Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
File:                     4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer (raw, json)
Hash identifier:          EsA486MGtOUC79EjyvC3VPZwn6CL4XW2eT6Q5xthup8=
Subject key identifier:   4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       462ABE91B325BE8487DF0E5A0BD38D3431878B45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:50:17 +0000
Certificate not after:    Thu 03 Apr 2025 01:55:17 +0000
Subordinate resources:    AS: 262889
                          IP: 177.54.32.0/20
                          IP: 2804:11a0::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 05:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2a:be:91:b3:25:be:84:87:df:0e:5a:0b:d3:8d:34:31:87:8b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:50:17 2024 GMT
            Not After : Apr  3 01:55:17 2025 GMT
        Subject: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fe:65:35:20:8d:4b:6b:d0:5b:75:a0:19:76:
                    f8:e1:f2:7d:62:28:c9:4b:c1:c7:b7:b8:a1:cd:99:
                    5f:a5:20:1f:48:b8:be:c8:b9:39:4a:ae:ac:b9:0a:
                    03:35:ef:ad:b8:07:52:75:c4:d6:b8:75:b3:62:d3:
                    16:4f:dd:d4:35:33:1a:54:31:7d:30:9e:f3:a6:0a:
                    3b:40:d8:87:5f:6b:e8:3b:a2:bb:cd:81:65:47:c4:
                    ee:11:e1:01:5b:07:c1:90:6e:0b:fc:5f:2e:38:3d:
                    ec:ce:b3:f9:cb:51:6e:d4:23:78:d0:22:fa:54:f7:
                    0a:36:51:51:dc:61:f8:65:1b:d3:23:e1:1a:3c:c5:
                    30:61:22:15:f3:69:ef:be:aa:ee:d9:36:89:71:06:
                    48:c6:95:e2:f0:20:47:5c:b9:c9:bc:11:5e:44:c3:
                    2d:55:9b:92:e4:02:92:67:ee:01:33:dd:4b:7f:f3:
                    a5:fd:47:89:9b:68:c9:a8:78:c4:97:ab:28:45:e4:
                    6e:f7:9f:7a:dd:9a:5d:f2:7e:a2:9c:5b:ce:2c:19:
                    84:b7:22:97:ad:45:36:f0:ce:45:dc:d7:a6:4e:59:
                    25:dd:69:56:4d:71:f4:4f:4a:8a:43:e7:7e:0a:b0:
                    76:dd:33:81:ec:13:a2:28:59:42:69:93:36:9d:f8:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.32.0/20
                IPv6:
                  2804:11a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262889

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:2b:96:64:d8:fe:fe:5a:09:61:5c:0b:9b:6a:9d:15:3a:
         e7:4d:fa:50:07:42:77:3a:c3:76:de:16:45:98:ac:c9:f1:26:
         08:ca:50:5a:b5:97:31:37:be:a8:98:e7:9f:e2:41:40:ff:f5:
         4d:bc:a9:7e:39:11:be:17:93:0f:c4:52:a5:b7:dc:ce:d7:41:
         9f:96:5d:92:d6:e3:a6:2a:5f:75:ae:3c:b8:64:0d:34:f6:d1:
         f5:88:67:d1:b1:1c:03:c9:0b:8c:01:12:51:6c:aa:de:b1:ee:
         c1:f7:1f:ca:ba:04:28:5b:5b:f2:70:65:45:ec:8e:17:32:37:
         21:84:ef:00:3c:b2:0d:83:d5:b1:57:97:71:ce:0f:f9:10:70:
         c9:ce:04:7a:09:80:e7:b1:80:98:92:13:71:9e:90:96:1e:fb:
         4e:e0:63:23:fa:35:55:56:fd:e8:f5:ea:d7:b3:0f:eb:20:26:
         57:31:35:6f:74:37:05:8e:82:69:01:cb:8b:db:51:fe:22:38:
         fd:41:0d:10:2b:5b:c1:d4:24:9e:7d:e9:02:d4:f6:1b:fd:bd:
         c3:8b:4b:0b:a8:98:cf:8e:e1:ae:b7:23:63:35:0d:8f:17:c9:
         d9:0d:77:3a:73:20:b7:af:47:63:89:0c:c9:7f:f2:df:54:f8:
         ba:f5:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 08:45:24 2024 by rpki-client on console-ams.rpki-client.org