Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5255109203DC7857C5B8A53D1760B88B72814DED.cer
File:                     5255109203DC7857C5B8A53D1760B88B72814DED.cer (raw, json)
Hash identifier:          iIOM7LOcrlP332vJOCik/lumoJa9TVgqcqJZNts933Y=
Subject key identifier:   52:55:10:92:03:DC:78:57:C5:B8:A5:3D:17:60:B8:8B:72:81:4D:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41856B023A6B2D140219311D29EC9DE387C6D584
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/5255109203DC7857C5B8A53D1760B88B72814DED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Oct 2024 20:57:53 +0000
Certificate not after:    Tue 21 Oct 2025 21:02:53 +0000
Subordinate resources:    AS: 262988
                          IP: 168.90.80.0/22
                          IP: 179.125.64.0/19
                          IP: 186.251.8.0/22
                          IP: 2804:1058::/32
Validation:               Failed, certificate revoked on Sun 08 Dec 2024 09:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:6b:02:3a:6b:2d:14:02:19:31:1d:29:ec:9d:e3:87:c6:d5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 20:57:53 2024 GMT
            Not After : Oct 21 21:02:53 2025 GMT
        Subject: CN=5255109203DC7857C5B8A53D1760B88B72814DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:c6:ce:a3:ad:e9:45:67:68:5f:21:d0:1a:
                    7e:f9:05:7d:08:cb:0e:de:d4:a5:74:b9:86:ad:e2:
                    71:ad:2e:74:8b:73:ab:48:9d:40:d2:5d:fa:e3:37:
                    10:05:fe:e8:a4:63:8d:c7:16:f0:b9:73:fe:67:61:
                    dd:5c:50:89:ca:42:71:42:75:49:20:fc:62:d8:ae:
                    fe:2b:2e:2b:f9:86:da:3e:54:b5:e0:f9:99:1b:3c:
                    88:59:d6:49:10:8d:94:60:70:c8:c9:7f:54:4d:f5:
                    c2:c8:71:a4:aa:e5:70:b8:cd:05:e1:9b:96:18:30:
                    a7:9e:1d:a6:70:8d:70:c5:ee:60:3e:e8:12:f8:d8:
                    9c:cf:46:0f:89:1f:b9:c6:5d:db:f6:2a:5b:55:7b:
                    2a:63:5c:00:b5:0a:64:3b:fb:3e:56:e7:bd:57:3a:
                    82:42:41:08:89:39:a8:ad:5e:fd:3e:18:fc:77:6c:
                    a0:19:be:0f:fb:74:0d:3d:51:8f:d4:3b:4c:7a:ba:
                    49:2c:5b:bf:72:5e:b2:48:1d:fa:0a:9f:46:b8:b0:
                    3a:42:3a:71:f4:d7:41:ab:68:5d:b6:e0:69:c6:1f:
                    af:90:f5:d5:e5:e4:85:18:60:3a:9b:6b:f2:bd:9a:
                    60:99:0a:ad:35:bf:42:62:00:ec:3b:11:c7:a7:56:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:55:10:92:03:DC:78:57:C5:B8:A5:3D:17:60:B8:8B:72:81:4D:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/5255109203DC7857C5B8A53D1760B88B72814DED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22
                  179.125.64.0/19
                  186.251.8.0/22
                IPv6:
                  2804:1058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262988

    Signature Algorithm: sha256WithRSAEncryption
         01:86:ed:da:99:95:aa:d8:9a:dd:5b:fe:e3:d1:a7:04:af:9e:
         23:27:3c:03:ea:41:00:c4:ea:22:ba:c1:25:0d:c0:f4:4c:55:
         c9:17:ab:fb:be:3c:12:05:d1:8b:e1:a5:91:5f:3c:b7:bf:28:
         72:fc:2a:c9:49:7b:95:c6:61:a8:26:2f:6e:47:3e:31:3f:b7:
         e3:d7:d2:ee:3e:a1:9e:80:c5:6f:fc:1a:ed:74:43:74:27:a4:
         1b:fd:fd:9f:45:6e:b6:6b:10:b5:39:98:73:6f:5d:e9:de:c3:
         15:86:73:88:7a:af:83:47:11:b5:07:ea:fd:b0:82:47:99:f0:
         cc:02:3b:c9:2a:fa:f3:03:60:6e:a4:99:ba:28:f5:9c:d2:00:
         d1:ee:ec:34:70:62:a1:01:52:28:a7:5e:ab:bc:50:73:97:a7:
         62:46:c8:e7:16:41:dc:15:52:99:7a:05:76:d1:10:bc:a8:a3:
         20:64:a3:a2:5d:e9:9d:0d:f6:84:d8:fd:6d:ed:24:a0:a0:76:
         52:e4:eb:10:bf:71:06:bb:2f:d9:1e:c4:5e:5b:2f:f8:41:9b:
         e9:9c:20:be:38:2e:00:88:3a:26:47:fb:69:21:e7:72:e2:6a:
         04:26:a0:cc:a4:9c:3a:b3:72:f4:2c:dd:52:d6:d8:6e:92:f4:
         ad:9c:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:07 2025 by rpki-client