Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2442399D58435470D37606585B13CA236FA33426.cer
File:                     2442399D58435470D37606585B13CA236FA33426.cer (raw, json)
Hash identifier:          xI7pbysHIgQu0jc5iA5km3uAHv8HufIqa4Lg+Jvbnjw=
Subject key identifier:   24:42:39:9D:58:43:54:70:D3:76:06:58:5B:13:CA:23:6F:A3:34:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5996CB3470B9193F80F596C21B63B2D79552FBDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/2442399D58435470D37606585B13CA236FA33426.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Oct 2024 20:16:32 +0000
Certificate not after:    Thu 09 Oct 2025 20:21:32 +0000
Subordinate resources:    AS: 271355
                          IP: 181.232.136.0/22
                          IP: 2804:7a34::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 16:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:cb:34:70:b9:19:3f:80:f5:96:c2:1b:63:b2:d7:95:52:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 10 20:16:32 2024 GMT
            Not After : Oct  9 20:21:32 2025 GMT
        Subject: CN=2442399D58435470D37606585B13CA236FA33426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:a0:db:83:94:f7:1f:11:35:e7:85:62:33:
                    eb:89:77:78:36:9d:a1:ee:96:1d:bc:fb:40:31:e1:
                    e6:53:de:ce:8e:98:bb:04:80:bd:7f:8f:37:80:8b:
                    17:55:6b:75:a4:7e:fb:bb:1d:a6:c5:43:55:8c:f1:
                    db:7d:2d:77:b1:1f:98:5e:17:54:50:f5:c8:53:8e:
                    e5:4b:3f:1d:a0:c1:eb:eb:41:03:79:17:00:ca:de:
                    72:d0:33:00:37:b2:be:2b:1c:8e:62:81:f5:2b:b1:
                    6d:61:0e:dd:c5:d9:93:5f:9f:21:97:28:cd:a7:60:
                    bd:17:20:5f:b8:5a:ed:2a:b2:e3:f6:02:45:d9:2e:
                    73:b0:ca:31:39:2f:c3:5f:48:61:7f:40:d1:6d:d9:
                    09:a2:68:56:ae:10:d6:d8:d1:b7:ae:13:a5:71:c7:
                    1d:c8:dc:98:0b:af:87:51:a5:4e:07:82:e2:0a:36:
                    53:95:b3:c0:50:3e:a6:04:71:d7:18:dd:ac:8c:29:
                    cb:f5:b5:f0:b6:9f:d0:cf:d8:e3:0e:30:12:f9:9e:
                    d7:80:82:b3:d6:15:53:21:8c:9e:9e:b3:f4:30:ea:
                    99:9a:45:19:32:74:1c:c2:0b:bd:d2:63:29:77:27:
                    91:d0:f4:50:2a:f2:29:41:3b:47:ef:c3:9e:91:34:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:42:39:9D:58:43:54:70:D3:76:06:58:5B:13:CA:23:6F:A3:34:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/2442399D58435470D37606585B13CA236FA33426.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.136.0/22
                IPv6:
                  2804:7a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271355

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:cc:52:71:b2:df:59:7d:96:fd:cf:64:f5:eb:8a:ca:0a:
         51:bf:26:bd:f7:e6:67:49:4f:44:c2:ce:d7:14:d5:51:92:e4:
         69:15:88:01:e8:54:02:9e:ee:ba:eb:35:e1:02:ab:f9:e0:1a:
         3b:d7:11:57:52:f8:59:aa:81:ed:8c:93:2a:48:28:2f:66:62:
         c9:db:75:b9:e6:e1:cc:f4:47:ca:47:18:a2:35:d0:b5:3a:89:
         c7:50:40:98:23:ea:81:80:ae:fa:c9:95:af:c1:42:e4:9d:82:
         5e:54:e1:42:80:7b:1f:00:07:c2:35:28:78:c4:e3:fa:19:a8:
         94:52:18:97:91:5f:ed:ae:b7:45:1e:02:da:df:66:17:27:07:
         e1:4f:31:95:b7:05:41:6a:0e:37:d7:15:59:04:86:59:b9:de:
         17:62:5c:ca:fe:52:df:0e:a7:ea:87:25:71:95:0d:e2:24:04:
         25:41:22:b0:62:47:50:23:7d:12:b7:83:ef:f9:d6:7b:be:74:
         6b:8c:1a:05:6c:96:74:9a:e0:fd:61:00:f2:dc:16:c5:28:63:
         37:ea:59:37:5d:c5:95:40:08:55:32:34:be:ef:a1:00:bc:1d:
         94:2f:7f:15:34:df:02:1c:57:f0:37:cc:da:f9:3d:01:6a:70:
         5e:bd:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 19:59:57 2024 by rpki-client on console-ams.rpki-client.org