Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer
File:                     14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer (raw, json)
Hash identifier:          aEs+FMmk2VB/VvtfDiGVRSUuTQ72ErYw8pHkVM0ji38=
Subject key identifier:   14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3199552481671645CA7458BD4A286EED2447B5C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Jul 2024 23:13:16 +0000
Certificate not after:    Sat 26 Jul 2025 23:18:16 +0000
Subordinate resources:    AS: 52566
                          IP: 131.221.72.0/22
                          IP: 143.202.176.0/22
                          IP: 177.86.24.0/22
                          IP: 2804:1e00::/32

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 06:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:99:55:24:81:67:16:45:ca:74:58:bd:4a:28:6e:ed:24:47:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 27 23:13:16 2024 GMT
            Not After : Jul 26 23:18:16 2025 GMT
        Subject: CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:fd:57:bf:aa:7c:24:c2:c6:f6:79:9f:d8:
                    38:0e:50:e6:bf:f3:58:7a:77:c9:e5:a5:d0:88:81:
                    87:a5:94:10:c2:01:58:44:32:b9:f3:6c:e5:3c:a7:
                    d1:7d:79:97:55:4d:b4:89:f1:6c:51:37:ba:ad:c9:
                    9b:a4:f4:93:e3:e1:b4:98:2e:4c:c6:8e:aa:27:0f:
                    a7:9c:97:ac:6b:ac:57:45:f6:05:f3:90:20:f2:b0:
                    32:ac:f0:ce:40:b7:fb:92:95:45:19:3d:00:94:f4:
                    72:c0:7e:94:ca:de:d8:43:72:85:0e:8b:65:df:04:
                    e3:23:dc:b7:7b:85:38:4c:a3:c3:da:cb:53:44:75:
                    c7:05:e2:35:c4:08:7c:26:af:46:25:50:9f:50:89:
                    1d:d8:5e:a5:cc:46:26:dd:14:d4:d8:41:7c:68:29:
                    31:f9:93:e6:de:56:03:bd:bc:8d:d1:b6:1e:20:d4:
                    bd:ae:b9:fa:8c:75:48:00:89:06:94:d9:30:4e:d1:
                    78:e8:4a:65:dd:90:24:bc:bd:a6:ec:3f:d5:d1:8e:
                    62:a9:f1:92:d3:73:e8:99:9d:28:94:a1:d8:01:10:
                    33:97:8d:ab:5b:48:83:30:be:84:6e:5a:2c:fa:50:
                    22:66:22:61:f3:3f:4b:51:19:d9:94:56:65:fe:d8:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.72.0/22
                  143.202.176.0/22
                  177.86.24.0/22
                IPv6:
                  2804:1e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52566

    Signature Algorithm: sha256WithRSAEncryption
         c3:b8:7f:34:bf:1e:a7:3c:2f:7b:0c:c8:0d:50:ce:b0:bb:c1:
         84:31:3d:d1:cc:ef:30:fa:b7:a4:13:34:08:2f:d5:49:d6:c8:
         9e:8c:e9:17:fb:69:f0:f7:90:ca:f8:fa:1b:df:64:e7:b9:28:
         40:12:aa:42:5c:23:dc:8d:dd:de:3e:d1:c6:0a:17:31:df:b0:
         63:29:96:a5:b0:7e:ed:48:d1:c3:57:a3:fb:a0:bd:16:d2:7f:
         82:fe:ad:4e:00:b9:bb:cf:bb:5a:0c:bb:76:65:9e:a1:82:43:
         a8:68:c5:e8:cc:85:c2:f0:36:7f:25:83:f6:af:cf:eb:cf:0e:
         fc:a7:2c:fa:31:6e:9e:01:88:f9:15:bb:37:b7:f4:1a:b5:9c:
         b5:a4:1c:03:1f:b6:a8:c7:bd:88:72:f4:b9:4f:31:54:97:aa:
         86:4f:67:f4:9f:ef:7e:94:ff:20:a5:c7:f3:5e:ea:6d:ec:68:
         e5:fb:1a:69:c4:87:ee:5e:83:8b:21:81:33:0d:d5:a6:f4:35:
         f2:86:a5:13:00:a5:49:a3:a9:32:1b:1f:e3:f2:13:28:f1:54:
         6d:84:d8:56:f5:f0:72:1e:e2:bb:8b:a2:70:28:42:1e:b6:05:
         82:d2:ff:f7:36:de:13:65:e0:d8:ff:1d:4d:bd:f5:83:b8:c9:
         a1:09:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:41:14 2024 by rpki-client on console-ams.rpki-client.org