Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer
File:                     32BE580D860CE57E80548533943E4642B25BEE59.cer (raw, json)
Hash identifier:          xh7MA0i88Nu0fID8IkoQZhbGdjb0FtTqzNcMUNFctbI=
Subject key identifier:   32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28598FC2DAB75B780D12182C8AC89B83C7E25904
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:35:42 +0000
Certificate not after:    Thu 03 Apr 2025 05:40:42 +0000
Subordinate resources:    AS: 271670
                          IP: 200.150.252.0/22
                          IP: 2804:7f28::/32

Validation:               Failed, certificate revoked on Tue 21 May 2024 06:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:59:8f:c2:da:b7:5b:78:0d:12:18:2c:8a:c8:9b:83:c7:e2:59:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:35:42 2024 GMT
            Not After : Apr  3 05:40:42 2025 GMT
        Subject: CN=32BE580D860CE57E80548533943E4642B25BEE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:6a:36:e6:f2:1d:0a:ed:68:83:7a:65:54:
                    00:dd:dc:46:75:56:96:be:2e:32:1c:3d:ef:8c:2d:
                    77:8b:86:41:f8:8a:ce:af:9b:3e:bb:6c:94:10:00:
                    18:0a:2b:d4:30:f4:bd:65:80:76:2a:0b:0e:d5:17:
                    8b:a0:5b:2c:84:f7:a5:54:bf:9a:38:9d:ed:df:2f:
                    99:29:98:df:7d:22:1e:37:8d:34:88:2a:74:07:26:
                    3a:0e:8b:7f:67:ab:b7:21:b9:12:4b:1a:c6:06:2c:
                    a1:13:11:46:45:94:dc:45:e0:12:d5:b6:47:a4:90:
                    f2:23:a6:ad:55:82:22:60:98:49:bf:2d:85:b1:d8:
                    c5:f4:b4:af:75:30:0e:8c:47:3d:e0:11:bf:65:20:
                    0b:93:f6:72:65:0a:fa:5a:dd:44:8a:2c:c1:7a:85:
                    97:ad:92:df:f4:39:c1:c4:79:e1:b0:2d:ff:55:5c:
                    e4:43:72:d2:b4:70:46:14:87:ae:37:5d:cf:57:64:
                    66:04:d0:b9:00:ad:8c:fd:58:ed:a4:cc:25:bc:b9:
                    9b:4f:22:b5:a7:ad:1d:48:bf:82:c8:7f:5f:3e:d3:
                    fb:22:1e:23:c8:39:d5:bd:1f:5b:c8:87:19:30:3f:
                    b0:58:73:6c:9a:25:ea:30:e8:a2:63:7e:50:61:be:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/22
                IPv6:
                  2804:7f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271670

    Signature Algorithm: sha256WithRSAEncryption
         21:77:84:6e:10:56:1b:6c:48:68:b0:37:15:49:f3:6a:de:e0:
         46:04:af:c8:f7:a4:dd:74:b0:ff:bd:b3:46:96:f3:4c:32:ca:
         f6:a3:6c:f6:99:70:79:70:d0:af:30:3d:2e:d2:5c:10:8b:14:
         45:0a:05:8e:83:48:d8:81:dd:3c:8e:6f:da:09:41:4f:40:bf:
         78:0b:fb:ee:3f:ba:56:48:97:b2:fb:2d:95:87:7e:c4:ac:e0:
         9c:e9:82:17:d0:6c:fe:f4:d0:67:ec:68:d3:b5:1b:96:eb:1f:
         72:8c:62:7d:6b:b4:e5:db:b5:0d:e8:be:6f:c5:2c:39:a2:a0:
         16:94:a4:df:cb:1a:b9:dd:95:f4:a1:4f:27:66:00:45:7b:7c:
         10:7b:e3:15:37:e9:59:81:1a:70:85:1d:ea:e2:2f:e2:5e:d1:
         d1:d5:a8:66:21:b1:53:47:07:38:60:23:fb:6a:1c:54:ad:54:
         b0:8b:dc:8c:5a:30:54:a8:c3:90:eb:f0:d4:61:ca:8a:4f:f7:
         45:5a:4c:a7:61:48:90:4f:b8:77:38:f1:e5:ad:e1:1c:7b:9e:
         b0:68:bd:05:2e:e9:20:f2:38:d9:ef:52:61:63:5e:c1:e2:00:
         d9:c0:27:8d:d0:90:15:4f:d9:fe:ca:e1:d5:b3:d7:1d:a4:06:
         e9:b9:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org