Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/12C2D9BDF42072CCA70DB3D740BC830874338245.cer
File:                     12C2D9BDF42072CCA70DB3D740BC830874338245.cer (raw, json)
Hash identifier:          8aT5JTXtm/A766MdVyPdAky3X1nevZw4zCD7tMOvf6c=
Subject key identifier:   12:C2:D9:BD:F4:20:72:CC:A7:0D:B3:D7:40:BC:83:08:74:33:82:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7810C830A70CB8066F02098D8C8793C112CCCBAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/1/12C2D9BDF42072CCA70DB3D740BC830874338245.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:21 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:21 +0000
Subordinate resources:    AS: 52941
                          IP: 45.169.212.0/22
                          IP: 177.38.40.0/21
                          IP: 2804:b18::/32

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 19:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:10:c8:30:a7:0c:b8:06:6f:02:09:8d:8c:87:93:c1:12:cc:cb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:21 2024 GMT
            Not After : Apr  2 18:31:21 2025 GMT
        Subject: CN=12C2D9BDF42072CCA70DB3D740BC830874338245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:f8:ca:44:d4:89:76:fb:7f:62:8d:cd:83:
                    ba:20:0f:40:f5:45:dc:20:5b:01:e9:f9:a7:8b:74:
                    15:d5:7b:8d:9f:d5:14:bc:f2:30:b3:57:25:71:ab:
                    19:c9:be:c6:86:e7:8a:4d:e1:0f:ff:61:29:c4:9d:
                    eb:a3:6a:ff:06:db:51:13:86:3a:70:55:a3:37:9b:
                    51:3a:d0:9b:cd:24:f2:56:6d:a3:8a:08:a7:4c:84:
                    7c:0c:f5:4c:96:3a:09:72:58:14:6b:d3:c7:61:eb:
                    45:c8:99:8e:9c:51:34:2a:60:25:c5:fa:34:eb:56:
                    1c:28:e5:c7:ba:d7:0f:4d:43:57:ab:7a:8f:51:cb:
                    ab:47:e8:8a:d0:0c:c7:3c:2f:2d:55:de:32:05:a9:
                    65:0d:03:b1:94:19:17:ac:85:4b:26:79:25:83:fb:
                    da:1d:8e:d9:59:f5:28:57:35:d5:ec:f7:09:fb:e7:
                    95:1c:7b:8a:51:eb:a2:36:4a:d7:cc:ef:7f:fe:63:
                    ba:62:1e:9b:82:44:ee:39:60:59:8e:93:ce:c4:18:
                    b3:c5:99:18:db:0d:fd:5a:92:d0:cc:e9:c2:49:38:
                    d3:1c:52:a1:d5:a3:05:c9:9d:c9:3b:e1:46:f8:d7:
                    f8:63:26:6c:90:20:a6:9e:1a:d8:86:02:4a:b7:69:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:C2:D9:BD:F4:20:72:CC:A7:0D:B3:D7:40:BC:83:08:74:33:82:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/1/12C2D9BDF42072CCA70DB3D740BC830874338245.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.212.0/22
                  177.38.40.0/21
                IPv6:
                  2804:b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52941

    Signature Algorithm: sha256WithRSAEncryption
         d9:d0:18:d5:58:28:11:4c:fa:a7:bb:92:f2:63:a3:c3:e8:6e:
         f6:f8:90:2a:65:2f:d0:2c:44:7d:21:cc:79:a5:d4:9c:ab:7f:
         6b:a5:ba:af:95:22:23:d4:5a:12:f2:58:05:0e:cb:7b:ee:0f:
         1a:9a:bc:49:25:c8:70:cc:77:ee:c5:e3:e7:18:18:e3:91:d6:
         94:03:2e:9a:c4:c7:4b:30:00:a3:3b:b5:aa:44:25:ed:8d:2f:
         fa:28:27:fa:c0:5d:c3:96:37:8b:f0:9b:33:99:d1:ed:33:5e:
         25:3c:f0:a4:05:ce:1e:96:ec:59:eb:0b:b6:71:59:37:de:d4:
         39:cd:4e:47:48:b8:a9:4e:5f:5a:89:bb:6b:f0:a5:5b:60:00:
         c3:bb:5d:a2:cf:8a:e2:fa:98:71:45:85:8a:4e:d6:27:43:aa:
         2b:6d:11:4c:f3:c4:ec:04:3f:ec:2d:0f:82:f5:e1:77:83:96:
         92:24:32:c4:b2:7e:8a:35:72:8b:65:22:a6:0b:bb:4e:f1:d3:
         84:d4:b6:32:7b:db:b7:0a:3b:7f:79:0c:62:32:c0:4b:0c:a0:
         f9:95:55:b9:b3:1e:30:3a:4d:0a:27:c8:94:70:74:7d:56:9a:
         6c:1d:b3:91:1b:d8:25:d0:bb:12:7c:49:9b:bf:fb:de:e0:01:
         62:eb:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 20:52:36 2024 by rpki-client on console-fra.rpki-client.org