Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/056CF883ECA7596A363591A0D2B27D76A10D3CDD.cer
File:                     056CF883ECA7596A363591A0D2B27D76A10D3CDD.cer (raw, json)
Hash identifier:          tlJTJTimUh3zH7Fs6CexW32PMJn+MvWGcJbHdr/ryxM=
Subject key identifier:   05:6C:F8:83:EC:A7:59:6A:36:35:91:A0:D2:B2:7D:76:A1:0D:3C:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42279AB163482D2629120C313E3C979DA8EC5A12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/056CF883ECA7596A363591A0D2B27D76A10D3CDD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 May 2024 20:20:51 +0000
Certificate not after:    Fri 09 May 2025 20:25:51 +0000
Subordinate resources:    AS: 267347
                          IP: 45.233.180.0/22
                          IP: 2804:4c10::/32

Validation:               Failed, certificate revoked on Wed 22 May 2024 01:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:27:9a:b1:63:48:2d:26:29:12:0c:31:3e:3c:97:9d:a8:ec:5a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 10 20:20:51 2024 GMT
            Not After : May  9 20:25:51 2025 GMT
        Subject: CN=056CF883ECA7596A363591A0D2B27D76A10D3CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:e8:65:3c:42:31:10:1a:2c:08:72:05:2c:
                    eb:32:95:62:6d:da:16:72:fa:d6:05:bb:5b:4a:73:
                    78:49:a6:51:89:0d:85:f2:d7:88:1d:4c:11:b4:66:
                    61:28:70:c6:f4:a0:32:4d:a3:96:62:ca:c6:e4:c8:
                    29:d5:31:13:3f:87:62:85:79:e0:34:b8:44:08:1b:
                    39:57:b6:0a:f6:aa:6c:bb:bc:12:f2:91:48:6d:29:
                    e9:f1:d4:3c:d5:bc:76:17:c4:3f:60:bd:24:e0:0d:
                    e3:df:41:e0:ea:17:79:62:cb:cd:82:f5:35:e4:52:
                    51:76:e2:4b:fa:94:20:90:80:c1:f9:56:81:09:07:
                    07:25:60:4d:df:b9:0b:e7:d8:3d:4d:27:3b:f6:4c:
                    8b:e8:c4:25:e4:53:2e:43:7e:3d:8a:f8:34:dc:05:
                    4b:f1:5c:22:11:47:99:65:4d:96:52:81:d9:a1:9a:
                    6d:65:49:be:ad:54:e3:b7:7e:47:0c:12:d5:db:57:
                    e2:40:61:db:38:29:80:a0:a7:54:de:2d:15:c2:5a:
                    a5:2c:38:8e:08:8a:9b:32:27:f8:e0:86:6c:59:dc:
                    cd:72:f4:bf:6a:92:9e:30:74:a2:69:41:13:cb:47:
                    d3:af:a1:a9:73:e4:ca:b3:bf:d3:1f:79:37:b1:ec:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:6C:F8:83:EC:A7:59:6A:36:35:91:A0:D2:B2:7D:76:A1:0D:3C:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/056CF883ECA7596A363591A0D2B27D76A10D3CDD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/22
                IPv6:
                  2804:4c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267347

    Signature Algorithm: sha256WithRSAEncryption
         c7:22:f6:d7:4a:42:14:b5:de:49:0a:bd:ee:3b:e0:e6:32:d4:
         af:00:fa:e0:ba:5c:69:87:37:27:0f:e2:14:9b:92:35:6f:20:
         a9:ee:f6:07:7d:a4:3c:3b:47:15:17:2e:05:b1:9d:8f:24:64:
         e1:6f:20:bc:2c:59:0c:f1:48:eb:51:c2:b4:d9:93:0a:82:04:
         be:b4:b2:34:14:11:f8:9b:b2:9c:79:b4:fb:c3:9e:95:67:5b:
         29:4d:4c:9d:b0:ec:43:c3:59:ed:54:b2:b7:5c:64:33:4d:d0:
         2f:00:a8:20:b0:5c:90:d4:33:2a:8f:ba:5e:93:c4:29:4b:c4:
         c0:ad:69:a4:de:b3:60:04:b7:aa:da:0e:7e:5e:01:d9:15:7c:
         4c:2e:e9:57:da:29:4d:82:34:0b:e5:b3:12:42:18:e4:15:2b:
         6e:a6:cd:44:b3:35:53:ab:91:06:e6:1f:c5:3d:3b:e5:20:b7:
         d0:0d:95:3e:1a:de:c3:56:1b:bb:b6:ed:8f:a9:19:33:df:d1:
         a1:78:4d:99:57:71:8f:29:68:e6:39:27:93:aa:60:43:54:04:
         53:ac:14:8f:6b:1c:06:bd:e1:48:2e:33:03:fb:e2:d5:8c:e6:
         26:46:f7:30:17:64:bb:44:b3:de:d6:d9:ae:d3:1f:cf:d6:66:
         b0:61:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 03:59:39 2024 by rpki-client on console-fra.rpki-client.org