:
                  2804:53a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268596

    Signature Algorithm: sha256WithRSAEncryption
         36:5a:f5:e2:f4:0d:46:ea:e8:33:62:ad:bb:cc:01:35:b8:f0:
         36:7e:42:34:8d:c3:c3:12:81:77:72:6c:b6:da:56:df:5a:b1:
         4b:17:92:58:74:fa:49:57:c2:53:db:90:71:f8:0a:f4:77:81:
         cd:52:1f:3a:db:ca:12:ae:3f:e4:72:46:c8:d7:57:f7:f3:e2:
         d5:95:e1:8c:cf:35:3e:59:f4:71:c1:37:4b:f7:0b:c5:8d:b7:
         90:fc:04:fd:50:56:e7:50:32:11:ed:a7:b0:03:2e:a9:cd:e2:
         50:96:06:d1:9e:7d:9a:57:5e:a7:5c:6d:43:53:75:60:33:6d:
         b5:8c:2f:f0:6b:87:fb:fb:98:18:ac:1d:f0:43:d4:11:91:21:
         11:15:f1:6b:db:66:68:df:67:f6:a2:0b:47:9f:4c:9f:dc:bb:
         ca:b2:89:81:63:11:74:e0:8e:a8:73:5f:01:0e:b3:60:00:14:
         84:77:e3:ef:b0:1f:36:65:91:14:a0:de:3d:73:19:5e:b6:e4:
         24:b4:5b:23:3a:76:98:1e:c6:6f:9a:b3:e2:d4:3a:66:85:98:
         fb:a4:ab:b4:b3:2a:04:2b:da:e7:8c:dc:01:d9:7d:ef:85:bd:
         d2:14:66:74:cc:39:22:bc:7b:20:22:a1:5b:f7:49:51:22:42:
         c0:ca:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 14:37:35 2024 by rpki-client on console-fra.rpki-client.org