Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer
File:                     A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer (raw, json)
Hash identifier:          G4LvMRzvUwsIL4X1kxeUKteJD3KuHu6jO0TnrrBC8lU=
Subject key identifier:   A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B448FAF115D1471FE7488376E6CFF7392A41C9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/A4AC7525A2D94581DF22D6B154FB0E8F05452901.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jul 2024 14:26:40 +0000
Certificate not after:    Wed 23 Jul 2025 14:31:40 +0000
Subordinate resources:    AS: 262659
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0/20
                          IP: 186.193.64.0/19
                          IP: 187.1.64.0/20
                          IP: 187.85.0.0/19
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 2804:58::/32
                          IP: 2804:e8::/32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 13:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:44:8f:af:11:5d:14:71:fe:74:88:37:6e:6c:ff:73:92:a4:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 14:26:40 2024 GMT
            Not After : Jul 23 14:31:40 2025 GMT
        Subject: CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:d8:b8:72:6e:1d:1a:3d:f0:84:7b:ea:2d:
                    6e:0f:b5:e3:6f:1a:ca:9b:fb:e7:e4:1e:6e:77:a2:
                    8f:f8:0c:f1:9d:1e:e1:58:6c:40:5b:46:26:92:b2:
                    64:80:c5:d1:e8:e3:20:0f:2a:14:c1:31:07:7b:b6:
                    f9:72:83:28:6d:94:c5:27:b6:db:c0:08:c3:71:69:
                    41:f5:59:6a:21:eb:28:a0:b8:6b:5f:99:77:16:77:
                    7f:7f:bd:35:83:78:13:0e:9b:c8:d9:e8:a0:2f:8e:
                    10:ff:65:7b:ea:2d:c3:d0:f6:34:38:a6:0a:89:83:
                    da:79:75:d9:2a:af:6d:d1:f4:3b:88:72:a2:07:e2:
                    bf:2c:55:2d:c5:82:ac:c6:b0:3b:3d:55:42:88:b4:
                    b7:e6:d7:13:90:54:ad:2b:1e:5f:6b:a0:98:80:4e:
                    ac:15:c7:34:fe:26:49:5d:09:80:51:ea:ba:14:b3:
                    87:91:59:95:fc:95:31:dd:d4:86:26:68:ae:aa:cc:
                    1d:27:3d:c3:9c:41:00:47:72:9c:88:30:e4:e1:2c:
                    b2:cc:65:7e:dd:d0:da:3b:4c:47:4b:dd:25:d0:36:
                    e2:98:2d:9c:dc:20:d7:0b:68:57:37:b8:4e:4e:13:
                    ae:b5:47:58:5b:ce:88:7c:bc:98:85:18:d3:c4:b4:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/A4AC7525A2D94581DF22D6B154FB0E8F05452901.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20
                  179.127.48.0/20
                  186.193.64.0/19
                  187.1.64.0/20
                  187.85.0.0/19
                  200.52.16.0/20
                  201.33.240.0/20
                IPv6:
                  2804:58::/32
                  2804:e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262659

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:70:45:4c:b5:6f:33:62:f8:d4:33:d4:d9:9f:c5:b7:8a:
         c3:74:6c:8a:6c:aa:cf:12:75:a6:c6:76:0d:97:4d:9a:80:7d:
         41:0b:c4:0b:de:2c:6b:6c:1a:28:bb:8e:0a:e0:31:ff:83:f3:
         6e:93:54:d0:40:cd:a6:6e:a2:d6:fd:6e:0d:ee:ed:80:73:df:
         12:55:bf:d0:b0:7b:fa:f7:0d:cf:ca:d8:d9:01:59:3b:70:ea:
         d5:60:8c:d2:f6:7d:d5:fc:4e:f1:a8:5d:27:49:52:4e:d9:b6:
         84:01:87:4f:5e:d0:c3:86:65:7e:d5:6c:07:20:cc:6e:c9:18:
         87:d6:b3:dc:d2:a4:3d:f1:4b:89:09:c6:d7:4a:f5:ad:91:db:
         fe:4f:09:1b:0d:b5:93:9f:94:44:6f:9b:49:77:04:18:ad:b6:
         f1:af:d7:60:f8:34:2b:e1:ba:a0:24:15:bc:6f:90:80:96:9b:
         32:28:60:f7:bb:27:5c:f4:0e:6f:0f:df:6f:e5:94:f9:bd:80:
         f9:af:e0:b1:d6:aa:86:ac:b7:4f:02:9e:74:52:98:53:61:a8:
         75:b8:f0:6f:20:24:69:fe:d8:14:23:73:2a:46:d1:93:e0:61:
         4b:66:65:06:0d:81:5b:ca:ee:73:b2:9f:fe:0e:88:cc:c6:7d:
         37:78:d3:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:31:00 2024 by rpki-client on console-fra.rpki-client.org