Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.cer
File:                     047A120BAFD61D12F625BE87FA116FE46AC41E8B.cer (raw, json)
Hash identifier:          R4t3aYP/HtzM+qnRLzgBz6fKMbn24IrlaQcU7x9mHgw=
Subject key identifier:   04:7A:12:0B:AF:D6:1D:12:F6:25:BE:87:FA:11:6F:E4:6A:C4:1E:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C68AF07DBA1198E70959328DF7FF96CDD6A1B40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 06:41:55 +0000
Certificate not after:    Wed 07 May 2025 06:46:55 +0000
Subordinate resources:    AS: 263515
                          IP: 191.243.216.0/21
                          IP: 2804:1318::/32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 19:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:68:af:07:db:a1:19:8e:70:95:93:28:df:7f:f9:6c:dd:6a:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 06:41:55 2024 GMT
            Not After : May  7 06:46:55 2025 GMT
        Subject: CN=047A120BAFD61D12F625BE87FA116FE46AC41E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:c0:7c:db:2f:08:a2:1a:ed:04:26:30:5d:
                    c6:b8:00:de:58:40:e0:ed:1b:e7:08:79:aa:80:ea:
                    46:66:71:fd:54:b4:08:5a:d2:ba:5d:0a:e7:c3:f5:
                    4e:fc:e5:6f:53:48:42:85:d3:e9:b6:01:6f:d9:62:
                    27:7d:d1:e7:2b:b2:0d:96:3c:26:48:a9:8d:26:69:
                    3b:0e:b5:12:c7:a6:16:a2:53:fc:2a:7d:59:5d:da:
                    2f:b2:ca:77:16:e8:c2:d9:7a:32:0a:db:87:c8:7e:
                    f7:fb:f2:7e:77:44:c7:e1:b9:17:0f:be:d8:77:64:
                    f6:5c:95:13:17:f0:19:e8:7c:ee:79:38:24:b1:d2:
                    08:00:81:e2:ce:6f:67:91:e1:9e:01:b3:e3:5e:4c:
                    53:d5:71:a9:94:10:46:65:be:a3:24:23:6d:e5:f1:
                    a7:09:8c:4f:30:3d:5b:91:97:3f:a8:e2:75:db:0f:
                    c1:32:79:68:94:06:ca:0a:d0:c0:a0:e7:88:9a:4c:
                    9b:c4:ff:22:45:a6:6c:87:35:68:ce:0b:a2:24:51:
                    82:dc:31:82:a7:4f:80:c2:17:82:5e:09:3c:33:55:
                    1c:c1:47:35:eb:7b:56:86:2d:dd:3d:70:eb:48:ff:
                    2e:3c:80:4d:d6:8f:47:8d:d1:55:86:26:b8:10:d3:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:7A:12:0B:AF:D6:1D:12:F6:25:BE:87:FA:11:6F:E4:6A:C4:1E:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/21
                IPv6:
                  2804:1318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263515

    Signature Algorithm: sha256WithRSAEncryption
         b0:1d:8d:af:43:86:79:98:ab:08:e9:45:27:00:3f:5c:8b:70:
         f5:9b:e0:ad:a5:5e:a7:c4:ee:6e:7c:fd:3b:58:50:d3:b6:49:
         ce:c7:0e:7f:1e:2a:ae:36:e6:cd:ce:3a:18:20:ec:ae:be:a2:
         57:d0:83:a6:ec:b5:b9:7a:c2:01:6d:02:13:ad:14:59:fc:7d:
         66:86:9c:fb:80:e8:27:05:85:68:f9:b0:e6:df:3d:a1:7d:06:
         9e:73:38:ed:d8:75:fa:65:2f:f0:9f:24:4d:87:47:13:0b:93:
         de:f1:98:7a:7f:5d:52:f4:de:f4:c8:7c:5e:75:e7:11:8c:1d:
         17:5b:51:15:a0:c3:86:88:f2:5e:27:5c:cf:65:06:31:c4:be:
         fb:f4:3d:13:cd:8a:81:68:a8:ca:58:27:41:e4:00:1d:42:dd:
         37:f2:4c:c2:28:da:5e:0a:d7:5a:24:74:d7:80:b8:fb:df:72:
         9d:b9:dd:0d:6e:b3:74:67:c2:3e:c4:e3:96:4c:0a:70:d2:ee:
         ba:31:0c:4c:91:dc:21:67:4a:1e:e8:16:90:05:57:e9:6f:ca:
         55:36:bc:f2:db:e8:16:c3:55:ed:89:1f:21:07:4b:84:12:59:
         2f:23:58:31:93:78:4f:46:64:bd:cf:02:17:c6:b9:65:65:05:
         e7:6c:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:57 2024 by rpki-client on console-fra.rpki-client.org