Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/587BFB2C5B1A4B89CF15AA57010A64436482B44E.cer
File:                     587BFB2C5B1A4B89CF15AA57010A64436482B44E.cer (raw, json)
Hash identifier:          Vi+wIpQUge8Ha1NYoB4fLoZZezByaO6xzbJpMO571xc=
Subject key identifier:   58:7B:FB:2C:5B:1A:4B:89:CF:15:AA:57:01:0A:64:43:64:82:B4:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B4383BA888D29DA6D3970BBEFA9EEB20A6956E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/587BFB2C5B1A4B89CF15AA57010A64436482B44E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Oct 2024 13:07:27 +0000
Certificate not after:    Wed 15 Oct 2025 13:12:27 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 01:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:43:83:ba:88:8d:29:da:6d:39:70:bb:ef:a9:ee:b2:0a:69:56:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 16 13:07:27 2024 GMT
            Not After : Oct 15 13:12:27 2025 GMT
        Subject: CN=587BFB2C5B1A4B89CF15AA57010A64436482B44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:fb:73:dc:52:e2:1f:85:7d:a1:5f:fd:36:
                    73:14:6e:72:d2:f9:7c:e9:18:45:0d:d4:9d:84:14:
                    b7:b7:0e:3e:99:a8:6a:17:f0:01:e0:d8:17:96:21:
                    3a:37:01:ab:ae:df:ce:da:46:d2:16:1a:a0:96:79:
                    f1:56:fe:a1:19:7b:69:ce:d2:a2:0b:d9:66:39:71:
                    b8:4d:81:be:1f:70:07:de:51:b1:dd:a0:cc:f1:b0:
                    88:c0:ec:65:4c:78:d2:80:89:30:05:b7:e5:74:c7:
                    d6:d2:d9:96:d3:42:1f:1d:c6:ad:54:24:09:d3:e1:
                    c8:f3:27:1e:d9:05:47:7e:47:ca:28:28:21:6c:85:
                    76:6f:fb:89:dc:3c:4d:f4:2a:bf:13:c9:6f:73:2b:
                    15:a4:5e:88:d3:10:20:fc:d5:4c:1b:3b:9a:1a:8c:
                    f2:f4:aa:d7:96:a8:2e:f9:f8:95:15:d7:cb:ef:c6:
                    e4:de:e3:96:0c:bb:de:29:d4:40:46:c3:f8:4e:3d:
                    ea:a1:69:74:d3:9b:55:4b:16:fe:00:3e:c6:3a:cb:
                    82:5f:8e:64:5c:a8:e3:ba:37:6b:f3:b6:a3:0e:63:
                    6e:d0:af:41:ed:c3:a1:ed:7e:fd:ee:a1:d9:ea:9d:
                    5c:e8:67:23:33:e3:cb:e9:2b:05:c9:30:dd:23:85:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:7B:FB:2C:5B:1A:4B:89:CF:15:AA:57:01:0A:64:43:64:82:B4:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/587BFB2C5B1A4B89CF15AA57010A64436482B44E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         d4:d2:46:43:ef:27:bc:bd:6a:50:81:c9:61:40:43:7e:db:54:
         bc:51:86:68:f3:cf:aa:d2:d3:c3:9a:16:dd:6f:fb:7b:60:a6:
         11:42:d6:98:11:25:e6:ab:89:05:c3:97:78:05:1b:51:6a:c3:
         02:b8:af:fc:94:8c:e9:7d:0a:3c:ec:cb:61:55:3f:46:fd:72:
         f8:bf:3d:7f:e4:8c:2f:e8:c7:e4:cd:81:92:b6:15:5a:c0:18:
         70:73:ea:a4:b6:63:15:04:a8:ee:54:13:d5:00:b1:44:15:a9:
         ec:02:98:2b:fb:72:c4:31:07:8d:de:d9:a3:1c:8c:fd:4a:d1:
         0a:e7:63:84:4d:9a:74:5a:7a:ec:09:ed:ef:a9:56:c2:e1:29:
         8f:a4:a9:b7:ae:7d:ab:c1:42:74:28:41:1b:a5:6a:ec:6f:76:
         8e:45:7d:c4:4e:ee:ca:46:e1:f7:96:15:f3:29:3a:51:82:5f:
         81:13:b7:8a:15:c2:a5:de:6e:ef:09:92:ad:85:23:eb:30:fd:
         5a:3b:d3:a5:24:b7:f8:2a:02:50:21:92:f9:4c:f7:d8:ea:a9:
         4b:bd:f2:6c:24:92:42:41:3d:62:f1:40:f4:bd:a5:99:88:2b:
         7a:df:4f:f4:90:c8:6b:68:56:18:d3:61:0a:e6:f1:40:93:62:
         59:d4:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:07:02 2024 by rpki-client on console-fra.rpki-client.org