Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/529CC32F447A65BFF154360E02CBE21F27DA3B65.cer
File:                     529CC32F447A65BFF154360E02CBE21F27DA3B65.cer (raw, json)
Hash identifier:          53rozuWxyQq3/FI3ofNw+ecaAWBlDN8oaXfr0E568Wo=
Subject key identifier:   52:9C:C3:2F:44:7A:65:BF:F1:54:36:0E:02:CB:E2:1F:27:DA:3B:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       541045BA6908C6A0C8B81BB56DF641B6EEFAA11E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/529CC32F447A65BFF154360E02CBE21F27DA3B65.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 12:42:54 +0000
Certificate not after:    Wed 23 Apr 2025 12:47:54 +0000
Subordinate resources:    AS: 270865
                          IP: 177.53.28.0/22
                          IP: 2804:72a0::/32

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 09:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:45:ba:69:08:c6:a0:c8:b8:1b:b5:6d:f6:41:b6:ee:fa:a1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 12:42:54 2024 GMT
            Not After : Apr 23 12:47:54 2025 GMT
        Subject: CN=529CC32F447A65BFF154360E02CBE21F27DA3B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:70:0e:3d:de:b5:02:c1:8d:74:4d:46:e6:46:
                    99:37:7b:03:85:e3:6c:87:a1:51:31:75:33:9b:be:
                    ce:99:2a:d4:af:c5:10:80:24:69:bb:b8:ae:09:1b:
                    aa:a8:61:cf:e9:7a:6b:d2:ab:be:9d:5b:65:11:12:
                    8a:88:ec:3a:38:82:68:ef:60:e3:d5:ea:fb:3c:32:
                    a9:67:31:34:6a:48:64:78:af:4c:35:a4:6a:04:90:
                    6c:c5:8f:fb:1d:59:02:08:e8:b6:0c:0a:29:a3:ce:
                    01:a1:46:1a:7a:9b:45:55:45:80:86:0b:11:10:26:
                    7e:5e:57:bc:70:25:0f:44:d6:78:59:eb:c9:c8:4c:
                    64:ff:07:32:f8:f3:21:9c:02:a3:75:5d:fd:63:9f:
                    69:39:1f:c8:91:ce:ac:b7:af:13:48:21:ce:0d:ea:
                    a9:b8:28:d5:d5:7c:c0:89:b9:69:51:ca:e3:f4:3a:
                    d2:e2:1c:e8:f4:3b:9c:a4:50:9b:d5:0e:51:bc:3f:
                    64:bd:d3:9b:c9:70:af:ec:aa:32:26:6b:72:d5:f5:
                    8a:22:6d:a8:f5:60:c7:c5:c4:2f:65:7c:0f:d4:c1:
                    79:d3:36:cc:c8:91:5d:d2:5c:4c:fc:d3:9c:d9:f9:
                    3a:82:38:cc:fd:3e:a2:0b:37:c7:d5:9e:09:b9:6d:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:9C:C3:2F:44:7A:65:BF:F1:54:36:0E:02:CB:E2:1F:27:DA:3B:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/529CC32F447A65BFF154360E02CBE21F27DA3B65.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.28.0/22
                IPv6:
                  2804:72a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270865

    Signature Algorithm: sha256WithRSAEncryption
         4f:36:8c:ab:01:d3:28:ca:ea:9b:92:ac:c8:73:4a:68:60:5e:
         e2:1e:01:70:02:d8:d3:e3:ce:c7:97:79:e5:f7:5b:92:fd:46:
         00:d8:47:86:c6:2a:d0:7a:41:21:e9:84:54:a9:41:7b:0a:22:
         b3:5c:11:46:e1:b3:92:6d:8b:de:45:2f:d4:fe:e5:ce:6f:bd:
         bd:9b:ae:40:d8:2b:72:fd:95:97:21:87:66:8b:4e:3d:da:87:
         29:07:7c:a6:d0:48:fe:3d:79:34:3b:b7:4e:d2:48:c6:e8:04:
         fc:1d:e7:44:6d:94:eb:9c:a7:68:29:b8:ad:62:cf:9d:fc:3e:
         42:53:c9:3c:b1:91:ba:b8:c4:d1:b8:5b:d5:08:2d:84:af:f9:
         57:86:03:2e:31:14:7e:18:6b:c0:72:bf:09:03:6e:e1:cd:0e:
         3f:8d:16:21:43:ef:ba:7a:7c:cb:67:f8:26:98:24:82:dd:d2:
         2e:f2:52:55:99:50:07:f2:fd:05:83:98:23:81:15:a1:39:06:
         27:f3:3e:e5:e7:77:16:e5:43:90:da:91:d0:bd:95:bd:f3:a5:
         44:a1:bf:05:62:8f:f4:97:2d:88:a0:9c:f7:44:d5:cf:17:ce:
         c6:cf:70:25:e3:45:be:d9:96:6b:ce:18:3a:7d:a2:a8:20:7f:
         d6:b9:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:40:31 2024 by rpki-client on console-fra.rpki-client.org