Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F4F05BDB8BE98C86EC3BA2C107D382468673695.cer
File:                     4F4F05BDB8BE98C86EC3BA2C107D382468673695.cer (raw, json)
Hash identifier:          VG9om0ZmZX+U4axzGIZHZwZb3rNVx9RSmCkQJUUhCXA=
Subject key identifier:   4F:4F:05:BD:B8:BE:98:C8:6E:C3:BA:2C:10:7D:38:24:68:67:36:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77E231FE563EC2DD782D8A8EBB0F14D2CA45191E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/4F4F05BDB8BE98C86EC3BA2C107D382468673695.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jun 2024 04:26:10 +0000
Certificate not after:    Fri 27 Jun 2025 04:31:10 +0000
Subordinate resources:    AS: 266165
                          IP: 72.44.16.0/22
                          IP: 2804:3bb0::/32

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 03:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e2:31:fe:56:3e:c2:dd:78:2d:8a:8e:bb:0f:14:d2:ca:45:19:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 28 04:26:10 2024 GMT
            Not After : Jun 27 04:31:10 2025 GMT
        Subject: CN=4F4F05BDB8BE98C86EC3BA2C107D382468673695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:f8:32:9d:07:a0:8e:b5:29:6f:3d:32:85:
                    83:da:5e:f2:57:22:b0:14:78:3e:3f:e3:4c:df:82:
                    3b:41:c9:d6:6e:0a:1a:7b:a9:e5:df:c1:dd:18:e4:
                    de:33:aa:fe:6c:98:c0:56:97:5b:f1:a6:83:f8:04:
                    3b:29:df:46:2c:6f:0f:b4:07:0d:38:f3:d5:e3:a9:
                    19:99:89:f6:be:61:a7:0c:a9:5f:98:ba:43:85:65:
                    a3:0d:1b:4b:04:db:a2:a8:f4:fd:eb:c2:b5:e7:f0:
                    33:a2:fc:8c:5d:0f:80:df:51:1c:24:6a:71:9f:c4:
                    52:7a:88:67:1b:13:a4:fc:04:a5:c5:95:85:e9:5b:
                    28:86:53:44:82:88:66:4e:3d:9e:35:91:da:32:68:
                    53:f2:fb:56:85:46:f2:d4:8f:b5:d1:82:42:a9:cb:
                    18:12:20:ac:71:70:3c:d0:80:9b:7b:dc:16:fa:3e:
                    20:30:de:b9:bb:46:fc:00:b2:ce:ce:2b:96:91:ef:
                    02:e1:f3:46:ef:04:c2:6e:f7:6c:ed:ba:95:05:54:
                    f9:4b:81:d8:90:ca:41:22:cd:41:f3:7d:ee:7c:55:
                    46:d6:f5:84:1a:16:a7:fd:eb:bb:5c:55:ce:0a:35:
                    12:84:8b:fb:98:9e:d8:74:16:7a:d1:8a:8a:fc:04:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:4F:05:BD:B8:BE:98:C8:6E:C3:BA:2C:10:7D:38:24:68:67:36:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/4F4F05BDB8BE98C86EC3BA2C107D382468673695.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/22
                IPv6:
                  2804:3bb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266165

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:2a:1b:e1:a0:19:09:10:4e:d9:ed:e2:40:23:74:78:66:
         11:10:19:a7:e8:8f:e6:6a:57:ec:dc:a0:ba:86:f3:c3:7f:c0:
         c1:fb:8d:7d:6f:41:83:e9:1e:4e:1a:9c:ae:3a:bc:0b:d7:1d:
         97:d1:78:24:c9:e5:a9:c4:40:1e:54:7c:13:83:24:7a:82:dc:
         05:b2:f1:17:54:71:90:5a:40:75:ae:4a:12:0a:e3:a4:19:7c:
         1f:b8:78:a3:ad:c1:ef:46:86:36:66:17:b2:61:1f:70:d8:a6:
         94:a7:8d:4d:82:4c:fc:02:67:35:8f:49:97:52:f9:e5:9a:12:
         d7:5c:a0:60:5f:67:fe:df:f3:ae:f6:72:68:91:fe:94:9a:7d:
         02:dc:38:ff:d7:28:cb:9c:1c:75:aa:13:bf:93:c5:6d:29:57:
         d5:fa:ea:89:d9:ad:75:98:73:76:9e:18:47:ce:14:c5:be:7a:
         a8:99:f9:23:51:6a:70:14:c5:11:36:94:b7:6a:47:e7:f2:2e:
         eb:8e:a6:cd:9d:7d:3a:a4:3d:25:07:df:d0:9e:46:a4:4f:c7:
         ae:8a:26:01:b3:12:11:1c:48:c4:32:41:f0:30:ff:e2:6c:21:
         d3:b8:c5:86:c9:b7:4a:80:6e:e7:48:78:4e:1a:ef:20:b2:74:
         f5:d6:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 06:41:59 2024 by rpki-client on console-ams.rpki-client.org