Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/574500A1D4795583CC49317322D2ACF95685FAD9.cer
File:                     574500A1D4795583CC49317322D2ACF95685FAD9.cer (raw, json)
Hash identifier:          AnEfPcb9e4VKydhw+B7QN5HC3MOpsc4dh5sxhasC/vc=
Subject key identifier:   57:45:00:A1:D4:79:55:83:CC:49:31:73:22:D2:AC:F9:56:85:FA:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74C8AE1688622F523499123D3FF587B11741D7BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/574500A1D4795583CC49317322D2ACF95685FAD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jun 2024 20:30:43 +0000
Certificate not after:    Wed 25 Jun 2025 20:35:43 +0000
Subordinate resources:    AS: 264162
                          IP: 138.97.116.0/22
                          IP: 2804:2370::/32

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 14:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c8:ae:16:88:62:2f:52:34:99:12:3d:3f:f5:87:b1:17:41:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 26 20:30:43 2024 GMT
            Not After : Jun 25 20:35:43 2025 GMT
        Subject: CN=574500A1D4795583CC49317322D2ACF95685FAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:b7:b6:1c:14:2d:4c:8d:bf:83:00:06:32:
                    bb:08:07:b6:c2:8e:d3:94:fb:58:31:6f:24:1c:77:
                    fe:19:0e:7d:61:7c:5d:a3:91:68:6f:da:c3:59:a1:
                    56:b4:24:47:4e:0e:3e:96:e7:97:7f:dd:d8:cb:84:
                    77:41:a1:6a:d2:c7:80:6a:44:f8:6f:ab:78:4c:a9:
                    fc:cd:00:84:7e:c3:9d:1b:f9:07:39:ed:6e:9b:6e:
                    b3:06:2b:fd:1c:69:64:2e:35:41:86:85:94:00:1b:
                    51:51:f6:99:d6:17:52:82:30:96:81:55:0b:c0:6a:
                    73:5a:23:d0:65:b1:a9:21:19:42:f7:7b:77:6a:5b:
                    8c:21:8d:be:16:b5:15:3e:08:02:26:d0:98:80:0e:
                    ce:b2:bf:f1:a1:94:08:44:3f:90:20:f1:05:61:8a:
                    0b:3f:96:b8:57:db:dc:13:a5:64:33:0a:e8:68:0e:
                    4f:35:77:0e:4d:95:23:b4:16:46:56:f6:8a:ae:6e:
                    b1:d5:3a:72:e1:fe:52:23:08:c1:f3:2c:cd:75:52:
                    ae:a8:27:1d:a8:20:ad:2d:15:0d:bd:bc:08:57:b9:
                    49:eb:ed:cc:28:da:f7:d4:e2:3e:b7:82:30:f6:5f:
                    4b:3c:05:0f:6e:3b:30:f2:e9:79:3a:7d:d6:9b:49:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:45:00:A1:D4:79:55:83:CC:49:31:73:22:D2:AC:F9:56:85:FA:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/574500A1D4795583CC49317322D2ACF95685FAD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.116.0/22
                IPv6:
                  2804:2370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264162

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:5f:4d:c5:b2:0e:9f:fa:3c:cd:88:60:44:55:f0:bc:91:
         45:38:51:a7:17:ce:85:73:d8:1a:ed:3d:a1:80:ec:4b:89:84:
         c9:50:51:6b:9d:b4:ed:e8:05:fe:c6:03:ba:16:60:e3:ad:45:
         7d:55:d8:72:44:c7:9c:dc:19:75:b7:f8:aa:0b:84:bf:70:0d:
         08:e6:d6:cb:7b:c4:e9:1e:a2:98:85:ef:58:65:12:14:f1:ee:
         a0:e6:b3:15:d6:33:bb:60:9e:ec:8a:98:73:c5:16:7e:2e:10:
         cd:32:7f:33:93:16:27:f1:69:fe:40:bf:18:b2:0f:8f:f8:8e:
         25:e1:77:08:c6:06:83:f5:65:9e:03:10:fb:41:26:b8:f6:91:
         35:d6:23:ee:dc:24:79:ec:39:51:be:9f:8f:50:73:e1:13:80:
         68:7c:4e:a5:26:73:2e:6b:c7:fa:a9:39:98:43:44:99:8d:28:
         a6:a3:2e:df:ff:83:36:f1:6b:86:87:88:40:99:91:01:94:84:
         fa:7f:56:ab:d8:db:6b:60:81:1c:11:f9:d4:c3:ba:a4:13:aa:
         b3:90:ac:e5:11:93:85:49:67:70:f2:e1:24:c8:2c:d6:80:61:
         10:b5:6f:3e:f2:1a:3d:3c:4e:dc:43:e6:93:85:8b:e0:e2:be:
         33:dd:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:21:26 2024 by rpki-client on console-ams.rpki-client.org