Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EACF37D6ACE0789EEAC034F4A11CD815D5F2FF8.cer
File:                     4EACF37D6ACE0789EEAC034F4A11CD815D5F2FF8.cer (raw, json)
Hash identifier:          8FxusEhEBoga2CG8i6bzaXTQdLcaZInrhr5rEBFBST0=
Subject key identifier:   4E:AC:F3:7D:6A:CE:07:89:EE:AC:03:4F:4A:11:CD:81:5D:5F:2F:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F6194DF1D9FA96FB24A7CEEF83F058749A4C0DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/4EACF37D6ACE0789EEAC034F4A11CD815D5F2FF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jun 2024 14:59:59 +0000
Certificate not after:    Tue 03 Jun 2025 15:04:59 +0000
Subordinate resources:    AS: 271404
                          IP: 181.189.28.0/22
                          IP: 2804:7afc::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 14:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:61:94:df:1d:9f:a9:6f:b2:4a:7c:ee:f8:3f:05:87:49:a4:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 14:59:59 2024 GMT
            Not After : Jun  3 15:04:59 2025 GMT
        Subject: CN=4EACF37D6ACE0789EEAC034F4A11CD815D5F2FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:e9:26:27:9d:85:b2:f2:fa:dc:5a:61:72:
                    8c:d6:4b:32:9b:05:dc:28:89:87:5c:96:d4:b5:b9:
                    74:b1:49:df:7b:e3:50:8c:16:94:cc:80:cd:69:62:
                    fd:b2:2b:62:9a:01:07:bc:bf:02:71:11:c9:19:e6:
                    59:10:e4:20:44:39:1f:a3:36:9c:1a:aa:df:85:d4:
                    38:db:10:ed:83:25:2b:5d:66:d8:0b:cc:43:f4:1e:
                    f4:1f:17:2b:1d:24:de:c0:0a:47:a8:e1:1f:55:bc:
                    d3:e6:ba:dc:02:e4:88:cb:b5:b2:99:44:cc:7a:09:
                    51:65:56:24:1e:88:1f:08:bf:cf:d6:fe:95:06:98:
                    74:25:81:46:75:83:b3:ad:3a:77:13:1f:ff:a0:b3:
                    09:50:94:f7:41:b2:e6:93:8d:61:de:ee:e4:4e:e3:
                    61:a9:1f:8c:f2:91:c5:ae:43:9c:3c:27:ed:5d:2c:
                    39:e6:5e:2f:16:3d:5a:d3:a5:34:c7:b1:0d:96:b3:
                    1b:ba:b7:66:a7:3a:8d:26:38:44:3b:48:d4:63:cb:
                    fe:ef:38:6c:5f:7a:02:b0:c4:44:db:c6:88:71:b0:
                    67:90:17:b7:13:5b:2e:f5:8e:41:98:a5:40:99:b2:
                    60:38:cf:5f:c9:85:ef:4f:bb:68:df:6e:64:3d:d2:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:AC:F3:7D:6A:CE:07:89:EE:AC:03:4F:4A:11:CD:81:5D:5F:2F:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/4EACF37D6ACE0789EEAC034F4A11CD815D5F2FF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.28.0/22
                IPv6:
                  2804:7afc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271404

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:cb:3a:df:3a:fd:d3:ab:1c:c6:64:f0:4a:21:6a:f0:8a:
         e4:5e:76:e3:e2:c9:fd:22:c7:8c:c3:75:07:63:e5:e2:aa:16:
         79:83:d2:49:30:26:83:27:75:ec:cc:38:f9:98:5a:7f:27:c0:
         08:57:99:a6:c5:6e:39:d9:2d:90:ca:fe:3c:db:0c:d7:68:07:
         9c:1f:28:e8:65:f4:1b:99:74:14:65:0d:08:2f:5a:9c:c6:e3:
         6c:ec:2c:21:ce:0f:ab:03:23:06:6e:10:64:8a:3c:74:ad:03:
         02:4b:61:43:46:88:03:e3:4e:c5:a1:9b:44:46:c2:96:e0:f7:
         b2:27:ce:e8:58:b7:d9:5f:e9:49:1b:f8:c9:bf:6b:8f:8c:0f:
         8c:0a:c0:23:7a:bb:e9:dd:c9:c1:da:0d:1d:89:97:48:5a:13:
         b3:9b:99:9b:ef:1d:f7:f8:d6:8e:b3:96:83:67:35:dd:16:2a:
         f4:25:c2:74:cf:5d:88:3b:4d:eb:7a:10:6f:b3:4c:2b:13:ed:
         89:a7:3e:ca:71:54:2e:6f:bc:35:1a:83:5d:35:ed:35:20:13:
         d8:ce:6e:62:1d:65:1b:04:06:1c:68:db:5f:75:17:c5:6f:61:
         aa:c3:14:d0:a6:3e:7d:ea:fb:22:15:6f:d3:f9:60:13:21:fd:
         eb:5f:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 20:00:07 2024 by rpki-client on console-ams.rpki-client.org