Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13DC8AF049EEA28E5449E8C2B1D3F3334D778096.cer
File:                     13DC8AF049EEA28E5449E8C2B1D3F3334D778096.cer (raw, json)
Hash identifier:          SxBd/EY1HkXR4LZ1J1U9IYjzsoM1mOS2BWMJvrUY0nk=
Subject key identifier:   13:DC:8A:F0:49:EE:A2:8E:54:49:E8:C2:B1:D3:F3:33:4D:77:80:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4226CF3C503B7EC3100F7DAF0586B60DAFFE8775
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/1/13DC8AF049EEA28E5449E8C2B1D3F3334D778096.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:53:49 +0000
Certificate not after:    Wed 02 Apr 2025 18:58:49 +0000
Subordinate resources:    AS: 61936
                          IP: 201.158.8.0/21
                          IP: 2804:1880::/32

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 14:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:cf:3c:50:3b:7e:c3:10:0f:7d:af:05:86:b6:0d:af:fe:87:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:53:49 2024 GMT
            Not After : Apr  2 18:58:49 2025 GMT
        Subject: CN=13DC8AF049EEA28E5449E8C2B1D3F3334D778096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:9f:77:60:2e:91:a7:f9:68:79:5f:0d:49:
                    85:9a:97:7a:1a:79:7b:d0:f0:65:a2:49:d8:e0:a2:
                    2b:1a:fe:be:2e:23:22:b5:2b:98:74:59:fe:c8:2b:
                    bb:bb:6f:c8:1a:38:f7:57:76:65:25:c7:6d:d5:8c:
                    91:f5:22:91:6c:0d:8c:f3:3e:aa:d5:8d:56:8a:0c:
                    a7:ad:63:3b:88:18:98:89:52:14:ca:97:80:44:3b:
                    b6:f6:18:93:0a:48:65:61:0d:61:11:3f:1b:60:a3:
                    74:d9:87:15:84:d7:36:ff:7c:a6:12:37:af:69:5d:
                    30:85:8f:86:7c:0e:b7:63:e6:f6:fc:26:13:58:45:
                    f4:10:07:9c:b5:a0:12:1c:66:f7:6a:33:65:e1:1b:
                    23:ea:56:41:e4:15:03:fa:34:01:a3:75:e3:31:5c:
                    73:ee:e9:93:b4:1c:7b:f7:3d:3e:ec:ac:a8:87:2c:
                    01:50:d1:fd:9e:d6:2c:1c:c9:aa:d3:bf:15:b5:7b:
                    18:5a:26:8d:45:23:35:e6:d5:45:36:b2:49:4b:2f:
                    d3:c5:f0:93:fd:a4:14:59:23:a5:c2:d3:04:b0:2c:
                    40:a4:c3:07:db:c1:ee:4d:11:d7:ed:07:f2:53:8e:
                    6c:6e:42:3d:b1:87:18:0b:8c:48:bd:bf:74:6b:d5:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:DC:8A:F0:49:EE:A2:8E:54:49:E8:C2:B1:D3:F3:33:4D:77:80:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/1/13DC8AF049EEA28E5449E8C2B1D3F3334D778096.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.8.0/21
                IPv6:
                  2804:1880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61936

    Signature Algorithm: sha256WithRSAEncryption
         18:a2:4a:91:f2:64:34:b3:8e:06:e4:8f:fa:7f:fc:90:de:e4:
         9f:10:52:b8:96:db:16:e8:7f:f8:f6:9f:07:e9:c2:ad:7c:65:
         14:73:6a:55:aa:fe:6f:b3:54:73:70:a8:7f:b2:5c:84:99:47:
         07:67:59:c5:23:9c:99:7b:1d:7f:5d:5e:94:f4:50:05:c0:0f:
         11:84:99:a4:22:c0:6c:fc:69:cc:6f:ab:ed:da:da:1d:15:6b:
         42:ba:b2:e1:e7:54:d4:d9:66:5d:b6:fb:36:dc:b5:16:88:d3:
         24:f6:4d:9d:35:eb:85:b7:91:1f:41:d5:21:a8:4a:a4:f9:29:
         35:ba:98:15:cb:3f:83:92:fb:59:c9:05:ae:08:83:56:30:3b:
         89:b1:79:e1:b4:b1:f6:b9:eb:51:77:db:0c:75:3f:17:0d:61:
         a2:cd:ef:4a:ea:73:6d:a2:cd:6e:39:fb:f8:98:19:35:b6:46:
         eb:5e:3e:a5:d6:13:62:5e:05:b5:4a:8f:6c:aa:29:4c:11:b9:
         20:ba:b2:53:47:19:0b:0b:67:44:a3:a8:b2:92:00:d5:c5:20:
         a1:0b:5f:b8:bd:d0:8b:12:88:89:6f:3a:bd:e9:93:6d:aa:d3:
         ec:a8:5a:5d:11:cd:37:22:5f:17:fd:ac:86:0a:46:22:79:6f:
         90:14:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org