Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
File:                     2F394F99007CD172C0832F8415F6842A1475173D.cer (raw, json)
Hash identifier:          PHn1N9LFy1ffzdARsFE/OoJM7iXLcwWlxr8v5SCpi5s=
Subject key identifier:   2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06E9EC32A335AB270754E95D1156F2CF8E70AF12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Oct 2024 16:56:15 +0000
Certificate not after:    Thu 30 Oct 2025 17:01:15 +0000
Subordinate resources:    AS: 28287
                          AS: 28667
                          AS: 28669
                          AS: 52940
                          AS: 53080
                          AS: 53171
                          AS: 61844
                          AS: 262272
                          AS: 262659
                          AS: 264299
                          AS: 265079
                          AS: 265974
                          IP: 45.70.232.0/22
                          IP: 45.175.80.0/22
                          IP: 45.177.252.0/22
                          IP: 45.179.20.0/22
                          IP: 45.234.40.0/22
                          IP: 132.255.64.0/22
                          IP: 138.36.180.0/22
                          IP: 138.118.92.0/22
                          IP: 138.118.120.0/22
                          IP: 138.121.152.0/22
                          IP: 138.186.36.0/22
                          IP: 138.255.212.0/22
                          IP: 143.202.68.0/22
                          IP: 164.163.212.0/22
                          IP: 167.249.176.0/22
                          IP: 168.194.60.0/22
                          IP: 168.196.108.0/22
                          IP: 168.227.12.0/22
                          IP: 168.227.76.0/22
                          IP: 170.82.56.0/22
                          IP: 170.82.64.0/22
                          IP: 170.150.4.0/22
                          IP: 170.233.136.0/22
                          IP: 170.238.116.0/22
                          IP: 170.244.164.0/22
                          IP: 170.254.20.0/22
                          IP: 177.8.208.0/21
                          IP: 177.11.92.0/22
                          IP: 177.21.128.0/20
                          IP: 177.21.192.0/20
                          IP: 177.36.160.0/20
                          IP: 177.71.0.0/20
                          IP: 177.87.16.0/21
                          IP: 177.107.0.0/20
                          IP: 177.107.80.0/20
                          IP: 177.130.96.0/20
                          IP: 177.137.64.0/20
                          IP: 177.154.32.0/20
                          IP: 177.184.240.0/21
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0 -- 179.127.71.255
                          IP: 179.189.224.0/20
                          IP: 186.193.64.0/19
                          IP: 186.193.192.0/20
                          IP: 186.194.176.0/20
                          IP: 186.195.144.0/20
                          IP: 186.224.224.0/20
                          IP: 186.225.96.0/19
                          IP: 186.236.96.0/19
                          IP: 186.250.208.0/21
                          IP: 187.1.16.0/20
                          IP: 187.1.64.0/20
                          IP: 187.19.80.0/20
                          IP: 187.85.0.0/19
                          IP: 187.95.0.0/20
                          IP: 187.108.32.0/20
                          IP: 187.110.240.0/20
                          IP: 187.111.160.0/20
                          IP: 187.120.128.0/19
                          IP: 187.121.192.0/19
                          IP: 189.1.176.0/20
                          IP: 189.8.80.0/20
                          IP: 189.28.144.0/20
                          IP: 189.76.128.0/20
                          IP: 189.124.80.0/20
                          IP: 191.7.28.0/22
                          IP: 191.241.224.0/19
                          IP: 191.242.128.0/19
                          IP: 191.253.0.0/20
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 201.46.16.0/20
                          IP: 201.49.192.0/20
                          IP: 201.148.124.0/22
                          IP: 201.216.100.0/22
                          IP: 2804:4::/32
                          IP: 2804:58::/32
                          IP: 2804:e8::/32
                          IP: 2804:290::/32
                          IP: 2804:71c::/32
                          IP: 2804:7cc::/32
                          IP: 2804:1080::/32
                          IP: 2804:1424::/32
                          IP: 2804:1a30::/32
                          IP: 2804:21f8::/32
                          IP: 2804:24e8::/32
                          IP: 2804:25bc::/32
                          IP: 2804:3274::/32
                          IP: 2804:40ac::/32
                          IP: 2804:4bec::/32

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 01:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e9:ec:32:a3:35:ab:27:07:54:e9:5d:11:56:f2:cf:8e:70:af:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 31 16:56:15 2024 GMT
            Not After : Oct 30 17:01:15 2025 GMT
        Subject: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:2b:22:ea:0b:d3:a0:9c:cd:07:53:0f:9a:
                    1c:b6:a7:42:2f:97:bc:92:cb:3b:7d:ef:84:4b:17:
                    ff:0d:cf:42:62:81:c9:e4:0e:b4:0e:0b:20:b2:64:
