Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer
File:                     317B2083DA24C1BA69201702A19EDCA376FA0379.cer (raw, json)
Hash identifier:          FiNhn0EvhF25yaEZDE0q3vV1m75biLnW+q8JEhiqHzo=
Subject key identifier:   31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21F9565B32D23BAFAF6C8BE669F29F480C60F596
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:01:52 +0000
Certificate not after:    Thu 03 Apr 2025 10:06:52 +0000
Subordinate resources:    AS: 61785
                          IP: 201.131.152.0/22
                          IP: 2804:194c::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f9:56:5b:32:d2:3b:af:af:6c:8b:e6:69:f2:9f:48:0c:60:f5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:01:52 2024 GMT
            Not After : Apr  3 10:06:52 2025 GMT
        Subject: CN=317B2083DA24C1BA69201702A19EDCA376FA0379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f9:85:0e:0c:89:f0:9d:e0:a6:d6:1b:f3:07:
                    46:82:d3:c9:33:d0:82:28:33:bb:5d:17:1a:09:57:
                    c8:bf:99:f1:a9:5f:a5:58:98:c1:52:da:1a:9f:a5:
                    65:fc:61:d7:c1:0d:0f:4e:bc:df:cf:37:fc:08:b5:
                    9f:c3:80:88:4b:ce:75:09:e7:af:7a:75:c6:39:ca:
                    6d:38:e3:a8:04:51:d7:8c:f3:0a:64:88:86:16:c4:
                    3f:98:1a:da:39:25:61:3a:8b:de:cf:7a:f9:3f:9f:
                    92:b1:b2:fa:aa:ce:5a:ee:ab:b6:5b:7e:e0:3d:aa:
                    3c:1f:b6:dd:37:e2:26:0f:42:d1:f8:23:f6:72:92:
                    3a:c4:43:b3:ef:3f:2c:79:d5:41:92:cf:ef:24:91:
                    36:0b:e4:26:37:5c:14:27:ce:d4:5c:96:31:cf:20:
                    db:59:aa:41:7e:60:e0:1b:d2:50:3e:6e:c5:ca:83:
                    56:3b:5e:41:5b:f7:2b:b6:55:24:d9:32:82:2b:8b:
                    a1:52:cf:fc:38:d4:35:4d:5e:4d:6a:f5:f3:b6:58:
                    14:c7:ed:57:25:aa:31:3c:2a:e9:0d:c5:4f:b3:b5:
                    65:8a:34:72:7f:9b:b3:4b:26:0c:e3:6e:cf:cf:91:
                    2d:1a:db:95:cb:27:6b:ff:06:e6:1c:82:21:4a:59:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22
                IPv6:
                  2804:194c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61785

    Signature Algorithm: sha256WithRSAEncryption
         c7:b0:94:e7:b6:fc:18:28:57:fc:8a:7e:c9:68:bd:53:0f:9a:
         d1:d2:f9:4a:2e:b9:fb:7b:fe:6a:f7:4d:01:55:44:30:9b:9e:
         8b:f2:c0:07:b7:08:ee:61:1e:7e:be:bc:5a:57:dc:99:7f:de:
         a9:65:90:2a:a6:29:8c:47:cf:a7:b6:22:ae:a0:3f:5b:05:7e:
         24:3b:ab:c9:bf:7f:7a:88:1f:9a:da:93:cf:86:55:79:8b:3b:
         6f:51:72:14:0f:a6:4a:54:b4:d7:21:11:81:29:ab:85:1e:56:
         42:0d:40:c2:27:76:c5:32:3c:30:3b:ae:28:7a:91:90:5d:6b:
         18:a8:09:ec:c9:74:36:ef:78:68:30:f4:17:61:0e:71:aa:93:
         54:f6:c2:29:51:57:14:48:d4:99:a0:79:63:59:01:ac:51:81:
         d6:57:89:59:b6:fb:48:c2:57:da:ba:0f:9f:6a:a9:58:b1:f4:
         b1:9c:1a:4d:e1:97:57:8a:c2:fc:33:5e:56:b2:41:e5:78:00:
         17:7e:00:6d:57:9d:9a:c3:b6:db:2f:99:00:48:93:21:71:b5:
         71:94:88:1e:a8:18:5f:83:dd:ef:70:32:7a:46:82:70:a1:7d:
         37:8b:2d:35:76:0f:e0:41:27:83:73:e4:b7:ff:cc:b0:0b:42:
         d3:ff:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org