Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.cer
File:                     2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.cer (raw, json)
Hash identifier:          46mwCdQFZsmzytX+BAjijr9sNtr5Y9yY2hK6brCwK8c=
Subject key identifier:   25:01:EA:CD:3E:F1:F5:0A:4D:01:6A:A6:54:9B:27:1F:B0:2B:9D:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F85BE6ED8E76E0F7CD33765FCAB28E6F43DAB4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Sep 2024 13:00:27 +0000
Certificate not after:    Tue 09 Sep 2025 13:05:27 +0000
Subordinate resources:    AS: 61605
                          IP: 179.63.178.0/23
                          IP: 2804:7da4::/32

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 15:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:85:be:6e:d8:e7:6e:0f:7c:d3:37:65:fc:ab:28:e6:f4:3d:ab:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 10 13:00:27 2024 GMT
            Not After : Sep  9 13:05:27 2025 GMT
        Subject: CN=2501EACD3EF1F50A4D016AA6549B271FB02B9D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f0:ed:37:d2:77:fd:67:89:cc:4d:df:10:8d:
                    bd:fa:e6:3b:c5:2c:5f:ab:f3:d1:80:3c:d3:cc:10:
                    bd:9b:d4:bc:d9:77:1a:aa:39:c6:ea:7d:3d:9d:df:
                    23:4a:4d:e6:bb:f1:2d:19:fd:28:d6:2a:84:18:7f:
                    c7:88:4a:a9:9f:d5:a1:f5:8f:88:c4:6e:a5:66:13:
                    33:c7:f7:f0:64:6b:08:14:0d:83:a4:78:c6:76:91:
                    b5:84:72:ec:e4:77:72:31:33:94:32:1f:75:32:30:
                    56:f2:b4:1f:25:ac:45:7c:55:3f:50:fd:6f:45:92:
                    d9:56:2b:ed:c5:a3:11:23:7e:14:d8:a8:a5:e6:77:
                    76:47:a9:a6:1d:26:34:81:2a:1e:8b:60:a8:fe:ee:
                    0b:79:de:ef:93:89:49:80:5c:0b:0d:16:d6:3d:fa:
                    af:7c:2b:39:ce:ef:ee:c8:f0:b6:50:e2:3e:b6:09:
                    39:ca:13:24:d3:29:6b:17:49:78:d8:bd:f8:24:8d:
                    e2:ed:a2:7d:2a:26:b3:50:11:7b:72:8f:75:5f:fd:
                    d1:f4:9c:42:be:71:55:8b:bc:1a:9a:6b:24:a5:c6:
                    dd:3c:78:0f:66:c8:65:75:c5:1c:96:13:05:fe:4f:
                    95:46:28:e3:8f:b9:26:d2:e7:11:b7:ed:f4:48:a4:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:01:EA:CD:3E:F1:F5:0A:4D:01:6A:A6:54:9B:27:1F:B0:2B:9D:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.178.0/23
                IPv6:
                  2804:7da4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61605

    Signature Algorithm: sha256WithRSAEncryption
         cf:05:cb:74:0b:98:86:33:9f:c9:68:ab:a0:d1:2e:2f:87:e8:
         9c:e6:18:53:30:85:a8:8f:06:d3:9e:32:5e:51:9c:39:60:c2:
         59:6c:42:72:c3:4b:f9:fe:62:53:99:31:c5:6e:31:f8:cf:1c:
         3d:08:eb:4a:d8:ed:cb:75:85:c9:7e:54:13:7f:92:ed:44:d9:
         46:5f:de:9f:bb:a4:06:5a:d9:12:e1:ae:6a:dc:de:78:0d:96:
         4e:79:ed:e0:3c:16:24:2d:63:21:bc:2a:f8:32:8e:aa:43:41:
         7c:09:2d:73:7a:11:d9:d2:ec:fa:4c:c6:98:b7:1f:de:b0:41:
         29:a4:cd:5c:a2:c6:ee:cc:5a:d0:c7:a0:4a:c5:2f:d9:15:35:
         16:a9:0c:3d:ee:cb:e8:35:9d:bb:23:f9:f5:1f:e3:a6:d7:b9:
         11:5f:38:b4:86:9a:07:56:d7:45:4e:30:30:3e:55:dc:43:be:
         d5:f2:34:b8:d9:9c:71:38:7c:7d:07:71:79:14:42:80:10:c4:
         2e:b4:64:bd:83:bc:89:1e:d9:e1:fe:f6:2b:9e:c5:8d:aa:9f:
         3e:05:fd:da:c2:14:0b:35:8c:f1:85:fa:d1:50:90:16:53:9b:
         29:77:c2:41:eb:d6:d8:19:8f:92:28:16:8d:e6:bd:1f:a7:a0:
         89:19:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:53 2024 by rpki-client on console-fra.rpki-client.org