                    d2:5e:82:6d:2c:4a:02:20:c7:b1:17:05:56:82:db:
                    3f:3e:9c:7d:78:d8:e1:8b:a8:3c:28:a2:b8:69:a4:
                    d4:b3:83:81:69:8b:71:34:4f:2b:92:30:67:3d:fe:
                    a5:1d:ac:18:a7:0c:ee:a4:57:e1:3f:40:0f:a6:3e:
                    7e:43:3a:e2:1c:07:33:56:55:74:9a:92:c7:c7:be:
                    07:52:cf:3c:bc:df:3b:28:84:2f:d8:06:0b:10:6a:
                    6e:36:4c:4d:d3:1c:b0:b6:75:e3:9d:66:a0:73:ca:
                    30:8a:ce:35:83:db:8c:c8:45:0e:67:83:14:63:6a:
                    c2:f4:c8:88:84:0d:b3:00:40:56:85:88:32:78:51:
                    c3:85:d3:9e:6c:c4:e4:f2:44:78:2a:10:3f:a8:54:
                    03:4e:09:13:f5:12:f1:17:ea:f7:69:55:9e:6b:84:
                    4b:59:c3:5d:ce:96:28:99:fa:d6:1a:39:f3:63:85:
                    de:2c:0f:05:6b:1e:21:04:a1:19:ae:8f:ae:ab:85:
                    c4:a7:8e:bc:6e:5f:4b:18:c9:bd:b4:82:2a:39:50:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.232.0/22
                  45.175.80.0/22
                  45.177.252.0/22
                  45.179.20.0/22
                  45.234.40.0/22
                  132.255.64.0/22
                  138.36.180.0/22
                  138.118.92.0/22
                  138.118.120.0/22
                  138.121.152.0/22
                  138.186.36.0/22
                  138.255.212.0/22
                  143.202.68.0/22
                  164.163.212.0/22
                  167.249.176.0/22
                  168.194.60.0/22
                  168.196.108.0/22
                  168.227.12.0/22
                  168.227.76.0/22
                  170.82.56.0/22
                  170.82.64.0/22
                  170.150.4.0/22
                  170.233.136.0/22
                  170.238.116.0/22
                  170.244.164.0/22
                  170.254.20.0/22
                  177.8.208.0/21
                  177.11.92.0/22
                  177.21.128.0/20
                  177.21.192.0/20
                  177.36.160.0/20
                  177.71.0.0/20
                  177.87.16.0/21
                  177.107.0.0/20
                  177.107.80.0/20
                  177.130.96.0/20
                  177.137.64.0/20
                  177.154.32.0/20
                  177.184.240.0/21
                  177.185.224.0/20
                  179.127.48.0-179.127.71.255
                  179.189.224.0/20
                  186.193.64.0/19
                  186.193.192.0/20
                  186.194.176.0/20
                  186.195.144.0/20
                  186.224.224.0/20
                  186.225.96.0/19
                  186.236.96.0/19
                  186.250.208.0/21
                  187.1.16.0/20
                  187.1.64.0/20
                  187.19.80.0/20
                  187.85.0.0/19
                  187.95.0.0/20
                  187.108.32.0/20
                  187.110.240.0/20
                  187.111.160.0/20
                  187.120.128.0/19
                  187.121.192.0/19
                  189.1.176.0/20
                  189.8.80.0/20
                  189.28.144.0/20
                  189.76.128.0/20
                  189.124.80.0/20
                  191.7.28.0/22
                  191.241.224.0/19
                  191.242.128.0/19
                  191.253.0.0/20
                  200.52.16.0/20
                  201.33.240.0/20
                  201.46.16.0/20
                  201.49.192.0/20
                  201.148.124.0/22
                  201.216.100.0/22
                IPv6:
                  2804:4::/32
                  2804:58::/32
                  2804:e8::/32
                  2804:290::/32
                  2804:71c::/32
                  2804:7cc::/32
                  2804:1080::/32
                  2804:1424::/32
                  2804:1a30::/32
                  2804:21f8::/32
                  2804:24e8::/32
                  2804:25bc::/32
                  2804:3274::/32
                  2804:40ac::/32
                  2804:4bec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28287
                  28667
                  28669
                  52940
                  53080
                  53171
                  61844
                  262272
                  262659
                  264299
                  265079
                  265974

    Signature Algorithm: sha256WithRSAEncryption
         37:79:28:1c:a1:fc:ed:7f:7f:ed:43:7b:be:25:92:c2:04:16:
         7f:65:77:8f:0e:ee:4c:f1:42:1a:bb:6b:d0:fb:84:8f:5d:c7:
         30:2f:b0:91:a1:43:25:9c:bd:e9:56:5b:95:16:ba:5e:64:48:
         9f:54:d6:eb:d4:ec:0e:f5:d2:54:c2:3d:e7:94:c2:c5:b1:32:
         b6:37:7b:e8:10:0e:98:19:82:f4:63:33:86:ff:50:3f:3e:33:
         7c:f9:45:a5:5b:5a:d9:c4:8b:09:ac:8c:43:c5:3b:e1:a5:76:
         d5:fd:99:86:d8:38:8d:79:9e:ba:76:9f:1c:f6:59:79:76:64:
         08:75:27:d0:69:95:bb:34:c0:10:de:63:11:96:87:72:37:1d:
         5a:75:65:f9:a5:13:25:e6:b7:6c:3c:af:91:6d:a7:3b:c6:2e:
         aa:18:46:f4:63:e2:10:b0:54:34:f1:27:09:8e:a0:e0:c8:9b:
         71:6c:89:31:82:7b:9f:02:99:77:f9:a0:7d:cf:70:36:5d:a7:
         4c:e2:a2:4b:2b:a5:0b:52:73:fb:e5:98:a4:10:01:15:69:23:
         99:04:33:90:c6:5b:ab:22:da:8f:68:10:a3:61:ad:9a:71:94:
         2e:c5:c3:f6:c5:af:3c:a7:5e:a5:d7:d5:6e:14:84:13:1e:27:
         ed:72:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 06:33:48 2024 by rpki-client on console-ams.rpki-client.org