Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D7987DA06771261C796972D93929F1FCBE3D218.cer
File:                     0D7987DA06771261C796972D93929F1FCBE3D218.cer (raw, json)
Hash identifier:          Afrz1Pf/2pOepQIEhQuac+sGyuCXf/ChMg4tGwNieqY=
Subject key identifier:   0D:79:87:DA:06:77:12:61:C7:96:97:2D:93:92:9F:1F:CB:E3:D2:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FB6F002A88C62DCF9085F533A555EFDB75E2B87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/0D7987DA06771261C796972D93929F1FCBE3D218.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 May 2024 15:15:51 +0000
Certificate not after:    Wed 21 May 2025 15:20:51 +0000
Subordinate resources:    AS: 262407
                          IP: 138.0.92.0/22
                          IP: 177.38.144.0/21
                          IP: 189.76.240.0/20
                          IP: 2804:3f4::/32

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 05:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b6:f0:02:a8:8c:62:dc:f9:08:5f:53:3a:55:5e:fd:b7:5e:2b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 15:15:51 2024 GMT
            Not After : May 21 15:20:51 2025 GMT
        Subject: CN=0D7987DA06771261C796972D93929F1FCBE3D218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:d4:fa:66:4f:6a:9d:27:75:1a:51:ba:39:
                    60:24:0d:ba:d8:1e:2c:15:a3:03:00:9c:27:19:e4:
                    9e:e7:92:b9:10:37:55:7f:38:ef:d6:7a:dc:78:01:
                    ca:fc:b6:37:42:d5:40:86:10:81:92:f5:5c:12:d1:
                    36:7c:e1:91:83:e6:7b:df:67:71:99:d7:29:d8:11:
                    f0:d8:fb:ed:19:be:f5:37:1c:b1:a4:b6:06:69:fe:
                    b7:a3:5f:5f:fe:f9:9e:e3:eb:62:7b:88:da:b9:38:
                    3d:b1:d3:bf:95:27:1a:a2:f1:a8:45:54:0f:96:54:
                    d1:ce:89:7b:73:79:7b:84:ee:07:cf:d8:2f:4c:90:
                    02:25:c6:e5:a2:d9:2e:bd:97:3f:11:5f:50:16:ed:
                    02:3c:d0:f9:98:63:a3:d8:a3:37:80:d3:99:89:84:
                    80:ec:27:ed:57:d2:9a:20:db:a9:80:f2:dd:3e:4f:
                    50:fc:76:33:35:8b:26:f9:e6:26:0d:22:ad:e9:41:
                    8e:2c:7f:fc:7d:bc:39:c5:9a:7c:98:2b:35:da:9b:
                    67:81:b6:4a:78:7c:44:2b:2e:d6:0e:bd:eb:a9:ed:
                    43:ef:23:e6:82:e5:b2:4e:3d:e8:c2:b0:3a:67:9f:
                    ab:0a:03:65:85:ca:14:59:dd:fe:e8:66:64:5a:ed:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:79:87:DA:06:77:12:61:C7:96:97:2D:93:92:9F:1F:CB:E3:D2:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/0D7987DA06771261C796972D93929F1FCBE3D218.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22
                  177.38.144.0/21
                  189.76.240.0/20
                IPv6:
                  2804:3f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262407

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:d7:73:fa:dc:f6:cc:de:69:b3:97:09:7a:79:a9:71:01:
         b9:44:a1:b4:af:3b:b9:a8:70:8e:cc:ec:ea:ab:8d:45:f4:66:
         f4:5f:c8:4b:18:85:73:9a:2c:3d:2b:e5:30:b8:54:e8:dc:e7:
         5f:4a:8c:db:33:3b:b5:b3:42:b7:a8:9a:fc:ad:a8:3d:81:3e:
         2f:45:be:1f:67:88:40:54:ae:41:90:ee:1d:8e:6e:1e:b4:4c:
         b5:96:cb:e2:bf:f7:b8:45:53:27:11:9f:d8:f5:10:48:d6:df:
         81:bb:0e:92:be:bb:b1:ef:f6:29:a0:68:9c:cd:f6:db:1e:2c:
         87:6d:d5:9f:e6:8c:75:8c:a2:01:9b:5b:d0:02:c8:a2:11:ad:
         8e:37:c7:70:d7:41:71:ba:f0:16:c0:90:98:7f:98:9e:04:fd:
         20:96:3b:63:ac:01:19:e5:d1:3c:b1:1a:3b:12:06:71:ec:55:
         1f:73:f9:f8:a4:af:f3:94:ea:28:cc:f4:c8:e9:c2:aa:91:fa:
         b4:c2:5c:8c:5b:5e:59:4a:43:4f:92:ae:fe:d3:3b:3a:b5:39:
         0d:ab:6b:dd:17:da:45:1f:c1:5a:e9:89:b4:ba:06:ec:92:3d:
         b9:04:7b:30:1b:f9:df:93:56:df:1a:34:a2:44:93:94:15:5b:
         a4:f1:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 07:47:47 2024 by rpki-client on console-ams.rpki-client.org