Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.cer
File:                     1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.cer (raw, json)
Hash identifier:          /Rl3AfbmG+4Aq0fTqKqQPKTzd4FWDlFv6DtzG4putjg=
Subject key identifier:   1E:9D:67:05:D2:69:0E:8C:DA:8A:D3:18:61:DC:8A:33:4D:B2:F5:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42CAE573CFFD5F42B67D356698B65D699AD5AB0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:41:54 +0000
Certificate not after:    Thu 03 Apr 2025 01:46:54 +0000
Subordinate resources:    AS: 262316
                          IP: 131.221.200.0/22
                          IP: 138.117.192.0/22
                          IP: 167.250.152.0/22
                          IP: 177.74.64.0/20
                          IP: 177.124.48.0/22
                          IP: 2804:7c0::/32

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 12:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ca:e5:73:cf:fd:5f:42:b6:7d:35:66:98:b6:5d:69:9a:d5:ab:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:41:54 2024 GMT
            Not After : Apr  3 01:46:54 2025 GMT
        Subject: CN=1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:61:68:7d:8c:ea:a7:8c:a5:89:79:75:42:
                    66:28:a8:5f:e8:de:68:c8:82:64:f0:12:87:e5:dd:
                    19:35:83:fa:67:c1:08:6d:60:f6:f8:f1:f8:87:ca:
                    4b:4e:7f:d2:63:a0:9a:77:1b:de:70:f7:5a:00:79:
                    c6:0e:72:2a:e9:89:2c:08:91:cc:60:52:e3:10:eb:
                    94:7f:36:34:07:fa:5f:59:86:62:88:bd:0c:c8:7f:
                    1d:69:16:61:01:0f:5b:07:0a:0b:5b:42:bc:2f:06:
                    14:bc:0a:8b:a1:cb:39:85:0c:00:3d:25:31:dd:7e:
                    3c:f6:34:43:e4:62:13:39:dd:c8:22:8f:93:8c:03:
                    8f:e1:0b:bd:65:3d:ce:d4:01:0b:6f:61:9f:1e:61:
                    95:b6:bd:5f:d6:e4:b5:09:d6:a8:9e:01:0d:43:0f:
                    e6:13:44:f6:06:8f:77:15:05:bb:83:03:1c:8a:34:
                    8b:0e:a8:e4:f3:67:36:bf:c4:af:7d:0e:0f:fd:46:
                    93:0e:ce:ca:4b:7c:58:6b:0e:3a:88:bb:dc:d6:c1:
                    9c:3c:a8:e1:37:2f:ea:e8:65:85:0d:25:46:d6:fa:
                    e9:4b:00:16:bc:43:dc:fe:f3:fb:d4:fb:2c:9f:35:
                    94:08:d5:9d:a7:07:33:40:70:db:23:9f:00:30:51:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:9D:67:05:D2:69:0E:8C:DA:8A:D3:18:61:DC:8A:33:4D:B2:F5:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22
                  138.117.192.0/22
                  167.250.152.0/22
                  177.74.64.0/20
                  177.124.48.0/22
                IPv6:
                  2804:7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262316

    Signature Algorithm: sha256WithRSAEncryption
         ce:26:18:95:6f:e5:4a:7c:56:9b:a6:89:e3:94:6a:82:1d:53:
         02:55:78:dc:80:60:54:79:39:f3:05:2e:2d:d5:48:1c:e3:90:
         aa:c9:f0:4a:69:07:cb:2e:81:99:a3:a8:ec:97:4e:4d:f7:cb:
         b7:40:57:e4:94:a9:60:bb:b9:fe:52:fb:61:a5:eb:2f:8d:89:
         d0:61:64:7b:5b:15:b1:f2:7c:4e:21:8a:3c:1f:07:ec:93:db:
         10:ee:c0:93:90:eb:a9:b3:00:b8:a9:6c:00:9d:0e:dc:59:b5:
         77:17:fc:0c:ac:2c:f2:1b:b9:35:72:86:92:51:be:ab:a1:e8:
         18:67:e3:2e:03:81:51:65:3c:ed:d9:45:86:53:cf:d1:1d:dc:
         aa:49:8f:00:04:7c:ba:66:24:8b:a4:5e:92:67:ad:3e:5c:c2:
         05:b8:72:9a:8e:0a:a3:87:a9:8f:5d:5d:de:e3:ec:ee:22:fc:
         ab:b4:00:98:38:c0:9e:46:6e:e2:1a:ea:49:ec:de:48:34:3c:
         a9:83:6d:86:26:e2:99:c8:88:48:5c:40:b0:6f:ad:6b:f1:89:
         d9:cb:6f:c7:ec:96:b3:ad:09:51:77:f8:94:ba:56:88:9c:15:
         99:a4:71:ec:7d:66:b9:0b:3d:1b:c2:57:87:c3:18:87:59:76:
         85:00:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 13:42:32 2024 by rpki-client on console-fra.rpki-client.org