Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57F3033FFA4A49963340154D1995A4F97A9459FD.cer
File:                     57F3033FFA4A49963340154D1995A4F97A9459FD.cer (raw, json)
Hash identifier:          Y2JvxxhK/U9Q2ANuCJlvrijYCz6dT0iVMMBro7rwqeo=
Subject key identifier:   57:F3:03:3F:FA:4A:49:96:33:40:15:4D:19:95:A4:F9:7A:94:59:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE52EEF132FE1B21ECFC55017E2036C08FE6846
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/57F3033FFA4A49963340154D1995A4F97A9459FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 20:52:57 +0000
Certificate not after:    Tue 29 Jul 2025 20:57:57 +0000
Subordinate resources:    AS: 266376
                          IP: 170.80.112.0/22
                          IP: 2804:36d8::/32

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 04:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e5:2e:ef:13:2f:e1:b2:1e:cf:c5:50:17:e2:03:6c:08:fe:68:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 20:52:57 2024 GMT
            Not After : Jul 29 20:57:57 2025 GMT
        Subject: CN=57F3033FFA4A49963340154D1995A4F97A9459FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:1e:c2:4c:6e:5c:f1:88:ac:c5:41:e5:3e:
                    30:c7:08:95:a1:c1:ad:52:45:fc:d7:dc:38:bd:b6:
                    3b:41:1c:3e:e5:f6:18:ad:27:3e:f3:54:11:3d:41:
                    fc:26:fd:e8:54:e7:5d:8d:2f:94:02:92:6b:c4:58:
                    c3:ee:40:c4:01:1f:da:5e:64:f7:d0:ba:1f:f6:f1:
                    3f:a5:da:9a:be:0b:9f:07:0c:17:d1:c4:cb:87:aa:
                    7b:67:80:2d:11:a7:d9:3b:a5:46:c2:13:5d:cb:86:
                    d7:11:10:4e:29:91:fa:43:b8:cf:76:3a:c0:74:80:
                    a3:b9:b5:95:f6:4a:02:7d:8c:27:43:19:63:a5:7f:
                    e3:ae:ae:09:f5:85:0f:95:dc:63:86:ba:1b:ef:ce:
                    ae:c2:ef:bf:03:a1:f1:45:13:03:cd:22:51:5a:16:
                    b0:b5:22:a8:d4:bd:73:4e:d2:53:57:29:39:69:27:
                    62:d1:c2:15:6b:85:d0:0a:7f:f5:23:1f:9a:bb:be:
                    69:91:44:2e:4d:b3:9b:6f:b2:f9:8d:77:20:09:60:
                    c8:73:25:63:b5:da:9c:40:87:e9:e7:94:ea:f0:a6:
                    3e:d6:88:e3:88:aa:e7:ee:83:42:e1:3b:aa:00:e9:
                    57:d1:87:64:d5:be:1d:db:8d:d9:c3:3d:a7:e9:37:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:F3:03:3F:FA:4A:49:96:33:40:15:4D:19:95:A4:F9:7A:94:59:FD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/57F3033FFA4A49963340154D1995A4F97A9459FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22
                IPv6:
                  2804:36d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266376

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:a2:1d:4e:08:0f:86:bf:66:66:59:9a:4c:6c:e0:b4:95:
         7c:37:3c:d2:0d:3e:69:c7:c3:33:cf:e6:14:68:0d:9b:a3:9d:
         ca:6a:2e:4a:c7:7a:1f:8e:f6:72:ef:5c:e8:09:14:27:07:c2:
         e8:0a:b5:54:43:f9:ab:8d:dd:7b:f4:11:de:29:80:8a:07:e7:
         10:30:e2:b9:49:d3:43:5d:db:06:75:11:b3:b6:5a:93:80:72:
         88:13:b7:5c:1b:12:5f:b6:7b:19:05:8a:a8:30:7e:65:ea:7e:
         fc:1d:2b:28:02:77:a2:ef:36:7d:da:b4:72:64:3c:9d:55:02:
         e3:4e:fd:3f:bb:6b:67:8c:e7:d6:49:af:40:87:8c:65:58:a5:
         3c:cc:79:a9:80:79:09:65:d2:6c:78:de:e3:43:14:4f:1b:3e:
         f7:8b:d8:c6:31:64:2c:d7:16:56:d1:91:3f:ce:7f:5a:b6:f7:
         56:45:0e:88:83:3f:a5:1d:0c:e5:52:6a:ce:8e:ed:61:29:b2:
         13:ad:8b:e5:b2:7d:0f:62:a9:e1:84:43:c4:c1:9f:dd:3e:d3:
         ed:d9:ff:e2:81:77:47:89:0d:62:04:23:09:4a:01:40:fb:43:
         2b:1e:01:2a:04:5c:b8:ed:45:90:65:e8:b9:4c:67:8d:2a:0f:
         62:40:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 06:10:07 2024 by rpki-client on console-fra.rpki-client.org