Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57114E632A6C808B0B6620D5AF581E00C0B85951.cer
File:                     57114E632A6C808B0B6620D5AF581E00C0B85951.cer (raw, json)
Hash identifier:          GzeDAkDcJeU/j6u9u4Z34HtjBWMP5PS786KtfCZV94Q=
Subject key identifier:   57:11:4E:63:2A:6C:80:8B:0B:66:20:D5:AF:58:1E:00:C0:B8:59:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07F6ED65776BFE3278A897BF249C979D85F1993E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/57114E632A6C808B0B6620D5AF581E00C0B85951.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jun 2024 21:03:58 +0000
Certificate not after:    Wed 04 Jun 2025 21:08:58 +0000
Subordinate resources:    AS: 53216
                          IP: 186.250.176.0/21
                          IP: 2804:37c8::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 11:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f6:ed:65:77:6b:fe:32:78:a8:97:bf:24:9c:97:9d:85:f1:99:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 21:03:58 2024 GMT
            Not After : Jun  4 21:08:58 2025 GMT
        Subject: CN=57114E632A6C808B0B6620D5AF581E00C0B85951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2f:61:4a:0f:da:3e:1a:20:78:77:6c:79:a6:
                    8d:10:e0:4a:62:3d:21:0b:36:fd:e4:a0:85:e1:e5:
                    c9:e0:db:6c:84:ac:f7:dc:42:8e:cc:b2:37:90:24:
                    73:12:69:fc:06:69:20:b7:55:17:b8:56:00:94:21:
                    cd:69:01:0d:df:e8:58:8a:44:b0:a1:44:c2:07:5a:
                    75:8f:f3:5a:9a:73:8c:a9:cf:6c:45:3e:82:ab:80:
                    70:67:fc:39:09:ac:8c:e1:55:97:49:51:69:84:03:
                    b2:9f:e7:58:50:bc:5e:50:59:35:e7:bd:04:26:79:
                    fb:74:67:90:20:57:26:6b:e2:c5:dc:a4:63:8b:7f:
                    ba:0c:a3:ba:eb:12:eb:56:5d:8c:12:fd:73:b4:8e:
                    a3:0d:40:c2:ee:ec:07:79:80:25:f8:b7:94:1d:12:
                    80:15:8a:58:91:e1:b9:cb:4d:fb:ce:e6:b4:86:25:
                    17:e8:44:ec:0a:cf:45:66:49:0d:ae:1c:9e:96:21:
                    fc:6b:2e:6d:bd:ae:19:72:a3:ee:94:ec:d8:e2:63:
                    c2:96:b6:3a:a4:28:5c:d4:3a:9e:a7:6e:d8:c0:66:
                    7a:50:f7:2e:28:3f:75:10:d4:e4:da:59:da:c6:56:
                    c5:d0:9e:cb:b6:78:07:ee:7f:17:a0:67:0b:a7:69:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:11:4E:63:2A:6C:80:8B:0B:66:20:D5:AF:58:1E:00:C0:B8:59:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/57114E632A6C808B0B6620D5AF581E00C0B85951.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.176.0/21
                IPv6:
                  2804:37c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53216

    Signature Algorithm: sha256WithRSAEncryption
         da:85:07:d5:83:f2:ba:06:cc:dc:6b:ac:62:af:a9:29:69:c7:
         07:46:85:e2:56:fe:56:26:31:88:dd:d6:71:af:20:8e:fd:68:
         95:ad:92:6b:6a:b1:22:8a:00:e3:00:a3:fb:62:0c:2c:4d:f0:
         97:75:18:fa:7d:31:39:89:9b:5d:32:4a:54:54:95:a8:5b:f4:
         dc:7c:0f:18:71:45:7e:18:23:43:c4:65:d1:a2:5c:85:de:80:
         b0:6b:e0:a5:d5:0e:77:4d:b6:12:87:86:27:27:b6:f3:b2:83:
         b0:2d:29:5c:7a:bd:36:7e:d6:6c:f2:c8:52:96:16:7c:14:79:
         ae:b6:09:5c:73:76:eb:fe:17:d8:a9:32:a7:1e:1a:6c:d3:eb:
         68:be:e5:16:d4:ee:cb:d4:91:69:cc:b6:c8:07:03:dc:2f:eb:
         f8:ad:8e:1c:56:db:7c:d3:8e:1d:3f:76:54:66:0e:0d:d8:fd:
         0c:72:82:04:fa:f6:28:3a:6f:b7:51:33:38:65:98:63:78:78:
         42:9c:1a:53:22:cb:fd:69:f9:b9:e4:27:95:05:0d:06:8c:c2:
         a0:2f:7c:20:2b:26:d3:f8:c4:1c:8d:f4:40:a1:52:09:6d:fc:
         b9:c9:46:91:3a:25:65:06:6f:5d:85:c2:7b:8d:40:fd:e8:ac:
         b1:88:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:05:52 2024 by rpki-client on console-fra.rpki-client.org