Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer
File:                     4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer (raw, json)
Hash identifier:          AVgkoTumlOyt1EoGi5P3HMP6xeE1S53O7zhOpA3dbt4=
Subject key identifier:   4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       52C5B51595DE47D64D569DBA248259CCBF008155
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:16:46 +0000
Certificate not after:    Thu 03 Apr 2025 11:21:46 +0000
Subordinate resources:    AS: 262659
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0/20
                          IP: 186.193.64.0/19
                          IP: 187.1.64.0/20
                          IP: 187.85.0.0/19
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 2804:58::/32
                          IP: 2804:e8::/32

Validation:               Failed, certificate revoked on Fri 03 May 2024 19:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c5:b5:15:95:de:47:d6:4d:56:9d:ba:24:82:59:cc:bf:00:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:16:46 2024 GMT
            Not After : Apr  3 11:21:46 2025 GMT
        Subject: CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:90:4e:f8:e9:cd:60:d3:9e:22:2a:f5:70:
                    7e:36:4b:f9:0c:2b:67:be:0a:fb:58:84:b9:5a:45:
                    a8:85:d5:d2:5d:e0:d3:ff:4d:b6:a7:1f:8a:74:a5:
                    ad:51:6e:0a:7b:1e:0a:6a:63:35:85:0e:75:95:a4:
                    6a:95:da:cb:73:80:16:c8:2e:7e:ca:45:6d:12:65:
                    2d:4c:63:48:03:46:bf:f0:87:7f:a3:05:de:c8:a3:
                    58:de:0b:74:e4:8c:88:5e:a3:f3:88:01:95:89:58:
                    c9:1f:bb:74:7f:17:74:a3:a5:e6:e0:67:c6:4f:b2:
                    61:57:d2:b2:88:20:86:49:c1:20:06:4d:a9:28:73:
                    8a:d0:c2:95:03:49:bb:f3:29:f8:98:2f:6d:0d:2c:
                    3d:98:57:65:b3:87:59:c7:e2:0a:37:e0:78:d4:92:
                    05:2e:57:b8:02:d2:d9:1c:50:32:6a:13:a5:44:21:
                    d4:a8:d2:25:54:87:74:c8:a8:41:93:7a:a4:c6:f6:
                    d6:9e:9d:df:ce:75:e9:dd:1e:29:4b:a1:26:7a:67:
                    03:ee:4f:c0:c0:99:0a:69:16:ca:6d:84:97:54:0e:
                    19:fb:73:d0:bd:72:64:85:e9:a2:61:91:5a:97:61:
                    57:d7:b8:ce:fb:36:e5:15:93:2c:60:b5:65:43:b3:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20
                  179.127.48.0/20
                  186.193.64.0/19
                  187.1.64.0/20
                  187.85.0.0/19
                  200.52.16.0/20
                  201.33.240.0/20
                IPv6:
                  2804:58::/32
                  2804:e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262659

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:e5:e3:cb:0a:2a:03:6d:ad:fc:c8:e1:fd:66:47:f7:ec:
         6f:8e:f6:52:3e:e9:fc:8c:d9:59:81:66:bc:fc:b0:fc:af:b2:
         b3:da:81:39:bf:00:fb:c5:35:71:60:76:39:e4:7c:1e:af:91:
         1f:fe:d1:45:25:30:98:98:56:da:58:e6:4f:aa:63:cc:27:9f:
         75:3d:df:c6:d7:d6:a9:dd:b3:64:e2:d7:a8:74:03:68:52:cf:
         40:f9:33:a3:48:4f:5f:4b:f9:05:6c:72:8f:6d:91:fe:cb:df:
         ef:3d:d5:14:c9:60:95:7d:bb:7e:61:c2:1b:1d:c8:7b:60:5a:
         82:3c:0c:12:08:c3:2d:86:9e:4c:11:ee:62:cf:5d:ea:8b:a4:
         aa:b0:7c:85:63:0a:eb:b5:ba:e2:19:72:67:7f:69:09:ee:3d:
         19:b6:d4:21:6e:2e:79:a2:89:7e:e3:5f:96:90:af:00:c9:14:
         95:48:16:2a:20:6a:78:e5:54:94:f7:0f:dc:c7:2f:cf:22:7a:
         eb:25:f8:2a:0f:4d:a2:ed:e2:20:7a:3c:56:51:5a:3e:32:7b:
         5a:4e:0b:93:f6:6f:27:f2:f7:f1:4a:4f:bd:40:48:65:36:cd:
         3d:b0:b5:52:70:c0:bc:65:73:74:42:0e:65:b9:68:3c:a4:61:
         93:c9:0f:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org