Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer
File:                     C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer (raw, json)
Hash identifier:          Rmp0qSqf/FovMhA5Qwl06SUwhkDNku7FEMGAYRd0/Cs=
Subject key identifier:   C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32464C4ECFF5C11ABC1437B2E6BBB6D84463DBCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:00:22 +0000
Certificate not after:    Thu 03 Apr 2025 15:05:22 +0000
Subordinate resources:    AS: 268659
                          IP: 45.165.64.0/22
                          IP: 45.165.88.0/23
                          IP: 2804:5494::/32

Validation:               Failed, certificate revoked on Fri 24 May 2024 04:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:46:4c:4e:cf:f5:c1:1a:bc:14:37:b2:e6:bb:b6:d8:44:63:db:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:00:22 2024 GMT
            Not After : Apr  3 15:05:22 2025 GMT
        Subject: CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:58:3f:a8:42:1f:4b:4e:c9:ef:10:d3:9c:
                    62:ef:41:ef:c4:b4:7b:f2:b3:b2:70:87:44:2b:f1:
                    4b:37:22:e1:ef:aa:3f:f3:cc:3f:a8:69:8e:e4:8b:
                    89:95:e9:41:30:58:66:aa:76:3d:e2:64:e8:0a:bb:
                    70:84:84:50:6e:58:8a:0c:df:d8:fd:cd:5d:7b:b4:
                    ca:72:41:49:85:d0:2d:3d:2e:1c:b9:b0:ce:33:a4:
                    a3:d0:75:d2:a1:e9:30:93:fc:91:a6:5d:10:fa:9c:
                    43:16:88:8b:55:80:48:74:2b:e4:9c:18:a7:37:33:
                    05:3e:74:f3:fc:f8:a8:96:6d:5f:94:63:60:52:3e:
                    9d:09:79:52:91:f9:07:40:a8:3d:0e:b1:97:2b:10:
                    3a:49:8f:29:ad:e7:c5:4a:20:3b:ed:7d:f6:d0:69:
                    4f:ca:9c:0b:fa:7a:12:d5:96:ff:32:ac:a4:39:4a:
                    b1:6d:5b:da:7e:5a:69:9f:ee:0e:3e:1d:16:b0:e3:
                    fc:47:72:4b:25:ae:da:00:2d:83:0c:69:2c:c7:f7:
                    ec:5d:fe:22:f9:ca:30:f8:1e:75:95:0a:db:da:d8:
                    b0:ea:4b:bb:56:6c:ff:43:6f:02:3a:39:4d:84:16:
                    41:32:2c:43:a2:ca:fa:98:43:f4:fe:81:6c:e5:77:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.64.0/22
                  45.165.88.0/23
                IPv6:
                  2804:5494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268659

    Signature Algorithm: sha256WithRSAEncryption
         c8:db:ad:90:3f:15:d5:57:89:53:d4:8f:60:42:26:6c:a4:65:
         1e:d4:bc:81:e9:52:52:05:26:c9:b7:e2:26:61:6d:ef:d9:47:
         1c:52:f0:d3:bf:b6:6d:2b:38:4f:03:2f:51:f8:41:e5:88:62:
         3a:d2:a1:74:69:57:fb:16:64:15:dd:7b:f5:63:f3:85:fb:d7:
         b9:b1:59:48:61:9f:f5:8f:4d:69:0c:df:2e:c0:43:3e:26:4c:
         09:77:bb:67:f4:c6:a9:8a:c6:4f:e5:56:78:87:13:ca:fd:9d:
         0e:3f:90:da:dc:3d:84:b4:88:0b:59:14:8d:35:c4:85:f4:c0:
         17:f1:e0:80:33:6e:0d:7d:d6:2b:93:9a:95:66:c8:6f:d3:6c:
         ec:aa:58:33:01:7c:31:96:ed:12:89:80:a7:25:5f:55:96:44:
         f5:98:00:26:f1:98:84:46:db:98:76:26:1f:15:6d:f0:38:bc:
         43:aa:f5:1e:f5:59:94:bd:24:ad:f3:25:07:d7:80:64:ff:98:
         e9:0b:58:9e:b5:ae:a6:94:92:93:5e:06:a9:d8:ba:07:a6:22:
         95:c7:70:d0:82:4c:8f:07:e2:f9:2a:61:69:e7:05:21:11:49:
         9f:98:75:fb:8e:d0:3d:88:bd:9e:43:b8:7d:f8:a1:ce:16:ea:
         67:de:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 06:51:53 2024 by rpki-client on console-fra.rpki-client.org