Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/500EAB643A29B05598827503306666A18A9E1575.cer
File:                     500EAB643A29B05598827503306666A18A9E1575.cer (raw, json)
Hash identifier:          xdYbhK979Dl2xeyryzYrNvr0YHdzk1Fm9x7sPsM2yzE=
Subject key identifier:   50:0E:AB:64:3A:29:B0:55:98:82:75:03:30:66:66:A1:8A:9E:15:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69B758027153796854C5514D9F73FAA94ECCEE92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/500EAB643A29B05598827503306666A18A9E1575.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 12:54:10 +0000
Certificate not after:    Tue 02 Dec 2025 12:59:10 +0000
Subordinate resources:    AS: 264397
                          IP: 131.161.92.0/22
                          IP: 164.163.36.0/22
                          IP: 170.239.96.0/22
                          IP: 2804:1dd4::/32
Validation:               Failed, certificate revoked on Thu 05 Dec 2024 13:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b7:58:02:71:53:79:68:54:c5:51:4d:9f:73:fa:a9:4e:cc:ee:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 12:54:10 2024 GMT
            Not After : Dec  2 12:59:10 2025 GMT
        Subject: CN=500EAB643A29B05598827503306666A18A9E1575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:c0:1a:2d:cc:a4:9a:99:55:c4:64:02:d3:
                    01:bb:23:5f:ee:f2:53:08:88:f8:39:bb:89:00:a4:
                    32:bb:f3:8c:b5:09:ab:57:97:d8:9c:52:0b:58:2b:
                    2b:e1:25:dc:31:dc:6a:43:22:2a:d5:02:38:12:7c:
                    59:45:54:1d:51:9c:b1:d5:be:40:5d:44:f5:96:2d:
                    1c:ba:8c:b6:c7:e0:27:8b:7e:30:d3:d5:21:2b:f1:
                    b3:f1:1d:a3:40:31:67:c1:f7:6c:a2:ef:a1:9c:7b:
                    0c:1c:bb:5d:18:b7:32:6c:5d:85:37:d3:11:8f:02:
                    d7:c8:c6:0f:ab:6a:ad:0d:12:1d:40:29:15:b3:35:
                    ce:76:07:99:50:5e:78:05:06:97:17:a0:b8:3d:be:
                    40:f5:ec:1d:d4:e8:8e:76:c0:7c:94:d6:08:a3:e0:
                    a7:dd:7a:c0:25:4a:04:bf:98:7e:64:b6:e6:b7:c8:
                    aa:80:76:b9:96:f6:c4:83:5b:05:29:f7:16:3c:5e:
                    f9:3a:60:12:2d:23:9f:c9:16:3a:af:50:22:24:f0:
                    9a:1a:d1:5c:6b:96:b9:20:95:9a:fb:3a:6f:87:d3:
                    89:31:62:da:b5:3d:6a:42:4c:4f:95:e8:27:7e:20:
                    66:37:19:18:fb:ba:ff:82:18:ee:1c:0b:9d:4f:72:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:0E:AB:64:3A:29:B0:55:98:82:75:03:30:66:66:A1:8A:9E:15:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/500EAB643A29B05598827503306666A18A9E1575.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.92.0/22
                  164.163.36.0/22
                  170.239.96.0/22
                IPv6:
                  2804:1dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264397

    Signature Algorithm: sha256WithRSAEncryption
         d5:d3:ff:15:7a:a9:7a:57:2c:ea:01:d3:c5:a2:d0:fe:6f:e6:
         51:1e:ed:d0:1c:65:8b:6a:fc:9c:b8:ef:1a:ea:22:89:b9:6b:
         5c:d2:7e:ef:4b:06:4f:7d:2b:e7:86:95:f5:7f:da:9f:7e:fe:
         79:d1:ac:19:19:6e:21:33:e9:d1:d2:45:fb:c8:2e:e9:ff:78:
         bb:29:8d:e1:bc:6b:40:40:e6:16:34:0a:e3:37:6e:7c:9c:6d:
         80:9a:bd:06:b3:16:62:5c:b7:7f:9b:32:4c:96:10:53:33:09:
         51:47:aa:c7:c2:a4:32:ff:cd:c9:c7:4a:f9:0e:60:70:67:2f:
         23:4d:86:d5:9c:ee:7c:be:78:62:c8:2e:82:cf:6a:00:47:10:
         61:c6:98:be:85:19:35:d7:ac:d6:3f:59:c3:4f:26:b1:07:1f:
         ff:c4:64:ab:df:91:f1:f3:02:ef:33:0f:3c:4a:e0:cb:fc:df:
         3b:5d:9b:6b:b2:d0:23:ec:72:10:a5:df:54:e8:e7:ad:c6:e8:
         eb:80:11:cb:36:2f:ba:23:4d:09:eb:ea:ba:26:03:7f:3b:13:
         7a:33:bd:b0:8d:2c:48:d0:68:89:01:52:66:db:88:7c:05:aa:
         18:7b:82:ae:87:78:48:77:bc:16:47:88:e7:94:b0:c6:1e:cf:
         f4:3f:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:44 2025 by rpki-client