Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.cer
File:                     0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.cer (raw, json)
Hash identifier:          e819JL2Su69EOhKE8WbceOGNmmhsiBdMM9myuUyPbHc=
Subject key identifier:   0A:81:FA:71:60:39:5D:5A:9A:91:E8:3E:7E:60:BE:C8:D1:DA:64:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B52D6B0569D9EBD11A514EF82FEF26F734EEE46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Apr 2024 13:37:46 +0000
Certificate not after:    Wed 16 Apr 2025 13:42:46 +0000
Subordinate resources:    AS: 52910
                          IP: 186.251.38.0/24
                          IP: 2804:1f3c::/36

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 15:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:d6:b0:56:9d:9e:bd:11:a5:14:ef:82:fe:f2:6f:73:4e:ee:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 13:37:46 2024 GMT
            Not After : Apr 16 13:42:46 2025 GMT
        Subject: CN=0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:04:50:38:49:9d:10:c0:83:52:c7:3f:ad:
                    b6:da:a6:12:dc:2e:0c:65:87:2d:b4:2b:9e:40:fe:
                    e7:88:b7:c2:5d:2e:51:67:a7:20:1e:8c:57:f3:68:
                    28:96:80:a5:95:16:7d:57:f9:f2:11:40:75:fa:e3:
                    8c:70:33:25:34:c8:9b:f9:49:5a:70:c1:a5:ae:37:
                    a9:c2:23:56:db:91:2c:47:c0:88:31:9f:7f:21:33:
                    46:93:ab:1d:0b:f6:da:ee:3d:19:f6:b9:16:50:91:
                    d8:45:b2:22:8f:74:69:67:06:96:42:fc:f8:2d:dd:
                    5e:58:ed:42:57:4f:e5:80:4a:ec:7b:e2:39:e7:03:
                    d6:c8:4d:e9:fa:1d:82:1c:54:19:4e:55:2d:f3:75:
                    2c:e7:66:5d:7e:91:c4:86:a3:bc:18:34:59:39:15:
                    1d:70:b9:81:ef:38:cc:9c:74:b4:89:7b:77:20:15:
                    ef:d9:14:a3:05:72:f7:3c:70:c7:f8:3e:cf:59:e8:
                    ae:e7:7e:a8:2e:88:c6:b2:8d:f7:fe:23:74:63:b0:
                    ad:bd:3c:ee:2f:e6:2d:4c:e4:94:15:2d:c3:d8:3f:
                    57:47:2e:3d:b3:d4:0c:eb:4f:9f:b9:68:4b:b8:bb:
                    a4:89:38:06:66:15:28:7a:f6:83:7e:9e:2a:bd:49:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:81:FA:71:60:39:5D:5A:9A:91:E8:3E:7E:60:BE:C8:D1:DA:64:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24
                IPv6:
                  2804:1f3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52910

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:d6:d1:12:33:24:16:2a:bf:ac:eb:e2:be:ba:dd:a2:29:
         de:f5:94:27:92:d0:7c:30:80:08:33:44:42:ee:90:14:41:45:
         6e:3d:ff:b1:ca:cd:19:fc:68:69:da:b6:90:e3:a5:6b:11:bc:
         89:5e:40:d3:09:e9:f4:a4:10:fe:28:db:e7:6e:f4:1b:30:af:
         cf:33:86:f6:12:fa:f0:13:cc:cc:bf:98:8c:62:40:b9:3c:04:
         82:44:65:ee:11:ed:40:3a:1c:5d:a4:8f:c6:ad:f1:75:2a:54:
         2b:ca:a7:af:36:be:57:18:a3:d4:c9:4d:56:f5:e2:58:3c:c9:
         8b:fd:3c:a5:f4:69:b4:7c:6b:4f:ec:6f:e9:cf:15:3c:03:29:
         4c:14:26:f4:a1:aa:f6:16:37:ab:bb:9a:32:76:f1:55:9b:41:
         f4:f6:20:59:c7:5e:6d:1c:23:17:74:b1:f7:ca:c4:af:2b:4f:
         b9:02:83:1e:05:e6:42:e5:8b:21:fe:37:85:cb:2f:7e:db:ee:
         32:08:a8:7b:d6:b8:ea:90:96:19:02:f8:f5:8e:2e:b2:4a:04:
         00:57:d7:94:13:69:42:da:1e:1b:60:38:15:66:de:7a:1a:7f:
         a7:47:ee:46:e7:e7:63:87:e1:ee:95:ba:0e:b6:11:e5:9c:20:
         ae:ce:b5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org