Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer
File:                     2963428E665498CFA92700EDEAD7F24E4FCD089C.cer (raw, json)
Hash identifier:          sJQPPudkoMdRSzMdEBOqxfH9FpAt9kv1CUElG76PQFg=
Subject key identifier:   29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A107C3D0C05F04B42480D86DB19B608F970EE08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jun 2024 13:17:05 +0000
Certificate not after:    Wed 04 Jun 2025 13:22:05 +0000
Subordinate resources:    AS: 267952
                          IP: 45.166.48.0/22
                          IP: 2804:55b8::/32

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 11:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:7c:3d:0c:05:f0:4b:42:48:0d:86:db:19:b6:08:f9:70:ee:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 13:17:05 2024 GMT
            Not After : Jun  4 13:22:05 2025 GMT
        Subject: CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:00:97:7c:e5:71:e6:3a:93:7f:d8:c9:c8:
                    0b:eb:4a:9f:ef:ce:bf:0b:6c:7a:99:07:8f:c3:7e:
                    70:0b:cd:65:ed:42:03:b9:a7:47:45:ac:18:2f:6b:
                    5e:a6:1e:10:af:00:f2:b6:d7:4a:bf:f9:c8:2c:ba:
                    7a:a4:5b:a9:21:09:0e:06:fc:79:6d:b5:17:04:73:
                    50:e3:44:c7:16:4f:62:55:ce:28:e9:5c:1f:54:1f:
                    4f:14:ba:f7:4e:41:cd:39:0c:10:23:67:d2:6c:e9:
                    aa:c5:b5:29:24:b3:8f:92:9b:ac:43:5d:cc:11:b4:
                    0b:dd:26:91:6d:f1:69:b5:4c:35:cc:b0:34:4c:3d:
                    7d:3f:19:0d:f8:0e:5c:0a:13:b2:e0:e6:18:14:bb:
                    67:57:09:c8:85:a2:0b:fc:1d:af:fd:88:60:fe:ac:
                    29:0a:2a:45:c6:46:62:b6:56:b5:c4:80:c8:1e:6f:
                    bd:60:74:d5:61:83:5c:98:36:3a:f4:8c:bb:e8:f6:
                    0e:d2:33:cd:31:a3:b8:f0:ef:5d:53:c3:62:ad:ca:
                    5e:1a:73:54:35:ad:8c:bf:44:0a:27:0f:c8:40:05:
                    ae:5c:35:64:7a:ab:be:8e:56:5a:ee:2c:77:80:79:
                    2b:a4:b0:be:31:03:69:bf:88:89:ea:fc:56:91:69:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/22
                IPv6:
                  2804:55b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267952

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:89:56:08:37:4e:50:c8:7c:d9:54:ff:30:5f:0f:3f:6a:
         ad:6a:14:86:39:f8:f7:ff:04:02:13:50:92:ce:24:85:c7:09:
         72:cb:5d:b7:88:a7:16:63:93:a3:d8:32:14:0c:4e:eb:db:94:
         72:d6:87:87:8a:7f:26:fc:ad:a8:81:a3:e9:69:94:39:9a:61:
         d7:ee:4f:04:75:8b:83:f7:3f:e9:f8:71:af:62:3c:44:70:43:
         09:a2:95:22:30:4c:73:f4:ca:4f:da:ff:8a:ca:31:c2:02:7d:
         9d:d2:67:51:4d:dd:d3:57:1a:4f:64:6f:07:23:68:6a:42:57:
         16:8f:19:54:76:3c:90:79:84:12:b3:13:b6:78:70:b4:e4:0f:
         d2:bd:88:9e:34:98:63:40:17:88:a4:d5:41:f8:4c:fc:e2:69:
         c7:b5:36:f6:b1:cb:58:65:32:9d:15:5f:12:fe:5c:22:fd:6a:
         e4:d0:28:64:23:9a:3a:bd:13:09:46:b9:c5:e4:b5:36:ac:51:
         26:42:76:09:45:db:c8:3a:80:f1:ad:d5:d7:a1:2a:15:8f:7b:
         8b:63:ad:b0:da:ec:d4:86:98:22:63:9c:a1:ab:bb:dd:d2:f9:
         88:a7:3f:21:a2:60:d7:bc:ff:cf:8d:2f:65:79:e4:68:0d:c5:
         28:f7:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 14:00:10 2024 by rpki-client on console-fra.rpki-client.org