Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.cer
File:                     0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.cer (raw, json)
Hash identifier:          so6xekzxTPXfwk80FHFMgCfHT+iDyHomDChO3jAfyGQ=
Subject key identifier:   0C:09:61:EF:01:26:6C:16:C5:F1:B9:ED:A9:E4:F9:40:7B:D1:64:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C8E1F5EBB5A57FD1154AC21E86CECE8E47315DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:26:02 +0000
Certificate not after:    Thu 03 Apr 2025 07:31:02 +0000
Subordinate resources:    AS: 267208
                          IP: 45.230.200.0/22
                          IP: 2804:49e8::/32

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 11:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8e:1f:5e:bb:5a:57:fd:11:54:ac:21:e8:6c:ec:e8:e4:73:15:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:26:02 2024 GMT
            Not After : Apr  3 07:31:02 2025 GMT
        Subject: CN=0C0961EF01266C16C5F1B9EDA9E4F9407BD16426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:da:de:ff:8f:14:81:c0:4c:5d:b1:46:c2:
                    fd:95:ae:a1:82:55:9f:93:bc:c4:25:7b:05:8c:3d:
                    f4:00:3e:c5:a8:f9:68:1e:41:9c:e7:a2:7e:59:11:
                    6b:4e:65:f5:37:7c:b9:00:a6:42:bd:1c:ce:45:f0:
                    79:89:f1:6a:51:9f:aa:50:e7:b9:8a:83:04:ce:76:
                    74:31:3f:8a:2b:fe:db:22:72:9b:6b:9e:73:bb:0b:
                    79:8c:41:29:7d:02:5b:44:3d:10:ef:31:77:c3:0f:
                    38:ed:eb:52:f9:7b:38:a4:2a:b4:f5:71:dd:64:ba:
                    d5:e7:c1:c2:0e:e4:67:28:a0:8f:67:08:b2:19:f4:
                    c1:e5:f9:1b:e7:08:be:69:61:58:2e:4a:85:5f:a0:
                    5f:b4:4d:f2:e5:75:eb:d3:09:fc:4a:13:38:ac:aa:
                    43:c3:a8:c4:3a:83:dc:38:72:42:7c:66:c5:14:63:
                    a6:1b:b9:8e:c4:d7:01:96:74:6f:cf:c4:3d:5f:de:
                    4c:66:7e:64:e7:a9:ec:0d:da:a5:18:ef:68:a7:24:
                    37:5e:65:04:2e:32:40:a2:f5:98:df:97:73:76:14:
                    a2:01:e2:d2:d4:be:c0:90:3a:2c:b0:64:f5:e5:aa:
                    33:1a:92:3a:a5:f2:f3:04:e2:5d:71:cb:c5:df:ec:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:09:61:EF:01:26:6C:16:C5:F1:B9:ED:A9:E4:F9:40:7B:D1:64:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/22
                IPv6:
                  2804:49e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267208

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:93:e8:2b:cf:f3:9d:78:ea:5a:bd:61:c4:b4:d5:ad:13:
         54:8f:0b:1f:87:ee:04:fd:42:cf:2a:8a:5e:b2:96:35:70:44:
         65:0c:33:84:3d:3f:ac:c7:c3:c3:b3:71:90:ab:71:d9:2c:45:
         a8:78:03:7f:7c:a3:3b:ba:15:2d:fe:52:c5:46:cd:b3:75:64:
         42:94:45:45:b8:04:c0:9b:67:75:f3:78:fa:4c:51:d7:19:cb:
         8b:b0:a4:11:ef:83:f2:ca:42:6f:55:cc:0c:eb:91:19:b0:58:
         c7:48:ee:92:d5:d6:72:08:34:99:42:62:e2:89:18:8b:f8:11:
         3b:9e:b5:82:ed:32:32:c2:8d:d4:f0:98:3a:29:89:33:d2:21:
         e2:e7:4a:63:60:13:de:a6:52:63:97:77:f4:75:58:6a:d4:37:
         8c:0d:ab:4f:bd:fd:c1:f1:78:29:ce:57:b0:d7:23:27:2b:fe:
         af:f5:94:ed:6c:a0:c7:8a:44:e6:49:fd:40:9e:e8:d6:fe:0b:
         4d:40:89:c9:a4:86:55:e0:db:64:31:75:cb:78:f5:9c:c9:c8:
         7e:d0:dd:ba:2d:ee:10:52:4f:e1:7e:98:89:8c:c4:19:6b:10:
         4e:c8:2c:6e:01:b7:cf:d2:52:82:bc:7e:6e:5a:00:99:e4:a4:
         bb:ae:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org