Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07C6B2A97C53849F68BA49D6264A05DD180CEB23.cer
File:                     07C6B2A97C53849F68BA49D6264A05DD180CEB23.cer (raw, json)
Hash identifier:          P41PgF+RrBu/WFAtc3shlUcunFvyYiXUIMR2+dMWRJo=
Subject key identifier:   07:C6:B2:A9:7C:53:84:9F:68:BA:49:D6:26:4A:05:DD:18:0C:EB:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       29A7E57D9211BE8D4847FB50057B1E0C0DA40107
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/07C6B2A97C53849F68BA49D6264A05DD180CEB23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 20:27:23 +0000
Certificate not after:    Fri 29 Aug 2025 20:32:23 +0000
Subordinate resources:    AS: 262851
                          IP: 177.10.144.0/21
                          IP: 177.86.144.0/21
                          IP: 191.240.200.0/21
                          IP: 191.242.112.0/20
                          IP: 2804:1270::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 13:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:e5:7d:92:11:be:8d:48:47:fb:50:05:7b:1e:0c:0d:a4:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 20:27:23 2024 GMT
            Not After : Aug 29 20:32:23 2025 GMT
        Subject: CN=07C6B2A97C53849F68BA49D6264A05DD180CEB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:c9:29:27:08:dd:7d:09:c7:74:06:f3:e2:
                    82:bc:3b:3e:da:6c:40:f5:0a:d3:c7:44:27:60:e5:
                    f3:29:cc:b2:98:5d:7b:55:fb:d1:15:be:a4:c3:17:
                    8f:a1:44:ee:e2:e1:1f:8d:56:69:a7:25:67:c1:f5:
                    ef:d4:89:7e:85:93:0a:c4:e5:c6:87:15:55:3e:a3:
                    85:de:35:c7:cc:d6:af:7f:7a:20:31:45:af:94:57:
                    4f:d3:47:f1:d2:f7:41:49:d1:da:e9:fa:b2:2b:e3:
                    97:7b:f4:24:9e:1d:c1:45:56:48:9d:f4:2d:01:b0:
                    ad:f8:2b:e8:f1:8a:79:77:ff:97:b7:60:40:ad:db:
                    92:2a:18:e9:86:23:f7:29:ec:61:be:08:33:93:ef:
                    f1:d8:5b:66:ac:08:9f:94:03:7c:3a:b7:02:1d:70:
                    09:33:09:97:ba:18:13:73:f8:31:32:42:ec:0a:87:
                    63:f8:14:37:1d:2c:99:a9:ee:ae:68:bd:51:52:a9:
                    ef:28:d9:45:d0:68:78:4e:05:12:96:1a:f6:74:8c:
                    36:dc:05:c8:c1:14:0d:51:7b:b5:a8:98:69:13:fa:
                    89:6c:90:3d:f1:76:1b:c4:b6:e0:1d:0b:50:b3:10:
                    d2:79:09:cf:b7:21:29:58:61:c6:72:f7:01:cc:f9:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:C6:B2:A9:7C:53:84:9F:68:BA:49:D6:26:4A:05:DD:18:0C:EB:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/07C6B2A97C53849F68BA49D6264A05DD180CEB23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.144.0/21
                  177.86.144.0/21
                  191.240.200.0/21
                  191.242.112.0/20
                IPv6:
                  2804:1270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262851

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:0d:13:24:67:07:92:f1:f6:de:db:da:e4:78:17:8d:5a:
         78:38:8c:53:a5:9b:85:f6:00:02:14:1b:a1:45:9c:27:55:96:
         bf:77:10:24:c7:bb:8d:b7:14:c7:54:fd:ec:da:13:a3:74:3c:
         6f:5b:cc:48:6d:25:35:2c:b4:76:eb:c0:64:c3:94:4b:0c:69:
         e8:6b:77:83:a4:59:80:6c:de:eb:33:e1:18:ec:4e:92:a7:ff:
         1c:35:98:a1:e6:6c:60:de:84:fa:3d:56:cf:10:52:6f:bd:ac:
         94:8e:41:3e:72:b0:88:d0:a2:51:1d:3c:0a:a6:07:b1:c1:8b:
         29:02:dd:03:22:64:fd:68:e0:c9:ba:00:9f:72:29:81:19:fb:
         78:01:25:c3:dd:65:92:ee:41:7b:7e:02:49:e4:b6:97:97:98:
         2b:40:bc:9a:f5:97:85:f2:13:9e:08:7e:d6:b4:fc:e7:14:fa:
         a2:b8:40:f3:47:14:42:03:b2:93:f2:57:99:73:fc:6d:c2:67:
         b2:d5:f4:9d:39:4d:58:20:b2:83:7a:42:f5:d4:dc:57:f6:01:
         36:5a:9b:b5:e4:90:2b:93:2f:fe:bc:37:76:cf:b6:cc:4f:67:
         8a:ba:9a:36:4d:5c:08:d4:0f:00:a7:5f:f7:d1:5b:04:c2:c5:
         e6:61:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:43 2024 by rpki-client on console-fra.rpki-client.org