Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/370D6BFB5F81E273AA07F5A925C6B1965F0B67AC.cer
File:                     370D6BFB5F81E273AA07F5A925C6B1965F0B67AC.cer (raw, json)
Hash identifier:          xe4VEM4Rssw4/FePOmZWwZd2aSwtenPojIVtEJxfnWw=
Subject key identifier:   37:0D:6B:FB:5F:81:E2:73:AA:07:F5:A9:25:C6:B1:96:5F:0B:67:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       628895083E043D5DC2BB3EE632831E903037A86A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/370D6BFB5F81E273AA07F5A925C6B1965F0B67AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Apr 2024 20:29:23 +0000
Certificate not after:    Mon 21 Apr 2025 20:34:23 +0000
Subordinate resources:    AS: 269484
                          IP: 45.187.40.0/22
                          IP: 2804:6558::/32

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:88:95:08:3e:04:3d:5d:c2:bb:3e:e6:32:83:1e:90:30:37:a8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 20:29:23 2024 GMT
            Not After : Apr 21 20:34:23 2025 GMT
        Subject: CN=370D6BFB5F81E273AA07F5A925C6B1965F0B67AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:0c:65:23:6b:46:1b:ac:be:87:d0:9b:5a:
                    36:3c:a7:31:e5:a5:7c:39:9b:3c:a6:1a:1e:9b:d2:
                    0a:97:e4:b3:e6:41:64:5f:bb:68:cb:fd:08:ec:ca:
                    f8:6e:ba:ad:32:89:0b:0c:b0:ea:6c:fe:c5:83:87:
                    86:01:28:24:5f:01:16:35:47:04:74:d0:a0:bc:de:
                    6b:0e:31:9b:03:ab:18:57:d4:d5:11:ab:7d:8d:33:
                    14:68:62:f3:1b:13:fc:e1:3e:3d:11:d7:dc:b7:6e:
                    f8:65:5e:ec:92:e4:6f:53:56:c4:46:5a:e8:23:5f:
                    76:59:5c:cb:1a:de:b8:7a:2f:c5:d1:26:50:e5:b5:
                    68:86:57:9d:e3:db:ac:bc:73:ed:c2:12:01:94:75:
                    d0:bb:a9:9d:cf:db:08:f0:d2:24:74:e8:14:4e:00:
                    56:92:54:03:74:0e:31:61:9d:fa:fb:9d:b2:02:a2:
                    2d:8b:11:77:4a:a2:fb:b1:81:c7:50:5b:30:b1:38:
                    1c:42:25:dc:8e:37:3f:a0:b4:94:50:c2:2b:b4:81:
                    26:32:87:43:81:30:47:ed:c1:4c:38:bf:0c:53:85:
                    82:cd:80:d3:fb:4b:6d:d1:1e:59:2c:db:bb:34:c9:
                    c8:0c:b6:75:56:6b:be:a1:26:bb:3d:2e:6e:b0:a2:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:0D:6B:FB:5F:81:E2:73:AA:07:F5:A9:25:C6:B1:96:5F:0B:67:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/370D6BFB5F81E273AA07F5A925C6B1965F0B67AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.40.0/22
                IPv6:
                  2804:6558::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269484

    Signature Algorithm: sha256WithRSAEncryption
         a6:95:92:f1:8c:96:b3:07:af:a6:1d:26:a9:61:ee:af:08:cf:
         22:21:2d:62:ac:23:5e:e8:06:c4:6f:11:07:33:20:42:e7:e4:
         51:79:be:88:fa:5c:b0:98:3e:fc:07:a4:05:0e:e4:64:b8:0e:
         05:ac:15:72:53:45:a5:6d:e6:9d:d5:7b:f4:17:f2:ed:de:c4:
         97:c7:02:1d:19:cb:51:a6:09:3b:1a:46:eb:6a:84:12:6d:c4:
         2a:24:d2:67:f0:fd:a7:a1:35:93:07:8b:4d:8c:6e:10:1b:d5:
         7b:f1:03:92:65:da:30:1b:7f:64:30:4a:1b:18:65:f6:b7:51:
         2f:14:f3:9b:13:d3:9c:fa:e6:37:59:82:73:74:98:c7:0f:2b:
         5a:bc:32:0c:52:cc:91:1f:91:aa:df:51:56:e3:2a:d6:e4:e7:
         f1:e6:8e:fa:de:81:59:05:50:b4:47:e8:0c:79:cc:cf:d7:b2:
         ee:85:2f:70:16:70:76:12:8d:d9:76:2a:c7:22:9a:52:06:69:
         d6:ea:18:9a:11:5c:8c:97:bd:7a:00:85:d8:43:12:3f:52:d3:
         35:d3:86:1f:3d:fb:e1:c7:21:88:65:29:58:41:55:8f:a3:93:
         d7:c9:84:b6:f8:e1:9c:fb:2f:2d:b0:60:0f:5a:8b:20:f5:aa:
         d2:56:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org