Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
File:                     C47C4419F3B0301460D71A68A39D35E25A0926C3.cer (raw, json)
Hash identifier:          XVpdoksK6hMBZ0OHB56bSfY28Xa5TFtMcarvBH0obDY=
Subject key identifier:   C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       188BE415625E48F93D33E609BE1CBE22615A3F89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jun 2024 17:27:01 +0000
Certificate not after:    Tue 03 Jun 2025 17:32:01 +0000
Subordinate resources:    AS: 262376
                          IP: 143.255.168.0/22
                          IP: 177.74.148.0/22
                          IP: 177.128.168.0/22
                          IP: 2804:10d4::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 20:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8b:e4:15:62:5e:48:f9:3d:33:e6:09:be:1c:be:22:61:5a:3f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 17:27:01 2024 GMT
            Not After : Jun  3 17:32:01 2025 GMT
        Subject: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:d4:5f:d5:3b:b7:ec:92:a9:73:ca:51:80:
                    63:1f:1c:12:8c:8f:00:e0:7e:b7:a2:66:91:fd:c7:
                    4a:bb:5e:8e:eb:8b:b4:ab:50:5f:2b:07:d2:de:28:
                    de:aa:23:29:ca:9e:b5:be:5f:ef:02:7a:4f:ab:20:
                    4c:4e:39:3c:a6:69:36:63:28:c4:fb:fd:7d:ab:41:
                    a7:3e:fd:7d:2d:39:28:d9:89:af:d7:05:1f:d3:f6:
                    ed:81:b2:2c:86:8c:b4:d7:48:57:4b:02:c1:62:7d:
                    92:31:88:a9:fb:7b:e4:9e:93:f8:27:80:4b:92:b0:
                    39:95:ec:bb:04:3a:e9:8f:4d:d8:48:c0:4b:98:e2:
                    5a:78:d3:d3:5e:c6:ba:98:eb:73:bb:56:24:6b:02:
                    1c:9f:b6:ab:e0:27:e2:b6:40:92:2d:fd:6e:5a:45:
                    8c:af:7c:12:07:ee:88:b7:f7:10:c6:c4:af:e1:4e:
                    50:0f:2e:53:20:f9:29:c6:44:6d:60:d4:48:a1:7e:
                    a3:90:22:82:1a:dc:d8:fb:79:2b:f6:d6:2b:a3:b7:
                    3f:6c:8c:ec:b3:cd:f6:12:8b:07:3f:70:5e:7b:c7:
                    bf:26:46:ef:b8:63:2c:cb:66:38:5f:26:c3:27:02:
                    76:ed:1c:4e:c7:65:2c:ad:61:c9:88:bb:ab:80:3f:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.168.0/22
                  177.74.148.0/22
                  177.128.168.0/22
                IPv6:
                  2804:10d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262376

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:05:a9:59:b5:96:40:4b:fa:37:fb:34:51:b0:90:e2:13:
         35:5b:53:8d:7c:cb:25:c5:3b:eb:77:b2:b4:8b:38:76:b2:ab:
         fc:84:8b:41:c2:ef:9b:f5:24:49:53:61:dc:05:6e:02:bc:0c:
         c1:dc:cd:67:b8:5b:b7:32:15:5c:30:66:f0:96:4d:0e:65:82:
         f3:1e:c0:b6:29:78:dd:06:d5:31:24:90:54:7f:c7:b0:39:38:
         0e:5a:d3:7c:0b:c6:3d:df:d6:b8:e1:16:ff:a6:89:ec:c5:43:
         ea:98:11:11:4b:4a:f2:fa:dd:93:dc:40:62:f0:39:86:5b:e1:
         c2:05:1d:e8:69:f8:39:c7:82:48:f1:09:e8:27:6f:d2:a7:6e:
         c2:df:90:82:9a:c3:f4:79:f9:d6:ae:b7:d2:5b:15:3c:ef:c1:
         9c:a9:b7:44:9d:14:cb:4d:b7:eb:32:fc:75:2d:13:69:ee:42:
         9b:5d:2f:de:33:b7:ae:69:74:12:e8:88:31:dd:db:9c:ab:e6:
         7b:68:5f:c9:fc:9e:a9:df:e9:c3:16:3a:03:2e:64:ce:4d:c1:
         c6:e3:c7:36:ad:4c:af:ca:36:be:f0:37:ab:c6:05:27:5d:5c:
         25:9f:e7:a8:35:82:d4:1a:84:44:4f:87:cf:61:ce:3f:64:24:
         14:02:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 22:44:12 2024 by rpki-client on console-fra.rpki-client.org