Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.cer
File:                     01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.cer (raw, json)
Hash identifier:          hxqSvZzZ9V6IgcvMr3zn5J8vA2lx6FWVYhAnLZwYz4k=
Subject key identifier:   01:DF:53:2E:9B:AD:DC:5B:96:BE:01:73:6B:6C:89:1B:FA:2F:4C:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D9FF7A3C5BF183804A2B47FB91FDF35CB9AC487
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Aug 2024 14:08:21 +0000
Certificate not after:    Tue 05 Aug 2025 14:13:21 +0000
Subordinate resources:    AS: 265346
                          IP: 168.181.188.0/22
                          IP: 2804:2e70::/32

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 22:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9f:f7:a3:c5:bf:18:38:04:a2:b4:7f:b9:1f:df:35:cb:9a:c4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 14:08:21 2024 GMT
            Not After : Aug  5 14:13:21 2025 GMT
        Subject: CN=01DF532E9BADDC5B96BE01736B6C891BFA2F4C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:07:7e:1c:e9:cf:4b:0e:02:6d:ac:e6:af:
                    31:ac:29:13:bd:b2:a1:64:08:27:18:5b:20:b6:71:
                    b2:3e:4a:d1:2f:8a:f5:e2:0d:c0:f2:82:88:ca:b8:
                    1d:64:30:27:cd:bb:38:73:a8:57:3a:a4:39:4b:4b:
                    62:c9:3c:58:97:7c:46:d8:3a:8f:70:45:75:72:ce:
                    2d:7e:2d:ed:cc:7a:4f:4b:a1:09:f8:ee:06:94:c8:
                    87:1d:3a:91:18:96:a7:e4:ce:ec:f9:99:92:1c:eb:
                    b9:29:fc:f1:2a:88:cc:63:43:67:77:2b:39:b9:1e:
                    16:97:a6:42:d5:7c:35:a0:f9:22:8e:96:17:70:9d:
                    55:21:98:c1:e4:71:a9:e4:70:2e:a1:20:76:70:b4:
                    b7:cb:3e:12:6e:c9:4f:aa:e6:6a:e8:21:b3:03:86:
                    aa:f7:27:3b:e7:75:3f:13:6a:44:5b:2a:ab:c0:8a:
                    77:85:a9:6c:8a:b0:ef:de:ab:a9:be:d6:e1:a6:10:
                    cf:b4:03:fa:49:ff:39:a4:0a:24:6d:d6:29:58:32:
                    51:33:ae:6c:03:94:eb:96:ff:35:fe:a8:92:fa:3a:
                    bf:2c:58:b5:71:39:99:58:ff:52:00:ff:b2:61:dc:
                    73:df:71:80:bc:d6:03:7e:fb:98:14:81:00:a6:0b:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:DF:53:2E:9B:AD:DC:5B:96:BE:01:73:6B:6C:89:1B:FA:2F:4C:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.188.0/22
                IPv6:
                  2804:2e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265346

    Signature Algorithm: sha256WithRSAEncryption
         ce:8e:e6:c4:5e:ec:73:20:77:b2:f4:b8:04:58:5d:de:98:36:
         8d:ac:98:14:73:ff:c6:32:c3:a5:fb:f3:b8:9d:ba:09:f7:0d:
         95:40:07:73:6f:12:08:03:a4:fa:1c:14:21:96:37:37:c5:bb:
         9f:74:f5:fc:13:54:2e:64:28:a4:12:c1:5b:6d:38:e5:84:70:
         c9:3f:b9:82:da:9d:42:57:9b:ff:84:a5:8f:69:07:34:ef:9d:
         90:62:a2:8e:6e:9a:1a:23:c6:d1:18:78:02:3e:bd:38:8e:ae:
         41:6d:4e:e5:ca:06:53:50:7d:ed:65:2b:18:01:ae:40:a4:99:
         02:b2:85:7d:ea:6e:d5:42:31:67:06:01:d4:64:f7:ec:16:77:
         96:33:ba:23:45:96:20:49:33:2d:c4:3c:67:57:06:98:fd:87:
         04:32:23:db:23:f8:3a:9d:8d:bf:af:0d:a1:21:1f:06:ed:7f:
         e2:94:a8:64:aa:2e:52:6d:1b:f8:33:5a:9e:3f:ee:6c:15:12:
         9e:8c:c8:77:11:99:8e:c1:a6:7e:a3:b4:79:c6:b6:ae:d5:e4:
         c7:8e:7b:40:90:28:1e:f6:c7:60:46:4a:12:57:df:cc:95:d8:
         79:86:de:31:ff:b7:8c:bf:c4:48:46:b4:de:53:91:ce:1b:f9:
         56:4f:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 00:10:19 2024 by rpki-client on console-fra.rpki-client.org