Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.cer
File:                     4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.cer (raw, json)
Hash identifier:          u0mPtlGuo4ibamWP0FogwKhH4zLPH3rFN6x+KdFjuIk=
Subject key identifier:   4A:A5:13:FD:94:60:D1:05:08:ED:BC:EB:9D:14:D3:E4:8D:75:E4:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       511950678AB84D990FEA4BFD2777FF0D8E31FC14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 00:47:42 +0000
Certificate not after:    Tue 20 Jan 2026 00:52:42 +0000
Subordinate resources:    AS: 28585
                          IP: 187.87.128.0/20
                          IP: 2804:7c::/32

Validation:               Failed, certificate revoked on Tue 21 Jan 2025 01:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:19:50:67:8a:b8:4d:99:0f:ea:4b:fd:27:77:ff:0d:8e:31:fc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 00:47:42 2025 GMT
            Not After : Jan 20 00:52:42 2026 GMT
        Subject: CN=4AA513FD9460D10508EDBCEB9D14D3E48D75E47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:ce:f8:3d:04:e3:f1:7b:25:e3:8b:84:b2:
                    fa:78:43:c4:1c:93:c0:95:2d:a8:2b:4d:d4:75:76:
                    74:72:2b:ba:aa:ff:a7:e6:5e:5f:05:2d:f8:3e:28:
                    b7:e9:79:2d:92:df:0f:1e:28:b1:ad:b2:fc:f2:30:
                    96:41:90:1c:13:4e:35:ca:35:02:20:ae:13:3e:d0:
                    5e:24:e6:c1:ba:e6:f4:0d:2f:c9:28:42:93:7f:56:
                    dd:74:16:22:27:59:84:68:65:00:ec:16:e3:ea:38:
                    88:78:a3:55:7c:ef:06:ae:c8:2c:79:fa:6b:39:65:
                    f5:a5:ca:9c:4b:e2:a1:9a:2f:66:6f:da:d7:62:a8:
                    66:12:79:9b:ff:40:61:29:a8:e3:0b:94:69:67:e8:
                    1f:9e:b3:a6:28:93:e3:df:76:be:a8:15:b8:d1:3e:
                    91:32:f2:11:16:c8:b3:93:2f:fd:18:e7:34:9e:48:
                    a4:6d:38:6b:b2:f3:13:a7:d0:4a:9c:6d:bc:56:cb:
                    8c:e2:72:3a:60:94:dc:4c:bf:cf:76:8f:83:ec:10:
                    8e:63:21:f7:2c:cc:e8:5a:c7:99:78:e1:2d:13:0f:
                    68:86:13:b9:50:4f:d8:b2:26:3f:e4:fc:80:ae:16:
                    f0:c2:0a:27:db:43:27:b9:8d:0e:db:eb:8b:36:53:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:A5:13:FD:94:60:D1:05:08:ED:BC:EB:9D:14:D3:E4:8D:75:E4:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.128.0/20
                IPv6:
                  2804:7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28585

    Signature Algorithm: sha256WithRSAEncryption
         c2:d4:da:05:34:7c:12:30:69:ad:05:b6:e1:6b:29:5b:35:a3:
         fe:ff:80:ff:96:8f:9d:27:55:00:70:6c:ff:6f:b5:62:c6:0d:
         5a:60:50:0a:31:83:fc:ac:1c:07:84:d7:fe:30:5e:5d:c6:a9:
         49:2a:63:81:96:1a:9d:ea:5f:40:c3:2f:15:b1:f6:04:57:da:
         c4:f9:a6:cb:66:63:2b:dd:92:ff:d0:62:f6:47:2c:86:a5:6c:
         3a:e0:fc:14:60:10:1f:50:bd:eb:23:91:58:35:30:ee:35:4c:
         73:b8:77:30:e0:b5:a0:54:a0:39:ba:ff:fd:e5:d1:4e:fe:42:
         cf:4d:79:db:ab:ed:47:1d:9e:f0:1b:b1:49:38:2a:21:dc:70:
         ff:dd:6b:b0:2b:1d:e5:f8:b3:13:7c:25:75:9e:e8:6b:df:18:
         3d:af:24:49:7e:8a:28:92:37:c9:83:6b:32:9f:28:06:fc:7d:
         03:5c:2e:84:13:98:45:61:09:9d:b0:3d:30:dc:c1:a7:80:4c:
         38:ec:f4:5c:d2:76:5d:74:a7:f3:7a:63:f3:42:5a:88:e1:7d:
         4d:a1:7a:3d:f2:15:b6:56:2d:41:13:90:a0:c7:a5:eb:ad:a8:
         83:64:44:9c:98:06:49:a0:9b:b1:ec:3f:75:57:fc:f2:0e:0b:
         19:9b:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 08:54:32 2025 by rpki-client on console.sobornost.net