Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer
File:                     52F3DD15F1E61F19A918213318E706B1EA13C48B.cer (raw, json)
Hash identifier:          uQH0ypltDYgcxbAgZ/W1aCVc3CqZa55PMuYmfh83mao=
Subject key identifier:   52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D2FBF628E5185CDBB152D1E1CB593907E0765B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Oct 2024 14:27:32 +0000
Certificate not after:    Thu 23 Oct 2025 14:32:32 +0000
Subordinate resources:    AS: 266022
                          IP: 170.245.124.0/22
                          IP: 2804:3944::/32

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 13:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2f:bf:62:8e:51:85:cd:bb:15:2d:1e:1c:b5:93:90:7e:07:65:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 24 14:27:32 2024 GMT
            Not After : Oct 23 14:32:32 2025 GMT
        Subject: CN=52F3DD15F1E61F19A918213318E706B1EA13C48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:fb:4e:59:9c:04:f1:e8:b9:fa:5b:34:45:
                    5c:eb:29:6a:48:eb:d5:5a:e3:1c:eb:c2:27:65:ae:
                    f2:58:22:fb:07:b7:1e:cb:75:e5:15:38:ac:3c:04:
                    c2:bb:2a:0c:5c:dd:5e:f9:b9:6f:6e:5b:f2:d1:32:
                    2a:3c:0f:7f:64:db:3d:24:40:f9:39:ea:cb:37:c6:
                    a8:50:b9:ed:d7:e0:db:e4:77:10:b6:14:79:4e:44:
                    fb:03:03:5a:7b:b4:63:2d:64:b7:2a:e0:43:93:a0:
                    33:62:81:3a:6c:16:01:b0:00:bb:05:5d:aa:8b:ff:
                    1d:79:f3:db:18:09:d3:2f:51:50:c5:3a:5c:7a:38:
                    91:b7:71:74:e9:e7:af:58:ef:13:55:62:98:ec:48:
                    65:21:0b:4b:2b:92:4c:55:86:b5:65:6f:fb:d8:14:
                    9b:ec:f2:8f:50:2d:f7:cd:dd:5f:10:c3:d2:ca:39:
                    78:68:b3:8e:b7:0f:d9:ab:a5:c0:ac:90:f7:19:be:
                    77:8f:fd:c4:d1:31:d0:a3:1e:1c:e4:5b:03:e2:dd:
                    d3:36:a2:d0:7b:06:1a:3d:14:80:71:3b:99:75:96:
                    d5:aa:3b:96:a4:0e:f4:ff:62:ae:20:1d:ec:bd:99:
                    b5:fb:ff:8f:12:7b:1e:a3:97:89:17:18:a8:81:25:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/22
                IPv6:
                  2804:3944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266022

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:4b:91:4b:4a:fd:db:79:fc:a4:c4:9b:b2:65:bf:42:c3:
         a2:a0:7f:7a:cf:59:6e:e7:3b:0a:0e:bc:4a:29:17:81:17:a5:
         8f:c9:01:d2:0d:40:5b:8e:16:74:90:d3:51:cd:bb:64:d4:5e:
         55:bd:a6:40:66:20:e2:9f:00:ae:e5:65:8f:9a:2e:ca:73:43:
         9d:00:bc:c3:77:dc:93:1d:5b:b1:d6:55:57:93:08:c4:46:a5:
         a5:8f:75:1f:4f:2f:dd:3d:72:71:14:47:45:32:ed:81:8d:a8:
         29:d9:f0:65:15:f4:c1:fe:c9:97:fb:fd:14:00:b0:a2:7e:7b:
         6d:81:92:3f:8c:66:28:28:fd:3f:1b:4a:05:14:83:3e:fb:27:
         18:d8:ee:22:8d:28:ad:13:9d:f2:c4:a4:a9:e9:64:49:6c:6d:
         6d:9b:dc:85:1f:dc:15:d6:a8:15:f2:b5:5e:28:c4:11:26:ce:
         d9:f7:80:7e:4c:a7:d3:4a:d1:02:e8:88:89:79:20:d4:e0:68:
         fc:20:65:8d:b9:23:3b:68:94:40:d4:2e:68:4b:4d:0d:a6:5d:
         09:30:c8:ff:03:00:e3:43:d1:56:f0:2c:87:37:c4:cd:b5:b3:
         96:f3:57:50:93:bd:32:6d:e3:bc:70:9e:ef:26:a2:ea:56:5f:
         46:bb:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 14:25:16 2024 by rpki-client on console-fra.rpki-client.org