Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer
File:                     A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer (raw, json)
Hash identifier:          lm2/VNJD4Z+VC7sLLMbNdsgwCkieo2tDKfPHmboZv7c=
Subject key identifier:   A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       749BC871AA12A1EC159A46F36BFC8246D82EFD7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:51:24 +0000
Certificate not after:    Thu 03 Apr 2025 02:56:24 +0000
Subordinate resources:    AS: 267657
                          IP: 45.224.112.0/22
                          IP: 2804:44d8::/32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 02:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9b:c8:71:aa:12:a1:ec:15:9a:46:f3:6b:fc:82:46:d8:2e:fd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:51:24 2024 GMT
            Not After : Apr  3 02:56:24 2025 GMT
        Subject: CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:41:5b:34:9e:8d:d6:fa:b3:39:91:05:80:
                    c2:65:00:f8:55:6d:80:0b:99:9f:a0:80:3d:a2:f7:
                    7f:59:b4:97:aa:15:c6:57:e3:0a:7e:16:3d:a8:37:
                    45:f3:aa:bc:c4:b6:1e:d1:0d:11:dd:79:48:43:d1:
                    eb:03:09:66:47:7f:2b:67:2b:e6:29:49:c5:6c:21:
                    94:0e:38:30:83:74:9d:ad:33:03:8d:3f:0b:9e:26:
                    c1:1f:b2:e3:ea:31:a0:34:ee:0b:7d:9c:56:c6:de:
                    a2:49:6e:a8:1b:a2:1a:4a:bd:3e:b9:cc:27:7a:ce:
                    d7:11:c0:12:2c:b9:e3:aa:b1:8d:1e:1b:02:9a:3e:
                    eb:3b:b0:ef:7f:0b:84:56:03:ef:31:4e:a6:1e:30:
                    6b:98:a4:2a:28:f8:e2:9c:c5:5e:1d:33:23:65:43:
                    56:e7:30:01:1e:bc:0e:a4:6d:28:f9:c8:0e:bd:fc:
                    66:37:45:b8:f8:3f:90:ff:93:ab:10:49:a8:eb:05:
                    92:50:8d:e2:f0:26:1e:9c:f8:0e:c5:f1:7e:6d:57:
                    1c:25:ac:a7:91:e2:c4:b3:03:21:8d:c9:92:a1:d5:
                    67:b9:71:83:77:c9:ca:00:05:91:3a:d6:2e:c7:e5:
                    e2:95:ee:62:ba:f0:cd:f7:a8:42:f7:5d:f5:ea:4e:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22
                IPv6:
                  2804:44d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267657

    Signature Algorithm: sha256WithRSAEncryption
         84:33:39:80:ac:29:ff:93:bc:77:eb:bc:6b:72:2c:60:fa:d6:
         e5:5d:a6:ca:44:35:6c:cb:83:19:bb:34:e3:97:35:31:62:ce:
         22:86:9f:1b:81:1f:6c:a0:dc:ea:2c:2f:2c:03:81:56:5e:6f:
         7c:95:28:72:f6:17:37:4f:22:5f:e0:ca:93:d9:39:b3:fb:22:
         db:83:b4:de:fd:f1:b2:44:ca:33:85:a6:ab:66:c0:1a:1c:35:
         7a:56:54:39:f5:96:b9:03:51:cd:e3:69:0a:91:5c:c0:67:cc:
         89:46:4c:2f:84:0f:3c:77:2d:ef:8c:b4:92:d4:60:7f:27:93:
         d7:42:66:04:61:69:90:5f:50:de:4d:0b:30:ef:36:3a:e3:48:
         b0:d6:40:c8:31:e4:37:c2:88:cd:0c:4d:81:00:85:cf:ca:d0:
         9c:4a:31:c5:8b:b9:56:1f:9d:06:f5:bf:53:8f:82:52:ee:5a:
         8f:57:8b:16:74:6f:9b:88:98:90:78:58:d6:ab:22:e7:19:31:
         c7:82:03:e4:d5:90:5b:fc:ac:c5:33:e5:ce:c8:d1:f7:7e:9f:
         3b:df:65:67:f0:42:76:7a:62:54:d2:5e:d0:90:a2:6e:f2:5d:
         12:b8:2d:fe:be:d4:3b:41:f2:e7:84:07:ab:10:60:d6:4e:3e:
         9b:43:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 06:16:59 2024 by rpki-client on console-ams.rpki-client.org