Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
File:                     2B36FD67FD146F6ABC421C609744891EA7512F17.cer (raw, json)
Hash identifier:          v3NKO0y4xu/akL4PTedh9WjWq9M8nwl2/JAXd3pi5cw=
Subject key identifier:   2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       116B7431F27B7B825C44220A55547E8B6CF76368
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:38:32 +0000
Certificate not after:    Thu 03 Apr 2025 05:43:32 +0000
Subordinate resources:    AS: 265500
                          IP: 170.78.92.0/22
                          IP: 2804:3518::/32

Validation:               Failed, certificate revoked on Sat 15 Jun 2024 15:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6b:74:31:f2:7b:7b:82:5c:44:22:0a:55:54:7e:8b:6c:f7:63:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:38:32 2024 GMT
            Not After : Apr  3 05:43:32 2025 GMT
        Subject: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:5b:75:e1:b4:de:86:f0:40:4b:3f:c6:86:
                    47:38:4e:cb:15:9a:ee:69:ff:c5:3a:93:51:f1:82:
                    76:aa:9c:2b:4c:2c:ff:ce:60:2d:37:33:03:36:85:
                    97:68:d8:ab:5d:b7:c9:06:d5:fe:f2:c2:5c:3b:df:
                    6d:6e:87:dc:17:d3:24:49:90:f6:86:3f:89:41:e6:
                    fa:0f:a7:54:42:35:e7:d5:77:18:d4:06:48:fc:bf:
                    5a:aa:50:ca:8f:f8:ef:03:13:6a:50:e0:6e:9a:a7:
                    ea:d8:2d:b8:e1:8f:59:f5:45:06:3d:95:41:86:b8:
                    f8:41:ad:ae:ee:e0:c9:f6:5a:ec:9e:3a:cd:b8:b2:
                    f6:cf:f7:32:90:40:8b:fd:df:bd:f6:ba:07:1a:af:
                    f3:d9:7e:27:ac:af:30:5d:5d:8c:06:18:c5:f0:04:
                    83:27:c2:5e:8c:f8:2b:66:24:3a:a7:d0:59:0c:2a:
                    12:9f:2f:6e:ef:a0:ab:b6:87:9c:98:1b:b7:6c:d3:
                    b6:10:51:95:72:91:1a:51:eb:dd:79:e3:ae:41:65:
                    ff:c2:25:0f:bb:7a:8c:cf:9f:a7:c3:27:c9:0f:93:
                    d6:9c:c1:80:f6:fd:ee:91:c6:dd:d7:80:76:be:ab:
                    02:91:d6:c0:f3:80:71:68:20:fc:4b:1d:4f:d5:4f:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22
                IPv6:
                  2804:3518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265500

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:cd:6a:e6:49:3c:3b:0c:5d:25:27:4f:bd:60:5a:a5:32:
         47:60:22:55:da:f6:f7:7b:1a:af:5b:27:04:f5:f4:f7:1f:84:
         18:87:5b:06:fc:4d:ce:5f:72:bb:12:e3:57:af:51:f4:50:4c:
         9b:78:4f:52:9f:76:e6:3b:f1:b5:32:1d:76:92:55:fd:bf:be:
         c4:bf:9f:aa:23:35:0e:b4:53:a8:58:ae:36:3e:9b:56:cc:6f:
         51:3e:45:89:47:77:80:c2:88:58:ac:ba:35:dc:9e:b6:d0:10:
         da:9a:7b:9a:d7:2a:5a:18:0a:94:45:ce:4e:43:14:6d:24:32:
         a0:7b:8e:92:a2:0c:38:cb:df:c8:74:bd:73:03:8a:6b:98:a5:
         c1:23:fb:5a:1f:ce:b3:a7:dc:c9:e8:31:ea:4a:73:5f:23:e7:
         83:94:c8:5a:ea:b1:a4:18:af:bb:c4:88:c1:8c:bd:5f:5c:1f:
         d6:16:9e:a6:9e:76:b2:01:b4:f5:7d:70:e1:c1:17:f2:27:28:
         7d:72:21:e6:94:7e:2b:b5:53:80:65:20:fd:a5:9d:87:e1:d6:
         3e:b3:3b:a3:50:1f:e1:30:1f:08:58:a5:58:5f:7d:da:4b:32:
         30:29:27:3f:1e:44:ed:ab:f2:d4:fd:10:1e:f2:f0:3e:19:7b:
         a0:a5:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 18:00:29 2024 by rpki-client on console-ams.rpki-client.org