Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0660AD3206B956788A419C5683098FF0D4DA723B.cer
File:                     0660AD3206B956788A419C5683098FF0D4DA723B.cer (raw, json)
Hash identifier:          4qdXLxbfXmELqLXYhAZ2p3M91gRbQwH0vJ+vCyNwv9c=
Subject key identifier:   06:60:AD:32:06:B9:56:78:8A:41:9C:56:83:09:8F:F0:D4:DA:72:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F025D75271E301763A8EF7C078C0B7F25F9B25B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/0660AD3206B956788A419C5683098FF0D4DA723B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Nov 2024 17:03:23 +0000
Certificate not after:    Thu 27 Nov 2025 17:08:23 +0000
Subordinate resources:    AS: 269084
                          IP: 45.179.120.0/22
                          IP: 2804:5f38::/32
Validation:               Failed, certificate revoked on Tue 17 Dec 2024 03:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:02:5d:75:27:1e:30:17:63:a8:ef:7c:07:8c:0b:7f:25:f9:b2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 17:03:23 2024 GMT
            Not After : Nov 27 17:08:23 2025 GMT
        Subject: CN=0660AD3206B956788A419C5683098FF0D4DA723B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:a7:c4:44:b4:60:70:14:ec:71:36:5f:bc:
                    83:41:03:e7:49:6d:ab:e7:d2:4f:b3:a5:12:3e:a7:
                    71:df:0c:a8:40:0a:5c:04:81:3c:c3:94:b6:d1:ba:
                    d6:52:5a:71:eb:65:af:85:fb:b4:24:67:50:df:ab:
                    1c:8c:16:37:53:dd:4a:dc:c1:d0:c0:b7:02:10:56:
                    ca:6b:9b:17:19:5b:84:62:71:1a:38:ad:6a:b3:01:
                    11:d1:ee:d3:90:2d:9b:da:bf:bd:4b:10:c2:8e:81:
                    6d:0b:3a:8d:5e:72:63:0e:c5:ab:91:87:fd:4c:36:
                    fb:2f:c4:bd:7b:86:06:97:76:6a:95:02:1d:be:a2:
                    17:21:1e:50:d1:87:a5:b5:bd:ef:e2:2c:53:28:42:
                    ea:b3:42:b9:51:4c:45:18:8e:0f:50:bd:10:93:20:
                    31:cd:e2:87:b2:8a:4b:8e:1d:08:99:a9:62:1d:08:
                    80:19:b4:9f:ec:c7:33:be:30:51:28:55:94:0c:19:
                    88:5a:4c:e1:e5:1c:95:49:24:5b:19:b7:62:73:2e:
                    63:c1:14:f0:cc:84:13:4b:14:47:19:c2:e7:f7:1f:
                    ab:8a:65:af:bf:27:48:2e:3b:2c:92:aa:d1:b5:ca:
                    c9:90:d2:a4:32:14:43:94:ac:56:0a:5d:89:59:4b:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:60:AD:32:06:B9:56:78:8A:41:9C:56:83:09:8F:F0:D4:DA:72:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/0660AD3206B956788A419C5683098FF0D4DA723B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.120.0/22
                IPv6:
                  2804:5f38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269084

    Signature Algorithm: sha256WithRSAEncryption
         d0:d7:31:ea:33:53:2f:44:5c:58:e0:3f:ed:c1:07:2c:d4:0c:
         c5:6d:75:cb:da:14:fd:0f:37:2a:3b:00:3b:ad:ad:70:f7:f3:
         0f:35:51:e2:f0:6a:dc:f2:bd:6c:e5:d8:45:a8:f4:7a:f6:6e:
         b0:a2:36:07:c4:7b:e7:22:47:26:bd:2c:f1:dd:12:1f:65:f9:
         3d:53:e5:28:57:ac:27:0d:47:d1:88:bb:50:57:dd:3f:6c:e0:
         14:02:d4:87:d5:48:3b:3c:98:a9:eb:ea:bc:ae:88:71:d6:49:
         50:9f:cb:c6:d7:11:99:c0:29:86:56:01:39:8e:d0:19:a1:3c:
         89:d7:c4:07:b4:6f:b2:77:b5:16:ae:7c:8f:f8:76:bf:da:0c:
         96:ab:fe:d3:47:fb:68:31:fd:f7:02:49:e9:7f:ab:81:cd:16:
         80:78:df:71:ea:c1:39:b2:c6:bb:50:74:5f:3d:ef:ad:bd:15:
         c0:69:3d:40:37:d4:0e:c1:78:17:15:3a:44:c4:69:2c:8b:87:
         9b:49:9e:af:3f:65:60:18:7e:a1:84:75:af:b7:20:d7:5a:10:
         f9:0e:8d:73:28:9d:fb:cb:de:a0:c6:1a:30:7f:f9:f5:e7:fd:
         49:f9:7c:a4:0f:c9:55:ca:dc:e5:4b:27:d5:1b:32:1a:18:04:
         17:8d:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:01 2025 by rpki-client