Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/550370E7B98CF3A6B6EF0D307BCF3D050E9889E7.cer
File:                     550370E7B98CF3A6B6EF0D307BCF3D050E9889E7.cer (raw, json)
Hash identifier:          wfgxi1uqYLqorNyKc5WIkyio+dvZshgqzgfB2pMk05w=
Subject key identifier:   55:03:70:E7:B9:8C:F3:A6:B6:EF:0D:30:7B:CF:3D:05:0E:98:89:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CE7D270960D200749B5F6991B0F286B2291F270
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/1/550370E7B98CF3A6B6EF0D307BCF3D050E9889E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:57:28 +0000
Certificate not after:    Wed 02 Apr 2025 19:02:28 +0000
Subordinate resources:    AS: 52584
                          IP: 170.254.252.0/22
                          IP: 177.86.244.0/22
                          IP: 2804:d04::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e7:d2:70:96:0d:20:07:49:b5:f6:99:1b:0f:28:6b:22:91:f2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:57:28 2024 GMT
            Not After : Apr  2 19:02:28 2025 GMT
        Subject: CN=550370E7B98CF3A6B6EF0D307BCF3D050E9889E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:f8:9e:73:0b:20:70:d4:be:9f:c4:fa:ab:
                    39:80:be:27:55:4e:2a:0c:82:86:c8:24:56:41:f1:
                    f5:ad:24:8b:31:24:f1:47:ed:3f:6d:f5:f7:20:26:
                    3e:e5:1a:8d:82:87:8c:76:96:53:97:98:85:46:fe:
                    0c:5b:cd:43:fa:99:ad:8a:8c:cb:4b:26:8d:ea:f8:
                    a3:83:7e:9f:84:62:34:a7:73:d0:cf:97:3e:7a:d8:
                    2a:a8:42:bf:e6:23:07:f3:52:6b:b2:26:38:1e:a3:
                    e1:21:94:c1:f5:4e:64:cd:48:c2:0c:72:84:ba:b6:
                    be:bb:8e:c7:34:e1:e3:4c:71:bf:fc:26:45:ed:ca:
                    8d:20:37:d5:bc:21:cc:cb:81:ac:78:e6:87:29:c8:
                    a3:3b:d7:8b:85:62:0a:7a:c0:83:e2:dc:4e:10:e8:
                    03:d4:b8:6e:62:bf:2b:ca:b6:f1:52:55:e9:9e:7c:
                    26:af:70:ce:42:c7:fc:01:21:3a:6a:8e:83:f8:1f:
                    70:ca:a2:58:ae:b2:db:28:30:2c:a3:a4:30:50:e2:
                    49:95:6f:60:05:26:fd:6f:86:b3:3a:da:02:1c:b9:
                    fc:b8:3f:b8:26:01:3e:36:b5:88:98:1b:94:25:1e:
                    6f:11:c6:7c:27:51:ec:51:2b:bd:f8:49:44:f6:28:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:03:70:E7:B9:8C:F3:A6:B6:EF:0D:30:7B:CF:3D:05:0E:98:89:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/1/550370E7B98CF3A6B6EF0D307BCF3D050E9889E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.252.0/22
                  177.86.244.0/22
                IPv6:
                  2804:d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52584

    Signature Algorithm: sha256WithRSAEncryption
         84:60:61:37:7b:fb:8b:87:79:93:9e:e6:82:bc:05:15:0c:31:
         59:f9:b1:e8:d1:1a:f0:e4:52:0b:7e:47:bc:5d:e3:98:11:3b:
         12:cd:05:ba:9b:80:3e:6d:2d:45:63:c8:da:54:8a:e9:d8:b7:
         9f:de:4c:f3:33:28:0c:bd:04:d3:b0:bc:7f:43:2e:0c:67:76:
         e4:c6:49:8b:14:0e:19:76:c7:d2:e0:57:f0:ea:a4:19:89:67:
         80:16:63:8c:09:34:63:ed:af:cb:13:91:38:8f:33:c5:b1:7c:
         5e:68:6c:19:0d:0b:15:bd:03:15:40:d3:4a:f5:58:76:da:50:
         17:ec:27:ba:aa:97:16:ff:c0:39:6d:21:56:8a:7e:28:c6:bc:
         8e:83:9f:6e:56:96:28:c7:c7:8b:30:4a:93:e4:97:04:08:b8:
         f4:95:15:61:5d:fd:ae:51:27:8f:d2:d8:21:34:25:5b:24:c8:
         f7:ee:09:c0:26:1c:d0:d2:3d:f9:18:46:e6:04:75:ca:74:90:
         a9:1e:4a:df:6c:a7:e3:fb:b7:50:d6:a8:75:f2:50:11:b6:a8:
         b1:1c:ea:34:ae:44:bc:ce:7e:ae:bf:17:6e:0d:73:ae:4d:2b:
         c7:31:ea:70:26:5e:1a:e3:21:01:57:48:71:6b:77:0d:57:98:
         0d:b6:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org