Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/495E049C49C0140EB2B92F912CA704E624C6FC48.cer
File:                     495E049C49C0140EB2B92F912CA704E624C6FC48.cer (raw, json)
Hash identifier:          17dOh8N5jh/TOfXEJDzQNgJbKkfK316mLsbWeqidt78=
Subject key identifier:   49:5E:04:9C:49:C0:14:0E:B2:B9:2F:91:2C:A7:04:E6:24:C6:FC:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       287BBDFF7702021333CB9F16756F39C46C53006A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/495E049C49C0140EB2B92F912CA704E624C6FC48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 01:50:11 +0000
Certificate not after:    Sat 19 Apr 2025 01:55:11 +0000
Subordinate resources:    AS: 270293
                          IP: 201.71.196.0/22
                          IP: 2804:69d0::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 03:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7b:bd:ff:77:02:02:13:33:cb:9f:16:75:6f:39:c4:6c:53:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:50:11 2024 GMT
            Not After : Apr 19 01:55:11 2025 GMT
        Subject: CN=495E049C49C0140EB2B92F912CA704E624C6FC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:36:48:93:1c:83:21:95:f3:93:03:c6:ea:
                    ea:b5:20:0d:8d:8e:21:fb:b9:c5:7c:24:97:2a:ff:
                    e7:b0:f1:2a:49:3e:af:74:90:ee:d4:42:09:cc:c4:
                    b8:b5:af:14:00:39:d0:5e:96:28:89:a8:0a:c7:51:
                    e9:77:c6:96:be:02:08:6c:85:ee:aa:90:fc:20:4d:
                    0c:71:cc:e4:91:e1:7a:51:61:53:e5:fc:82:64:ef:
                    b3:22:4e:71:1e:26:7f:94:7d:90:d6:35:2c:62:ab:
                    f4:6d:2f:16:ad:a4:2b:b2:4b:1b:65:21:3b:cd:aa:
                    a3:ab:cb:84:31:6b:af:72:aa:d2:a9:39:39:66:5f:
                    c1:9a:d0:f8:9b:42:86:ef:4a:f5:db:4f:c2:0f:0e:
                    a9:1a:e8:97:af:ad:f9:c6:87:13:ae:34:95:ba:8f:
                    de:70:dc:5c:db:be:9c:b8:ec:ec:0a:48:ad:f4:f9:
                    92:91:56:e6:6d:d4:e7:30:1e:39:ec:36:34:c5:e6:
                    d7:79:d4:42:3a:6e:5f:31:10:d5:63:d5:41:b0:6a:
                    dc:dd:87:c6:9c:fa:a9:53:95:a4:e8:92:4b:c9:5a:
                    a8:d8:27:10:4e:42:f2:2c:0c:6d:97:7b:53:25:fd:
                    d1:76:68:40:56:ec:51:e4:54:72:5d:ff:60:59:8c:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:5E:04:9C:49:C0:14:0E:B2:B9:2F:91:2C:A7:04:E6:24:C6:FC:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/495E049C49C0140EB2B92F912CA704E624C6FC48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.196.0/22
                IPv6:
                  2804:69d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270293

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:d6:64:4b:1e:2c:28:54:a0:ff:ea:5d:a9:28:42:e4:e4:
         38:c7:ec:cc:36:e2:e5:c4:f4:82:00:ab:62:76:0b:7d:42:69:
         8e:af:45:cd:8f:7a:f6:08:01:3c:e2:9a:8d:07:d7:62:fa:15:
         b2:86:21:11:3b:c5:43:76:f3:3f:5a:65:ef:8a:f9:da:e4:da:
         34:82:bd:bf:9a:4f:4b:c6:bc:f5:69:31:18:b9:f3:f6:8e:da:
         33:b1:99:ba:f6:ca:7b:4b:dc:a9:0e:9a:5f:eb:5a:ae:58:87:
         0d:07:2e:66:23:40:48:da:5e:0b:e2:2a:d4:fa:df:4c:08:e6:
         e5:67:bf:34:ea:c5:b8:b8:f1:ca:06:f5:9a:42:7c:92:eb:d8:
         df:5e:06:70:73:e9:02:85:d1:92:25:ee:ec:01:48:9e:35:3e:
         ef:20:f8:b0:5c:d5:6a:6b:62:c6:48:1c:8d:46:d2:50:60:08:
         df:19:b9:00:39:9b:41:a4:16:0e:fa:89:30:47:61:f7:79:b2:
         18:be:3c:cc:3c:76:65:7d:fa:28:0c:96:06:aa:00:9b:a8:cd:
         b2:4a:03:ec:25:e5:aa:3a:ae:36:3b:50:64:2c:21:e5:ae:a7:
         e8:d8:b4:89:06:34:ac:ad:c0:2a:47:f8:30:82:f6:96:49:05:
         fe:13:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 07:46:11 2024 by rpki-client on console.sobornost.net