Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
File:                     B4A507A3449B35297C2E0851F09576570269B539.cer (raw, json)
Hash identifier:          nTeJ1R74v9RhMsj2mv32KQRFRD8Zk3J+VL9BfDPsDWE=
Subject key identifier:   B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FF1B09B26270F3EC7D6ED73567D98D63779B532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 May 2024 21:07:52 +0000
Certificate not after:    Mon 26 May 2025 21:12:52 +0000
Subordinate resources:    AS: 269508
                          IP: 45.188.36.0/22
                          IP: 2804:65b0::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 21:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f1:b0:9b:26:27:0f:3e:c7:d6:ed:73:56:7d:98:d6:37:79:b5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 27 21:07:52 2024 GMT
            Not After : May 26 21:12:52 2025 GMT
        Subject: CN=B4A507A3449B35297C2E0851F09576570269B539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:b6:eb:c1:d7:38:ff:64:a9:fb:6c:21:9b:
                    69:01:62:70:fc:be:70:37:b0:4c:2a:16:c4:98:a8:
                    fc:2f:d8:ff:83:7b:c3:ce:ce:b0:b4:74:14:37:4b:
                    8a:49:fd:da:fc:24:36:6a:50:cc:20:8c:e3:27:5a:
                    c8:db:22:ad:2b:15:9e:97:03:13:b0:c3:12:e6:d3:
                    bd:48:dc:4f:6a:03:c2:9c:77:6b:c3:8c:6a:aa:78:
                    98:16:8b:68:94:58:2b:a9:5e:ca:88:c8:e0:ac:4b:
                    05:b3:80:ed:1a:4d:35:6d:e8:f3:c8:4f:6f:5a:3a:
                    28:c1:68:a8:80:3c:4f:a6:3a:3a:33:45:d4:e2:80:
                    b6:2b:05:a0:3e:66:19:10:29:e7:10:e3:d8:bc:3f:
                    77:d4:93:7d:ed:fe:e1:7a:6e:9a:c4:07:cd:ea:97:
                    ca:19:1e:31:9e:9c:55:d1:aa:81:65:a1:47:46:d0:
                    8c:de:c1:bc:bf:42:da:e7:b6:7d:ad:09:71:54:37:
                    f4:5c:7f:7d:ae:1b:e5:e9:ce:7d:b6:7f:d1:1f:51:
                    30:b5:4e:5e:88:24:73:39:d8:ce:12:ab:45:21:6f:
                    34:d2:ec:28:42:6e:56:f5:f5:81:f4:3c:16:d3:67:
                    e7:ab:4b:fb:10:69:ca:49:44:72:a5:dd:ed:21:fa:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.36.0/22
                IPv6:
                  2804:65b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269508

    Signature Algorithm: sha256WithRSAEncryption
         47:91:d1:06:99:29:5c:df:59:a7:46:7d:99:6f:89:cd:e4:cc:
         4e:df:4b:6e:6b:50:7a:80:c8:35:9b:b8:21:c4:b0:53:06:a3:
         74:de:fa:41:42:ed:93:ea:18:d9:00:a0:4b:10:16:10:85:37:
         50:78:b6:34:7a:7f:de:39:df:91:d8:62:86:75:a1:90:7f:47:
         4c:ab:b1:89:b7:7c:35:ec:b4:cd:44:8d:62:38:5f:80:52:36:
         a7:2d:5e:ae:f4:4c:b8:f4:e8:43:ed:de:7a:69:7a:8c:78:0f:
         03:c6:0c:c3:8e:cc:df:fe:4f:52:4b:2d:59:39:aa:f5:0e:29:
         e8:ac:77:ac:45:8b:5e:a3:aa:76:41:1a:d6:54:1e:7e:9b:76:
         e5:5c:a3:9c:37:9e:7d:65:0d:5b:bd:0d:b5:ec:bd:86:2e:b3:
         99:f1:f9:87:8f:2d:b1:c1:e0:3a:3e:c3:fd:ab:a4:a2:94:c2:
         01:01:ca:b2:42:72:0a:8f:44:51:67:e4:41:6e:ce:f6:7b:47:
         9e:ae:09:b5:d2:c5:6d:46:b9:b4:4a:5b:7a:f9:ec:74:44:d0:
         24:9a:1c:ec:31:1c:41:b4:21:32:98:19:49:e8:a2:c4:a3:c6:
         44:44:77:a5:be:ee:4b:fe:04:44:8e:f5:68:ed:e3:a7:2e:b6:
         f1:c6:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 23:06:32 2024 by rpki-client on console-ams.rpki-client.org