Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer
File:                     C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer (raw, json)
Hash identifier:          PaLh3vWv9rKXEBR5Ob8FF/P5XDYWHZVscBVade1ak80=
Subject key identifier:   C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DD10178210B0F6AD3F84A7710841989CC30A95B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Apr 2024 16:44:32 +0000
Certificate not after:    Tue 08 Apr 2025 16:49:32 +0000
Subordinate resources:    AS: 268205
                          IP: 45.236.48.0/22
                          IP: 2804:4d90::/32

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 22:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d1:01:78:21:0b:0f:6a:d3:f8:4a:77:10:84:19:89:cc:30:a9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 16:44:32 2024 GMT
            Not After : Apr  8 16:49:32 2025 GMT
        Subject: CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:59:52:75:69:cb:44:a1:91:6f:71:58:e8:
                    4e:82:27:0e:2d:0f:7a:05:7a:73:c7:b7:a1:91:92:
                    05:b9:01:21:a4:08:b0:13:ba:24:ed:7a:c1:4c:27:
                    2b:2d:23:cf:32:b6:2f:07:32:19:6e:71:42:8f:97:
                    da:b2:5c:17:c5:15:38:a8:da:fe:60:6c:53:b5:6d:
                    38:01:aa:4e:68:49:94:7c:00:ad:be:1a:7d:28:cd:
                    27:29:c3:ca:ae:ce:3b:ad:5d:3b:5a:7f:a9:a8:0d:
                    6b:c0:6c:7c:59:6a:30:ad:98:20:80:27:9e:31:28:
                    a9:b8:a1:fb:5e:2a:47:be:34:01:c7:a0:a4:e3:df:
                    66:5d:7f:f4:65:dc:7e:17:26:21:7e:f2:c2:8d:86:
                    46:54:bc:98:20:25:20:1d:52:1b:ba:88:78:0e:ff:
                    14:2e:78:bc:a0:0c:96:39:bd:3a:2a:05:f8:e6:4b:
                    c0:48:c3:73:3c:93:2d:19:a7:99:a7:26:af:e5:57:
                    d3:d4:fb:1a:e2:55:a1:96:f1:a3:57:58:81:d0:4f:
                    3a:13:cd:be:5b:51:2a:61:a2:33:d8:73:35:54:f0:
                    d3:2d:38:06:7d:a5:00:ed:52:5c:63:62:01:34:65:
                    66:0f:79:89:98:a0:6e:33:1f:a6:c0:f6:01:e1:d0:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22
                IPv6:
                  2804:4d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268205

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:ff:20:5a:1d:ed:7f:81:a6:10:98:5f:f8:79:6d:9d:5d:
         67:f4:02:50:a4:39:6d:5d:be:44:4d:2b:03:c9:3c:39:a3:b1:
         0f:00:5c:3e:62:1c:49:33:0e:95:46:84:54:9b:55:71:4c:8c:
         3c:d2:31:c4:17:60:d7:9c:2c:2d:28:c0:fd:f9:e8:33:7e:79:
         cf:4b:d7:a7:d5:35:f7:f0:bb:cc:c1:b1:5e:57:bd:c0:41:85:
         bb:fd:7c:b7:85:c1:ff:bd:22:54:ac:0e:c0:99:da:30:79:c9:
         f2:a5:c4:62:de:d1:7e:2b:6b:f1:ce:48:6e:a6:a5:f8:6a:f9:
         e0:bb:2b:29:f1:59:a5:a7:a8:49:8a:52:b2:9a:92:1b:6d:c0:
         f2:c8:1b:e4:89:38:44:14:0c:03:31:78:da:c6:53:7f:17:43:
         4f:d2:2f:74:fc:62:4a:0f:70:e3:a9:91:14:66:5f:bb:ae:8a:
         09:d6:88:24:d2:e4:96:24:32:2c:17:95:35:11:44:71:6d:be:
         ac:bd:1e:62:a0:cd:94:3d:55:bd:a5:38:c9:90:27:29:78:25:
         7e:fb:af:13:52:0d:19:8b:5f:1f:1a:01:9d:11:72:cb:5f:8b:
         85:a4:e2:e5:c5:b8:51:8d:5c:4f:9e:e4:aa:a2:51:67:62:1f:
         90:02:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 00:35:53 2024 by rpki-client on console-fra.rpki-client.org