Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.cer
File:                     0E9EDABF2339FADCF0CE68027578300DDD9E58FE.cer (raw, json)
Hash identifier:          svrmmJPBDEWsAbNG8/4eFfY15g6xRRS20dqlqcY0Fh4=
Subject key identifier:   0E:9E:DA:BF:23:39:FA:DC:F0:CE:68:02:75:78:30:0D:DD:9E:58:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7444BF699925662A51A5EBB0335A438CE26C95B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:40:18 +0000
Certificate not after:    Thu 03 Apr 2025 14:45:18 +0000
Subordinate resources:    AS: 53049
                          IP: 200.142.184.0/22
                          IP: 2804:18c4::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 23:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:44:bf:69:99:25:66:2a:51:a5:eb:b0:33:5a:43:8c:e2:6c:95:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:40:18 2024 GMT
            Not After : Apr  3 14:45:18 2025 GMT
        Subject: CN=0E9EDABF2339FADCF0CE68027578300DDD9E58FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:e5:f7:64:40:68:ad:21:e7:6d:7f:ed:5c:
                    99:1a:77:0d:33:a3:cc:e5:09:1a:7a:c3:6d:40:c9:
                    85:18:52:11:52:9f:7b:6f:64:16:14:95:6e:26:3a:
                    35:8d:ad:52:0a:d0:48:e4:cd:19:52:b4:cc:76:6f:
                    82:78:3a:2d:a1:02:e3:3c:9a:0b:cf:79:5a:d2:72:
                    fa:0b:c9:a0:67:1a:7b:c8:b9:78:85:ce:49:5c:6f:
                    c7:a1:3c:e6:c3:66:34:b2:13:ad:e0:30:ed:75:b2:
                    80:97:59:86:17:b4:fb:0e:4f:96:57:cc:fa:02:a1:
                    13:29:d5:f1:1e:f9:38:d4:01:92:5e:ae:e1:1a:5b:
                    02:7a:b0:8d:c8:27:85:74:e4:34:68:03:86:27:21:
                    da:ff:d8:91:9b:6e:81:f9:5f:e4:d5:e4:31:a4:cd:
                    a2:54:9a:54:96:13:dd:76:a0:8e:85:78:00:5e:4d:
                    b9:59:fb:ec:cf:7a:f0:86:4f:af:ec:0b:97:32:44:
                    b4:ff:7d:5e:54:9c:8a:f0:81:29:66:c6:f2:98:76:
                    4f:0c:dd:a3:ee:3a:d5:eb:9d:23:ee:8c:30:b3:45:
                    2b:6f:09:a9:e4:4c:31:f0:22:59:6a:73:a2:8b:1f:
                    95:9a:d8:e2:79:c4:67:e9:ad:e3:e1:3b:c6:22:15:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:9E:DA:BF:23:39:FA:DC:F0:CE:68:02:75:78:30:0D:DD:9E:58:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.184.0/22
                IPv6:
                  2804:18c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53049

    Signature Algorithm: sha256WithRSAEncryption
         99:39:e6:6a:57:69:c0:9f:d3:d5:dd:f9:ff:16:a7:59:98:35:
         76:ac:d0:91:55:38:c5:7c:74:b7:28:0e:5a:20:b1:36:36:fa:
         c0:2c:c8:af:ed:04:49:26:79:e3:d0:87:97:2d:f3:1a:a7:9a:
         9a:8d:0b:5d:6e:b7:3c:7d:3f:80:c4:84:c6:c3:ee:77:79:59:
         a3:c3:b1:58:20:54:f5:e1:c4:72:d3:7c:be:ea:cb:3e:43:29:
         0f:6d:3f:24:73:42:1b:22:9f:cb:4d:20:b4:b5:bf:6a:ec:28:
         80:6a:4c:9f:6f:47:b6:ce:c2:b7:a3:61:13:b0:b8:be:58:fe:
         fb:9e:1a:f5:f6:0c:90:c9:b6:09:7c:e2:1f:e2:8a:82:15:3c:
         6d:71:9e:02:60:86:84:42:b2:dd:48:88:97:5e:36:4f:12:af:
         b3:55:11:f1:3a:42:39:a5:f0:49:15:4f:b6:aa:50:79:f0:b4:
         da:c6:84:06:31:f9:4b:3f:e7:67:1d:78:80:17:a7:95:57:a0:
         4d:17:b8:0c:ff:4a:fb:8c:16:9d:bb:a5:44:93:99:fc:37:ab:
         ae:4c:d9:3b:94:ef:5e:e7:ca:4d:ee:dc:e3:2a:2a:84:b5:df:
         43:2b:07:84:46:0b:24:0c:96:fc:ad:02:ea:a9:e6:7c:a6:e8:
         7a:1a:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org