Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/025C88102099431D2AE978A261CF18956F353974.cer
File:                     025C88102099431D2AE978A261CF18956F353974.cer (raw, json)
Hash identifier:          gRTvoQ0uSrKBs1bpczMPhJQ1cGB/H9Er463/0AgCEvY=
Subject key identifier:   02:5C:88:10:20:99:43:1D:2A:E9:78:A2:61:CF:18:95:6F:35:39:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58052966FEFD195B31859E06041E54861D2244E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/025C88102099431D2AE978A261CF18956F353974.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Aug 2024 17:10:54 +0000
Certificate not after:    Tue 12 Aug 2025 17:15:54 +0000
Subordinate resources:    AS: 262856
                          IP: 177.10.208.0/21
                          IP: 2804:4050::/32

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:05:29:66:fe:fd:19:5b:31:85:9e:06:04:1e:54:86:1d:22:44:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 17:10:54 2024 GMT
            Not After : Aug 12 17:15:54 2025 GMT
        Subject: CN=025C88102099431D2AE978A261CF18956F353974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:46:ef:ac:7f:82:97:b9:b8:27:37:f2:ad:
                    f1:8a:45:9d:7e:b3:8c:a2:d3:4a:49:94:ff:d1:df:
                    c3:38:d7:77:8a:9f:e7:e2:d5:0a:d0:98:ac:6b:b6:
                    5b:20:9a:de:a5:b6:be:96:67:53:4e:b6:ea:7e:73:
                    b7:da:8b:d5:f3:4d:53:7d:32:cd:77:ef:0e:c8:22:
                    2b:10:64:97:23:bb:72:0a:34:b1:b2:b1:6d:71:b2:
                    eb:75:5f:05:2e:d1:40:9d:9e:68:49:ad:1c:3e:33:
                    78:16:21:bc:2f:9d:7d:fc:d0:bc:4d:a8:51:78:e1:
                    df:05:10:3f:8f:2b:d6:dc:15:d8:8d:4e:05:9c:c8:
                    77:c1:62:97:89:a9:8c:3a:3b:6c:be:1b:58:e4:12:
                    72:8f:42:e1:d1:15:e5:b1:28:8d:8c:74:8a:b4:3b:
                    90:ae:2b:e3:d3:37:3f:80:1a:70:31:54:dc:48:1c:
                    81:d2:da:8b:97:1e:2f:ae:ce:44:42:6b:c5:5e:d9:
                    85:36:1a:7c:ff:0a:e5:6f:21:92:e5:3a:7e:98:ad:
                    1e:12:4d:f4:36:67:b9:e9:e2:de:7f:f5:60:0d:c0:
                    d5:96:4e:d8:62:aa:db:bf:f9:e3:73:99:1e:07:d2:
                    ba:48:b5:50:2b:38:64:1c:fb:1f:6e:10:5f:23:b3:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:5C:88:10:20:99:43:1D:2A:E9:78:A2:61:CF:18:95:6F:35:39:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/025C88102099431D2AE978A261CF18956F353974.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.208.0/21
                IPv6:
                  2804:4050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262856

    Signature Algorithm: sha256WithRSAEncryption
         26:71:02:a1:de:0b:0f:15:d0:4a:08:00:c3:02:8c:58:2b:54:
         24:c6:0f:6f:36:c3:60:63:8e:b8:0d:de:8d:08:3a:5e:ab:a4:
         37:c5:22:40:d4:ff:19:a8:a3:41:88:e2:0f:0e:e1:41:a5:c2:
         b2:71:9a:68:7c:e6:1c:74:1d:c4:32:73:81:5d:66:b1:5d:f0:
         6e:84:d2:63:b2:6f:10:45:da:a9:e2:23:a0:c7:66:bb:fe:89:
         61:d2:83:03:cd:05:13:f8:3d:2a:1d:e0:cb:ed:e2:56:c8:8d:
         65:07:ce:3a:87:cc:7f:ef:9a:cf:83:74:8f:fb:48:d3:91:3f:
         bb:a8:2e:0d:38:2a:65:79:49:72:e9:a2:ef:dc:46:5f:db:39:
         c3:0a:16:29:8c:2e:3b:02:fe:fa:81:5e:12:d0:8e:4e:0f:68:
         fa:0b:da:9b:6a:08:bb:8f:63:5b:cb:8b:e1:b7:d4:1e:a9:ac:
         00:44:ff:33:7e:6c:8b:52:7a:19:49:a3:2c:1f:59:ec:c5:05:
         6a:5b:50:62:b5:1f:b2:95:e3:91:f0:58:1f:b4:2e:ca:19:b1:
         2b:d7:8f:3e:c2:e7:ca:22:b9:c3:9c:09:fd:e3:41:d9:88:23:
         19:bc:c7:70:0b:00:97:2b:8d:4f:07:4d:20:15:4d:1d:77:f6:
         a0:11:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 20:00:58 2024 by rpki-client on console-ams.rpki-client.org