Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
File:                     0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer (raw, json)
Hash identifier:          tMEffla2z/wp2UvOadeDlfaV0fbOpK/7bvNfF1GC9ao=
Subject key identifier:   0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60F65334472E2E963D55754AF632CA647F73717C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Aug 2024 15:18:24 +0000
Certificate not after:    Fri 22 Aug 2025 15:23:24 +0000
Subordinate resources:    AS: 269719
                          IP: 187.62.64.0/22
                          IP: 2804:68d4::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 05:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f6:53:34:47:2e:2e:96:3d:55:75:4a:f6:32:ca:64:7f:73:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 23 15:18:24 2024 GMT
            Not After : Aug 22 15:23:24 2025 GMT
        Subject: CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:53:68:b2:12:63:0c:73:44:6a:90:b6:82:
                    dd:58:5a:b4:3a:95:09:71:cc:2e:a9:81:64:49:ac:
                    7e:6a:28:e2:9d:07:f5:31:f3:7a:e0:dc:39:e2:1d:
                    14:a5:0e:9b:c4:4b:28:33:8b:e6:23:ed:6f:c6:21:
                    35:6d:09:2d:6f:b5:33:38:f4:c6:e9:eb:be:56:36:
                    15:56:d8:05:3e:05:81:da:a4:f0:c7:0a:8c:9c:c6:
                    64:21:a8:61:d6:8b:dd:da:2d:c5:89:87:1a:af:a9:
                    1f:e5:47:d0:fe:ab:8d:5c:03:85:77:8a:86:cd:dc:
                    47:4d:4a:74:4f:43:3e:b0:58:3c:60:e9:97:3f:24:
                    08:ab:51:dc:8e:e8:f3:d0:04:70:d0:5a:d6:89:84:
                    70:06:13:42:0e:04:0b:af:26:43:71:fd:63:12:52:
                    18:66:99:28:e5:b3:99:cf:1e:0b:99:34:4b:8c:5e:
                    84:e1:ba:8c:42:e1:ae:37:e7:68:e4:79:cb:ee:05:
                    ac:fe:43:ce:3e:f1:6b:46:d9:59:d2:95:d5:01:48:
                    6b:ae:48:a8:6a:24:40:18:55:6a:ed:2f:d4:89:ed:
                    ba:8b:07:77:37:6e:0c:99:3f:aa:08:3e:6c:a2:7a:
                    d7:3d:74:68:40:8c:3c:e4:fa:4a:17:ef:30:66:84:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.64.0/22
                IPv6:
                  2804:68d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269719

    Signature Algorithm: sha256WithRSAEncryption
         88:d1:cb:40:e7:5b:94:1d:51:91:b6:81:9c:ab:51:37:58:e4:
         51:a2:8c:a2:4b:cf:b1:ed:32:fe:e3:66:fd:f0:f6:85:2a:f4:
         40:2b:56:75:a6:09:e1:f5:71:cb:34:12:ec:a3:c1:c7:af:07:
         4e:ab:7b:ff:ee:72:52:d5:a2:8f:72:db:c4:f1:54:ed:61:47:
         0d:0e:52:ef:c7:17:b5:53:f2:a6:79:d9:57:63:91:89:50:e4:
         8d:a0:2b:c5:08:0a:43:a2:55:c7:92:c4:a9:eb:9f:f2:6b:10:
         3c:38:93:c2:e8:f7:60:3b:09:74:86:7f:4e:44:56:5c:af:9a:
         ed:4c:85:9f:e5:25:d8:dd:92:1c:66:b2:9e:79:0f:df:d8:a5:
         0f:62:7d:7e:28:24:8d:b7:cc:18:d1:08:f4:21:73:9f:d2:56:
         42:b1:03:86:33:72:d2:a0:8e:d4:3d:af:a2:84:69:6e:fb:b6:
         47:6d:93:f5:0a:ae:1e:ab:f3:18:ef:a3:49:d2:e6:d1:59:89:
         02:5a:da:ab:46:20:3c:ee:ed:bb:e2:2d:c2:40:24:6e:c3:b8:
         ed:aa:2c:09:13:39:18:9b:14:7f:3b:de:02:53:32:ee:87:24:
         69:09:b3:9c:8a:27:b7:98:2c:88:35:9e:fc:6c:32:52:7a:9d:
         ea:9c:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:05:02 2024 by rpki-client on console-ams.rpki-client.org