Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B04C1C5E428A5A2DFE8C4DEABBABC109916539E4.cer
File:                     B04C1C5E428A5A2DFE8C4DEABBABC109916539E4.cer (raw, json)
Hash identifier:          9epQo/mifGpVp+WsFYIybi4roMrXJXtuiiMWdGAHu5s=
Subject key identifier:   B0:4C:1C:5E:42:8A:5A:2D:FE:8C:4D:EA:BB:AB:C1:09:91:65:39:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40F26C5C6F4B52EF4EC2C35E0E2678DF1F33EF57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B04C1C5E428A5A2DFE8C4DEABBABC109916539E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 22:30:54 +0000
Certificate not after:    Thu 26 Jun 2025 22:35:54 +0000
Subordinate resources:    AS: 61618
                          AS: 266413
                          IP: 170.81.100.0/22
                          IP: 2804:376c::/32

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 02:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f2:6c:5c:6f:4b:52:ef:4e:c2:c3:5e:0e:26:78:df:1f:33:ef:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 22:30:54 2024 GMT
            Not After : Jun 26 22:35:54 2025 GMT
        Subject: CN=B04C1C5E428A5A2DFE8C4DEABBABC109916539E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:6f:45:35:18:1d:fa:88:2c:65:e0:2f:d8:
                    87:d0:d3:06:34:0e:fb:7a:97:79:99:b2:b0:48:db:
                    71:36:07:7e:27:91:a4:58:c2:0d:b4:28:a7:f3:57:
                    a7:00:99:90:8c:4a:d5:6e:f0:a1:60:28:01:c0:16:
                    e6:96:d3:1a:6f:3a:6b:f1:18:33:12:a3:7a:c5:06:
                    16:a0:6c:08:77:05:04:c8:11:28:19:6f:41:b2:68:
                    1a:c4:8a:30:4c:c1:06:1f:a6:fa:55:7d:89:65:83:
                    2b:bf:f1:a9:b5:fa:d3:a7:ae:8a:46:bd:bb:72:ef:
                    6c:b8:4a:69:f9:20:63:a9:19:03:96:e8:78:24:47:
                    48:ab:60:30:35:8c:1d:d7:eb:b9:7a:64:bd:51:30:
                    b2:70:2f:4b:d7:8c:6d:60:47:da:85:4a:8f:ce:9c:
                    88:42:7d:f1:4e:14:c3:6d:ee:e0:9c:f3:12:44:f6:
                    61:cd:6f:d2:09:83:54:f1:21:80:dc:06:9f:45:bb:
                    6d:64:f1:a7:c6:25:20:20:9b:02:43:ee:6e:e9:73:
                    59:4a:b9:9c:60:cc:7a:33:2a:05:f7:9f:98:c8:18:
                    d2:39:20:32:12:8d:79:26:bd:c3:48:07:35:b0:f0:
                    44:8d:b2:11:8f:94:26:d6:b0:77:12:26:c9:ff:14:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:4C:1C:5E:42:8A:5A:2D:FE:8C:4D:EA:BB:AB:C1:09:91:65:39:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B04C1C5E428A5A2DFE8C4DEABBABC109916539E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22
                IPv6:
                  2804:376c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61618
                  266413

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:25:d3:e0:94:6c:95:2b:22:a6:7b:e7:57:f1:4a:6e:8d:
         53:40:a6:0b:f0:2f:d7:bf:ec:56:cd:3e:22:66:65:9d:2f:b4:
         93:44:4d:18:ae:81:7d:33:0f:3f:d3:a1:63:e3:94:15:c4:25:
         1b:9a:29:ce:e2:9e:51:0e:a5:e8:17:e2:78:15:8d:3d:76:32:
         ac:3f:3d:c0:ea:27:4b:25:8d:cd:3d:7d:0b:46:c2:b8:35:f7:
         a1:3c:bc:28:7c:b2:a0:75:9c:7a:fa:00:7d:f8:af:c1:fb:1a:
         6f:e6:82:d2:89:ee:04:48:fe:00:7c:21:8d:b5:97:83:c7:ee:
         a3:43:0c:a0:5c:d6:72:19:fd:5d:58:94:fc:46:58:5e:f6:b3:
         73:4f:2c:3a:f8:f8:2c:70:0f:34:3f:49:bf:03:90:6e:84:e8:
         db:ce:19:1f:28:cf:7f:ec:1a:f2:f7:55:91:7e:5c:1f:77:fb:
         68:30:b3:8a:7d:8c:73:78:92:f6:80:2a:7e:dc:04:84:48:7b:
         c3:b1:76:49:f4:f0:e2:6a:e6:e7:5f:c8:c3:1a:90:b2:a4:fb:
         4e:9a:72:29:f1:1a:05:96:a1:88:c1:20:97:17:26:d8:bf:0a:
         e7:9d:27:53:3f:fa:71:be:d7:29:2d:a3:8a:fc:79:cc:e3:8c:
         6b:8c:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:31:59 2024 by rpki-client on console-ams.rpki-client.org