Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4D98D45DAE595BEA52EF65521249698BEAC741A.cer
File:                     B4D98D45DAE595BEA52EF65521249698BEAC741A.cer (raw, json)
Hash identifier:          dOa6frDoMNgM6ZeM6Fc5GQ0q5mT9kP86htByZBV6RtE=
Subject key identifier:   B4:D9:8D:45:DA:E5:95:BE:A5:2E:F6:55:21:24:96:98:BE:AC:74:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C3A94629362D71CD678E27DC8E49A7FEF77505F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 18:47:42 +0000
Certificate not after:    Thu 17 Apr 2025 18:52:42 +0000
Subordinate resources:    AS: 270494
                          IP: 24.152.4.0/22
                          IP: 2804:6cd0::/32

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 22:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3a:94:62:93:62:d7:1c:d6:78:e2:7d:c8:e4:9a:7f:ef:77:50:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 18:47:42 2024 GMT
            Not After : Apr 17 18:52:42 2025 GMT
        Subject: CN=B4D98D45DAE595BEA52EF65521249698BEAC741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:cf:1c:88:b1:32:a5:1e:13:c4:f3:dd:bb:
                    12:4d:41:15:9f:4b:40:46:c4:3f:0d:79:f3:dc:4f:
                    f0:b3:de:ef:86:20:38:12:ab:5a:29:44:f6:ea:66:
                    48:e6:67:2d:8d:ea:39:71:fc:1b:99:f4:a7:5e:91:
                    e6:a6:41:5a:c2:c4:bf:57:56:fd:f7:6a:74:47:a4:
                    b6:ab:8f:d5:d4:48:07:f4:e4:aa:f5:02:85:c6:91:
                    a8:2b:bf:09:17:2f:ff:cf:02:6a:00:96:1a:ee:b1:
                    6d:9d:1a:7c:9b:00:e4:d3:df:c0:34:05:4b:60:57:
                    6d:52:41:2a:ca:c2:b9:e3:de:e1:0d:7e:24:36:c6:
                    fe:05:9a:ee:98:82:0e:7b:06:fd:0b:1b:6c:ca:13:
                    63:cb:0c:5f:29:94:8f:7f:d5:56:1e:ec:7e:ba:ab:
                    cf:f3:b8:b1:38:b4:8a:fa:f3:50:19:5c:1a:d9:1e:
                    b1:24:40:4e:b5:e9:fb:0e:e9:b4:05:fa:f3:e3:e0:
                    db:f7:55:1d:20:f8:29:23:53:40:a0:07:44:1e:31:
                    34:06:00:fc:3b:ef:28:be:d2:86:7e:50:05:02:a8:
                    14:cb:42:72:99:df:d9:b2:c1:c0:a4:95:45:05:05:
                    1a:32:5e:fa:81:5a:c1:1b:28:91:06:44:ae:a1:ca:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:D9:8D:45:DA:E5:95:BE:A5:2E:F6:55:21:24:96:98:BE:AC:74:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.4.0/22
                IPv6:
                  2804:6cd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270494

    Signature Algorithm: sha256WithRSAEncryption
         55:63:7e:d8:45:26:3e:13:1f:36:be:f9:9a:d2:e0:49:d7:9a:
         c6:e9:dc:fa:b3:f5:dd:18:38:2b:f7:b2:ad:0e:f8:64:38:2b:
         74:32:33:e7:32:ab:f3:6e:9e:17:4d:8b:33:ca:28:0c:14:a7:
         62:9a:72:f0:98:3a:4c:02:e4:c2:26:23:e8:09:94:6f:14:90:
         12:3c:ef:b5:43:f2:b8:99:2a:cc:3e:95:2f:85:4b:b1:72:c5:
         22:5f:22:b7:30:1b:e2:35:d5:d7:70:6f:bf:33:70:b8:6a:fc:
         71:46:78:ff:b6:0d:58:d1:55:e0:5a:21:ca:2e:a8:80:c2:ea:
         f2:ca:8a:cd:a5:b9:9a:1c:ae:cd:0a:1d:2f:d3:8a:30:9d:38:
         c7:11:ba:a2:05:45:6b:a2:54:a4:78:a9:c7:e2:09:ef:11:18:
         c5:91:b0:8b:29:2a:95:bd:13:e3:16:4f:4b:7f:32:53:ba:95:
         96:19:87:2b:08:d1:70:53:14:e2:8f:ff:f0:16:d6:ea:52:60:
         7e:51:b9:be:90:f7:5e:32:9b:02:7d:2c:15:bb:e0:7e:13:f4:
         19:8b:03:9e:9d:b8:d4:a8:f2:0f:2c:8a:bc:30:32:86:9e:a2:
         3a:46:5e:06:f1:dd:11:06:17:e6:08:77:2a:a6:92:a1:2b:8d:
         f5:e1:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 23:28:36 2024 by rpki-client on console-fra.rpki-client.org