Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer
File:                     188606675901F040B07DF306712C0B8EAFD6ACFE.cer (raw, json)
Hash identifier:          HNE5yABULla8SGAqqmo4PAHMyddGYKpqpXcMahjBMqQ=
Subject key identifier:   18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E64CEBE48F4D6722065251891C9FAB88C9621D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/188606675901F040B07DF306712C0B8EAFD6ACFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 03:14:13 +0000
Certificate not after:    Fri 04 Apr 2025 03:19:13 +0000
Subordinate resources:    AS: 263995
                          IP: 138.255.228.0/22
                          IP: 2804:2910::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 16:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:64:ce:be:48:f4:d6:72:20:65:25:18:91:c9:fa:b8:8c:96:21:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 03:14:13 2024 GMT
            Not After : Apr  4 03:19:13 2025 GMT
        Subject: CN=188606675901F040B07DF306712C0B8EAFD6ACFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:7b:a1:fd:67:17:10:29:9e:b5:c7:e1:06:
                    1a:22:f0:ef:63:34:9a:ab:90:71:6f:21:bc:a1:91:
                    26:6a:23:cd:64:03:ee:13:4e:3b:7b:7b:2f:b4:e0:
                    59:d1:b9:e4:ff:06:dd:7f:60:20:2d:d5:f0:6b:ff:
                    aa:9b:ba:cd:a2:32:9b:23:ff:95:51:f4:ed:1c:81:
                    95:d2:f7:8c:03:85:0f:0d:a0:e6:89:03:2f:ef:ae:
                    1b:7a:11:17:c2:79:44:2e:fc:45:e1:21:7f:67:07:
                    0d:d3:09:cd:29:e7:bd:ab:a8:60:42:92:ee:ca:ea:
                    8a:3c:c2:c7:e7:cd:b6:c5:61:6a:46:98:75:09:3c:
                    3b:e3:f1:71:3d:b8:f0:cb:ab:14:28:7e:cc:03:5f:
                    ef:46:c0:43:dd:ae:48:af:5c:d4:2c:f2:57:95:51:
                    0f:0f:48:5b:4b:3f:b0:e9:96:b0:4e:f3:82:43:6d:
                    5c:0f:b6:32:89:58:91:bc:a3:6f:67:7d:c2:9d:2a:
                    61:6b:a0:60:bc:03:84:06:4c:fe:68:16:a1:92:03:
                    90:8d:9a:4f:df:be:73:1b:43:07:ae:db:1a:d7:e2:
                    67:85:67:bd:64:f8:eb:0f:15:a7:61:3b:74:ae:fb:
                    18:7e:e1:9b:c3:a9:4a:96:73:81:4c:0a:53:32:9d:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/188606675901F040B07DF306712C0B8EAFD6ACFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.228.0/22
                IPv6:
                  2804:2910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263995

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:fd:4c:20:fd:d4:e7:9d:8b:ab:31:b0:0a:df:c2:31:81:
         30:3b:e4:b4:6f:8d:d0:fe:6a:18:4e:ca:b6:60:37:6c:bd:a6:
         0b:0d:c0:f6:15:d3:cf:4e:a4:e8:2f:5a:44:ca:fe:c7:5f:25:
         96:b5:8c:9e:c3:11:fa:57:93:9c:bd:ba:f9:57:33:73:b8:99:
         9d:3f:80:0d:11:b7:14:69:16:b9:65:5a:cb:8b:94:73:82:31:
         0c:6f:9f:34:15:3f:84:14:f9:9c:d5:1b:e1:eb:f5:ee:e9:b6:
         49:54:63:e9:0c:35:aa:f5:d1:d8:4b:64:93:9f:5d:e7:7c:80:
         9a:78:80:1c:83:55:db:e8:91:52:df:ee:ec:c9:09:f8:1f:8d:
         70:52:7e:d6:05:cc:c6:5c:4b:12:49:bc:d8:4c:24:73:30:0c:
         18:de:e3:05:a5:ae:c1:aa:3d:f9:5c:2f:22:64:02:71:9c:5e:
         de:6c:db:4e:98:50:dd:ae:17:97:48:20:e3:db:89:d0:c0:ec:
         f9:5e:cd:6e:c4:42:0c:cf:00:32:53:43:84:83:c6:1c:b8:bc:
         c6:ed:f3:82:13:84:df:38:1c:51:c1:d4:74:66:8d:c0:ef:0d:
         33:5e:c3:c7:f5:31:2f:a9:58:2f:17:d3:20:d3:98:08:13:5b:
         9c:a7:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org