Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer
File:                     5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer (raw, json)
Hash identifier:          OMcGYD034juZb8dsuIpNXdhRpfkCq1DJ2hwnoJ6ToJc=
Subject key identifier:   5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       474E79F0F5E47DDE381845156B5228E1729F8D03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 17:50:53 +0000
Certificate not after:    Tue 16 Dec 2025 17:55:53 +0000
Subordinate resources:    AS: 266544
                          IP: 45.65.204.0/22
                          IP: 2804:3da4::/32
Validation:               Failed, certificate revoked on Fri 14 Feb 2025 17:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4e:79:f0:f5:e4:7d:de:38:18:45:15:6b:52:28:e1:72:9f:8d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 17:50:53 2024 GMT
            Not After : Dec 16 17:55:53 2025 GMT
        Subject: CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:bb:91:cd:4d:8a:ef:1f:29:9d:87:37:c3:
                    56:46:85:c9:a8:b5:fa:c8:95:00:fe:68:56:f2:92:
                    6a:e9:1d:4b:b0:76:27:ac:39:74:c2:89:45:ee:13:
                    bc:9d:04:71:a3:9e:05:60:6d:0f:52:f4:fc:0f:46:
                    52:c3:dc:52:dd:1c:ba:12:35:80:3e:c1:57:ac:34:
                    ef:70:ef:f8:6b:4e:ef:87:99:b0:f3:68:81:87:e8:
                    ec:e1:2b:59:15:90:1e:22:7c:19:35:f0:4f:db:ae:
                    17:25:97:f9:00:37:a9:d9:d7:d8:55:25:1d:f1:c9:
                    64:d6:90:bc:e2:eb:ae:5a:7a:68:f7:01:a8:49:71:
                    a0:8a:08:e1:25:ad:19:7b:08:a4:79:4f:52:e2:df:
                    69:69:07:9c:91:f6:91:44:f8:36:a5:76:9d:30:de:
                    5c:db:72:10:bb:da:d6:c2:d9:1f:8a:7e:50:5e:d2:
                    0e:7c:b8:70:fb:4c:d1:75:07:a5:38:4b:72:90:94:
                    89:f9:47:cf:cd:fe:4b:dd:6e:7b:59:c7:66:d6:73:
                    a1:58:10:d2:76:fa:6a:40:55:37:53:37:b1:da:a2:
                    95:5d:b3:15:c6:a8:bf:da:84:e9:26:c2:29:dc:e9:
                    ad:9b:81:ed:ff:58:1d:d2:27:84:ed:df:c5:6a:c8:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.204.0/22
                IPv6:
                  2804:3da4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266544

    Signature Algorithm: sha256WithRSAEncryption
         ca:fe:0c:4f:32:e5:64:34:85:24:b9:34:f1:13:f3:71:89:0e:
         c8:cf:56:42:d5:65:a7:fc:61:fd:30:2e:dd:5e:d5:c1:75:75:
         8b:56:12:3b:92:49:e5:a4:ab:d5:e5:04:62:22:2c:6b:07:a2:
         52:40:f1:96:6d:91:11:c3:7e:91:44:24:69:e1:0f:e6:6b:38:
         31:8f:5b:81:25:43:79:d9:f1:a3:49:22:af:09:9c:e7:5e:ac:
         c2:71:18:67:4b:5d:2f:64:15:bd:bb:ac:ca:09:90:46:16:3e:
         59:6d:dd:ca:a6:a9:3a:da:37:40:9f:2f:a3:06:b6:68:8b:2e:
         b0:fa:3a:88:45:95:b2:5f:66:b7:df:ae:f2:b5:40:e2:d0:f8:
         9b:52:ac:0e:af:bd:e0:85:1d:57:98:4a:c3:87:15:fd:fa:86:
         53:98:42:93:47:8c:ef:0e:d8:59:cd:46:13:45:c0:e1:e6:b0:
         1c:ad:0f:40:69:bd:3b:fd:01:bf:ce:4a:27:2f:4c:8c:24:11:
         f8:db:c8:7c:db:d1:3c:8e:fc:f2:e7:20:79:4a:c6:6a:ff:d2:
         39:0f:fa:37:17:2c:a7:1e:8b:81:ca:67:72:c4:92:8c:c4:99:
         61:b9:74:76:13:cc:1d:d3:e5:6f:5b:9c:ae:75:48:a5:9c:99:
         fa:ee:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:32:02 2025 by rpki-client