Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/140CEF6122CCF9B56142A37BB98256AD903460C9.cer
File:                     140CEF6122CCF9B56142A37BB98256AD903460C9.cer (raw, json)
Hash identifier:          39Ss43etPWHNwuBJEpSsWbm3tYnlacMBkhsLkmQ51YA=
Subject key identifier:   14:0C:EF:61:22:CC:F9:B5:61:42:A3:7B:B9:82:56:AD:90:34:60:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A7CC302D83C054043345675EC0610F7B977DB39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/140CEF6122CCF9B56142A37BB98256AD903460C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Aug 2024 19:41:52 +0000
Certificate not after:    Fri 22 Aug 2025 19:46:52 +0000
Subordinate resources:    AS: 267672
                          IP: 45.224.196.0/22
                          IP: 2804:4518::/32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 11:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:c3:02:d8:3c:05:40:43:34:56:75:ec:06:10:f7:b9:77:db:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 23 19:41:52 2024 GMT
            Not After : Aug 22 19:46:52 2025 GMT
        Subject: CN=140CEF6122CCF9B56142A37BB98256AD903460C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:0e:56:fe:d3:25:dd:1c:b1:48:c3:a4:d2:
                    1d:3b:12:cb:3c:d0:8f:36:43:dd:36:0d:ca:d4:4e:
                    c5:c4:7a:d8:ee:76:67:c9:25:67:b0:7e:7e:d3:cd:
                    04:4b:89:19:f2:86:72:6f:da:fc:0c:c6:8d:1b:37:
                    fb:a5:a0:67:37:b3:33:f3:1c:a9:12:1e:db:8c:e1:
                    e1:7b:78:63:4b:4e:e0:66:9f:d1:3d:7c:ef:d0:70:
                    5c:ff:93:f0:db:bf:89:85:28:15:14:7f:0f:cb:86:
                    ad:52:9b:5b:b9:cd:38:e4:5a:00:00:3d:06:f2:e0:
                    6e:07:96:3d:ee:5f:ad:50:c2:44:1c:09:fc:e5:bb:
                    82:5d:f2:b9:41:60:dc:6b:25:cb:0a:57:0e:c8:f6:
                    85:99:da:95:52:59:bf:2b:ea:3b:81:8d:82:32:01:
                    03:de:30:2f:5b:c0:fb:88:4b:c7:d5:b0:11:4e:ea:
                    40:b9:67:f6:53:d5:25:b1:cf:47:b4:44:6d:a6:f3:
                    b6:81:61:0b:4f:6a:fd:20:6e:ca:e0:4e:5b:69:cb:
                    b0:e1:4e:c3:db:52:84:d6:e8:b9:35:2e:8e:34:95:
                    06:08:e0:90:91:e1:c5:ef:aa:51:c7:88:37:7b:bb:
                    84:84:bb:12:0b:f0:e7:07:70:19:4f:b5:68:6a:2c:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:0C:EF:61:22:CC:F9:B5:61:42:A3:7B:B9:82:56:AD:90:34:60:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/140CEF6122CCF9B56142A37BB98256AD903460C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22
                IPv6:
                  2804:4518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267672

    Signature Algorithm: sha256WithRSAEncryption
         35:58:0a:67:3f:5f:42:47:84:f9:9d:7c:64:cd:fe:c3:ba:3c:
         1b:83:15:b3:e8:c4:47:84:a5:32:3a:e5:47:d5:64:fa:5e:a3:
         10:43:c4:f2:a4:fc:69:9e:45:2f:46:67:a0:51:ca:1e:0c:b3:
         e0:0e:df:27:ca:6c:75:b9:16:c5:f8:72:63:3a:7a:c2:da:02:
         9d:df:d1:50:f2:66:9d:f5:a0:c4:75:c3:e0:c3:3c:1a:16:1b:
         57:85:90:b1:96:5f:b2:c4:c2:f3:94:54:d9:8a:e7:d8:81:11:
         6a:0b:e3:60:f7:80:a4:7b:57:d5:88:78:99:5f:85:b9:12:60:
         1a:4e:94:8b:28:b4:48:3e:75:41:56:10:4c:32:d2:20:4c:04:
         b3:98:2e:17:4a:ea:33:b7:2f:c4:89:74:e5:8e:e8:64:47:73:
         57:6c:21:46:48:38:d8:d5:fc:b9:cf:88:6f:d1:c6:d9:cb:47:
         ef:63:39:37:80:59:d4:79:fc:24:35:a9:f3:f5:9b:f9:6f:be:
         63:60:f0:36:48:b0:c6:3d:31:21:9d:87:79:0b:34:ee:2e:ea:
         0d:6e:b8:a6:97:63:7b:3c:8f:af:93:37:96:c5:fa:65:41:67:
         50:d0:98:be:3f:61:28:83:de:8c:e4:2c:cf:bd:98:59:f9:a1:
         94:7d:23:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 13:39:01 2024 by rpki-client on console-ams.rpki-client.org