Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer
File:                     392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer (raw, json)
Hash identifier:          e5mZuV64Rh/gBSEYerXG3OchnQACLexhlp7gcmU8vrs=
Subject key identifier:   39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71C08873B17AD5735BCA3259CE5E13B5EDA8233F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:08:03 +0000
Certificate not after:    Thu 03 Apr 2025 11:13:03 +0000
Subordinate resources:    AS: 269529
                          IP: 45.188.180.0/22
                          IP: 2804:6608::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 04:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:88:73:b1:7a:d5:73:5b:ca:32:59:ce:5e:13:b5:ed:a8:23:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:08:03 2024 GMT
            Not After : Apr  3 11:13:03 2025 GMT
        Subject: CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:46:a4:d2:f0:28:21:94:12:8d:25:29:d1:
                    6a:80:26:6b:3b:44:13:2c:f5:e9:73:55:ef:7c:c7:
                    77:48:73:ff:1b:f5:84:b4:6a:6e:c4:d9:1f:18:fa:
                    31:63:6c:f8:cd:20:74:79:7c:80:b6:5b:73:ca:4d:
                    93:be:bd:7e:dc:a8:3e:b6:48:6e:9f:5a:76:ba:be:
                    4c:2c:a7:d8:03:67:7a:fc:eb:76:dd:d6:7f:91:29:
                    7e:d2:2a:19:4d:b3:f6:46:30:50:b6:df:f4:2c:ae:
                    fa:ef:fc:54:83:f0:28:d5:0d:38:0f:c7:16:a9:b5:
                    d7:1b:78:68:5a:fe:b6:f5:30:df:23:fa:6e:2c:a1:
                    57:52:fb:c6:13:c1:95:1b:ba:78:39:18:a4:8c:0e:
                    c6:fc:91:a2:34:49:e2:da:6e:47:b6:00:4c:c9:f4:
                    d0:a8:4c:34:84:1d:52:63:22:d7:3b:6f:10:70:31:
                    d3:84:0b:9f:5c:8e:03:c0:c9:5e:2e:22:46:57:4f:
                    29:d0:14:df:15:67:2e:79:c2:ac:84:2b:c5:47:18:
                    cb:71:e4:a6:cf:79:0a:eb:2b:d0:84:1b:34:4b:c6:
                    ea:8a:3a:d5:af:54:61:8e:b9:3b:66:a1:43:be:39:
                    60:c9:fa:0b:22:e3:a1:60:0a:d9:e8:25:75:ad:46:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/22
                IPv6:
                  2804:6608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269529

    Signature Algorithm: sha256WithRSAEncryption
         0d:e2:86:3a:ae:25:a6:a8:5e:ac:47:f4:4a:a7:2a:2a:b4:50:
         6e:5f:cf:2b:96:33:44:8c:14:6e:5c:19:3b:b1:84:a9:e9:13:
         b1:1f:40:f2:f5:75:15:19:99:d4:d9:8e:a8:5a:5b:76:3f:51:
         06:27:d1:47:54:5f:26:33:bd:60:80:3c:be:90:b5:c2:7d:37:
         1f:c2:c9:6d:fa:0a:dc:db:43:78:7e:20:68:18:10:1f:2b:7b:
         e9:fa:b3:8a:19:4c:b7:12:a4:24:59:d4:dd:66:de:0c:1c:80:
         d0:c6:c2:cb:21:3a:c8:02:85:17:3c:ad:da:01:3f:ef:03:25:
         db:91:97:a2:0c:f2:51:4a:bd:bc:b4:62:31:f8:26:59:b8:72:
         77:3f:bc:61:27:58:6d:0a:99:eb:8f:9e:be:dc:7c:03:32:d7:
         79:df:0c:87:26:f1:99:05:a9:83:04:ba:8b:b2:8f:e7:bd:85:
         62:a9:f8:74:d3:21:6e:67:b0:3d:cf:e1:4c:83:ad:44:58:53:
         80:ba:44:a4:fd:f2:24:83:1f:cb:ad:90:46:dd:ca:2d:8f:3b:
         63:82:55:cd:d4:ae:d9:bb:30:1d:eb:34:09:4d:b1:39:73:a4:
         cd:a0:44:6a:e8:95:7a:a2:56:fb:f5:32:5f:cc:09:96:fa:e1:
         35:a4:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org