Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DF7E2DEF3435B3292B6D947B2DD0FD1D2205D05.cer
File:                     4DF7E2DEF3435B3292B6D947B2DD0FD1D2205D05.cer (raw, json)
Hash identifier:          Nz7BG11wIXbftsDBTVmTm+YsjSgeIAorFnIPRzqHE4Y=
Subject key identifier:   4D:F7:E2:DE:F3:43:5B:32:92:B6:D9:47:B2:DD:0F:D1:D2:20:5D:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18A5947A4E0ECCA5333C3D16ABA200A1D94FDA76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/1/4DF7E2DEF3435B3292B6D947B2DD0FD1D2205D05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:28:11 +0000
Certificate not after:    Wed 02 Apr 2025 18:33:11 +0000
Subordinate resources:    AS: 269254
                          IP: 45.183.16.0/22
                          IP: 2804:61c0::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 17:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a5:94:7a:4e:0e:cc:a5:33:3c:3d:16:ab:a2:00:a1:d9:4f:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:28:11 2024 GMT
            Not After : Apr  2 18:33:11 2025 GMT
        Subject: CN=4DF7E2DEF3435B3292B6D947B2DD0FD1D2205D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:0f:51:fb:3d:e8:64:4d:dd:13:c5:7e:87:
                    56:69:35:56:ef:49:65:f0:e4:3f:b2:14:c9:a8:25:
                    c0:7b:e8:2d:7d:e1:a3:f3:c8:9a:38:a9:2e:15:5f:
                    d3:51:c3:04:ba:37:c9:ad:3c:c4:a8:16:b7:9f:0f:
                    4c:16:47:cf:88:93:ec:03:79:06:d7:c4:ba:60:cb:
                    e3:43:ab:10:78:34:b2:9f:6c:6a:b7:7d:64:2e:7a:
                    02:a9:93:b0:f8:c1:af:9f:ed:64:91:52:17:4a:e7:
                    5b:e2:31:e0:28:9f:ed:8d:bb:ef:23:e7:a7:fe:71:
                    c2:e8:19:1b:30:b6:2a:5f:cb:9f:6c:3f:dd:3f:ca:
                    a4:e2:ad:6b:6d:24:cd:a3:91:f3:40:37:fc:a9:42:
                    9f:2c:f6:78:79:ac:31:b8:7c:25:f0:51:1a:72:80:
                    98:f0:9f:4f:dd:c0:35:34:dc:89:ee:61:4f:ca:af:
                    60:f1:48:8e:c3:26:55:de:b5:c3:9b:e8:6a:82:d1:
                    17:cd:ae:57:5a:7d:c5:60:8e:79:3a:6b:ca:a3:fd:
                    e4:26:cf:e8:fc:fe:ab:c4:15:c5:31:3e:a6:66:af:
                    d6:3c:a0:b1:4d:f8:77:6f:29:ee:7b:18:01:f8:c6:
                    d3:91:5b:6c:73:52:10:ba:0b:64:65:1e:42:f9:4d:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:F7:E2:DE:F3:43:5B:32:92:B6:D9:47:B2:DD:0F:D1:D2:20:5D:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/1/4DF7E2DEF3435B3292B6D947B2DD0FD1D2205D05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.16.0/22
                IPv6:
                  2804:61c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269254

    Signature Algorithm: sha256WithRSAEncryption
         52:26:dd:64:19:28:f5:ef:97:1f:d9:33:9b:b4:6c:14:35:05:
         df:56:0f:1b:f6:b5:aa:ed:ff:11:c9:99:55:a5:b0:63:49:74:
         a4:8e:7e:6c:8b:37:16:b5:a9:80:0c:ab:19:9b:37:cc:8c:8f:
         c9:01:97:13:2c:b8:e6:e5:7a:17:b0:b3:5c:21:04:81:d9:4b:
         55:c3:f4:d0:64:37:29:04:6f:ed:70:4e:c0:a0:81:9a:9b:fd:
         8e:f3:a2:ec:d8:d0:cb:e3:cf:0f:35:4e:34:fb:92:1b:c9:72:
         84:21:25:5d:72:dc:8f:db:4e:13:4c:fb:ef:33:6b:86:68:f0:
         4e:b2:90:d5:4e:6c:ae:fe:66:91:46:7c:52:b4:67:90:1b:23:
         20:5b:36:74:71:35:f2:5d:40:7c:8c:53:38:2e:27:f0:cb:ec:
         a8:4c:91:00:65:db:69:e2:b5:42:4b:96:f5:5c:e3:bf:d1:2c:
         ce:6a:e9:3c:dd:72:df:01:74:f9:73:d9:70:e6:1a:a8:53:e6:
         bd:8a:d5:9a:0f:a1:cb:a7:78:c5:9f:13:96:22:ad:c3:43:c2:
         8a:84:42:60:2f:4d:ba:8b:a4:d0:18:32:2e:37:18:e4:7b:a0:
         f7:d6:bb:9b:a8:07:65:af:17:79:ae:56:22:76:93:99:a6:cb:
         14:5a:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 21:18:57 2024 by rpki-client on console-ams.rpki-client.org