Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
File:                     B445A2940634EDC971D4185E883796F1FFA053D1.cer (raw, json)
Hash identifier:          7Sx1N3rn8Kzcokn7628dlF2AYvaFa3/OHFCKGYB2vrc=
Subject key identifier:   B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       547ED981AD8B0914615EE450A1433BE49117A5F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:15:09 +0000
Certificate not after:    Thu 03 Apr 2025 13:20:09 +0000
Subordinate resources:    AS: 268364
                          IP: 45.238.240.0/22
                          IP: 2804:5004::/32

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 14:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7e:d9:81:ad:8b:09:14:61:5e:e4:50:a1:43:3b:e4:91:17:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:15:09 2024 GMT
            Not After : Apr  3 13:20:09 2025 GMT
        Subject: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:39:70:e7:71:57:3c:53:cf:8c:c7:95:d8:
                    d4:5e:d5:fb:cf:81:41:55:df:f5:f2:86:b7:64:f8:
                    10:2d:1d:4c:93:e1:c0:c3:d3:6e:7b:8d:9f:43:43:
                    30:71:ce:ae:73:c9:6b:7c:6d:43:db:f8:4d:b6:c9:
                    46:cd:9a:93:80:1d:78:cb:f3:ed:e1:22:97:57:32:
                    57:bc:38:87:5f:f4:1e:3e:48:40:f9:ec:0f:dc:50:
                    6e:df:46:8f:70:e3:4a:af:70:06:ed:c2:5a:6a:56:
                    f0:1a:4c:6e:24:b7:c2:26:ab:a6:83:df:e3:da:fe:
                    0e:f2:9a:ca:ce:14:27:a7:85:d1:36:18:fb:70:3f:
                    43:cb:39:4f:c7:62:29:b6:0e:58:ea:dc:33:88:59:
                    37:02:03:c5:3f:84:b3:50:e2:89:e8:d9:a3:6d:99:
                    d1:0b:6b:96:b8:e6:11:b2:8b:98:ee:e3:7d:1f:31:
                    c5:f3:12:40:0a:f7:42:91:5c:eb:46:7a:f1:7a:da:
                    f1:87:34:4d:1d:5d:99:62:db:d6:50:57:2b:fd:f0:
                    4c:71:2f:62:0c:97:af:71:4d:d7:dd:2b:53:85:ae:
                    bc:90:6b:d8:a5:ed:59:c8:4a:44:84:5b:c9:ef:95:
                    4e:a7:88:8d:70:5d:5d:a8:c9:4d:bd:68:ea:ff:91:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22
                IPv6:
                  2804:5004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268364

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:46:74:8f:de:c9:07:9b:c3:aa:b4:74:60:26:56:07:93:
         9a:85:bc:f3:a5:dc:bf:92:b1:55:07:78:b5:59:ce:95:73:88:
         fd:d7:98:34:d6:8c:19:8d:51:b6:45:03:db:af:ee:21:42:52:
         3b:27:2c:ca:e5:e5:d9:bd:e4:c9:eb:78:d3:9c:3c:40:bc:19:
         22:c2:87:a9:52:1b:51:e3:87:ad:f5:af:8d:fb:2f:84:7b:63:
         61:f6:66:52:ed:4d:1f:ef:d1:c6:5b:cf:cc:d4:98:af:5f:50:
         b1:42:a3:1d:a3:89:5d:2f:ae:2b:d3:5f:de:d3:d6:d9:63:16:
         7a:74:ea:33:5e:33:44:77:3a:58:ec:40:12:c8:fc:69:3f:81:
         c3:61:a2:19:0f:ef:61:6b:c1:fa:6e:2c:ad:9d:12:2f:ac:28:
         d9:44:21:4c:62:b5:d5:b0:a7:9d:0f:89:e8:a3:9f:43:2d:51:
         88:e4:ee:88:98:a1:29:e3:c4:dd:66:d2:d2:09:97:ce:c9:40:
         a6:e2:ff:e1:af:9f:4b:6e:04:0d:ad:f5:9d:55:32:3f:3a:10:
         4e:dc:df:2e:50:fa:84:43:9a:02:8f:35:8b:cf:cd:a4:5e:d9:
         88:41:3a:8b:63:1d:ca:c9:94:67:b0:3a:6f:17:09:0c:b3:16:
         d5:6f:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:19:50 2024 by rpki-client on console-fra.rpki-client.org