Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer
File:                     C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer (raw, json)
Hash identifier:          /U+H0+qtSZx7yGIeT9YZ47hFwhcaE3EgnAuylq1fsNs=
Subject key identifier:   C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       262B73753DFC384C651B5E24CFBA01B0746129DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:24:36 +0000
Certificate not after:    Thu 03 Apr 2025 08:29:36 +0000
Subordinate resources:    AS: 273713
                          IP: 2804:8b20::/32

Validation:               Failed, certificate revoked on Sat 04 May 2024 01:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2b:73:75:3d:fc:38:4c:65:1b:5e:24:cf:ba:01:b0:74:61:29:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:24:36 2024 GMT
            Not After : Apr  3 08:29:36 2025 GMT
        Subject: CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:7f:9d:15:cf:28:6b:0e:3f:fe:e2:39:a4:
                    bc:11:e4:5f:28:19:ba:85:cf:4d:29:e9:71:78:d3:
                    bc:e8:6f:59:fc:b9:8d:7a:07:fb:3d:86:7c:e2:46:
                    2d:fa:68:aa:2d:4b:2b:47:b3:ef:ac:9b:17:b2:b4:
                    81:ef:56:1e:87:dd:aa:c7:45:a6:d5:f5:cd:4a:3c:
                    46:79:f1:af:e5:04:5a:23:22:7b:04:73:bb:63:e7:
                    d2:90:b0:bc:4f:71:f1:55:cf:11:36:68:36:e2:78:
                    ee:17:be:ea:fd:75:75:79:8b:0c:ec:e5:5e:c6:3a:
                    d8:09:64:bb:78:b8:d7:77:b5:1f:db:10:e5:16:d2:
                    41:92:97:b1:dd:15:1e:0c:c3:41:52:da:a7:f8:66:
                    7b:7d:7d:5c:47:ba:61:c8:44:82:7b:ad:74:25:23:
                    50:22:d2:e8:8f:57:b3:2f:de:42:8b:42:f4:1a:c4:
                    48:b0:24:b8:24:73:de:39:7a:7d:95:1f:73:55:22:
                    46:af:43:40:a5:7a:24:58:ee:8d:73:96:9a:cf:d5:
                    9e:84:fd:49:4c:4b:dc:6a:6d:44:b5:97:8b:4e:35:
                    f5:c1:b9:ad:bc:df:9a:85:a0:4e:9d:29:46:45:01:
                    1a:19:bb:98:aa:70:9e:59:62:8e:72:ca:fd:d7:be:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273713

    Signature Algorithm: sha256WithRSAEncryption
         db:57:d0:20:f8:ec:38:a7:42:e3:ad:b8:ac:e4:d1:59:48:3b:
         31:a5:cc:44:09:7a:9f:13:ad:92:4e:c0:61:66:06:35:41:e1:
         a1:9f:64:40:5a:68:ab:12:e5:1c:55:c7:9a:3b:7b:23:0a:46:
         d9:c2:59:4d:fe:2a:5e:e5:08:bb:31:55:52:b9:9e:24:3c:c7:
         0d:0d:d3:02:e0:a5:8f:a5:9c:e9:b0:42:46:ac:4c:14:61:74:
         3c:32:06:5f:3c:83:42:04:ee:94:1e:74:36:b9:00:cf:32:fb:
         33:ce:6f:c7:0e:bd:58:7d:3d:d6:a2:ac:02:6d:5e:a0:ff:9b:
         92:f0:e6:7b:b0:01:bf:cc:d2:0c:68:7e:4f:2b:3c:26:4e:d2:
         4c:2b:03:af:7c:b9:ec:80:da:a7:25:ff:f9:cf:8e:ac:2d:48:
         be:f5:53:a6:ce:14:28:c8:e6:b0:30:1d:e4:4b:d2:b6:3d:7b:
         11:61:4b:a9:76:52:07:b4:bd:c1:56:c2:83:58:1c:19:89:f3:
         ed:b0:b5:7a:59:be:3a:df:80:72:82:f4:f2:84:fb:4e:3f:a1:
         e7:d5:d8:05:fc:2f:5c:12:93:e0:90:71:9e:76:a9:bf:15:3e:
         70:58:27:78:77:ca:ab:cf:ce:74:d5:3f:50:71:99:2d:e2:f6:
         11:68:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org