Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
File:                     659C0711C58D82CB928680EC1097A12AE8F8C66F.cer (raw, json)
Hash identifier:          R6mxjnU3K1/zW9GHCeSHo3VpIt79M8BatZhNj88dGAg=
Subject key identifier:   65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66951B38062827354AA0FDD6F3C63934920D7968
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Oct 2024 19:41:00 +0000
Certificate not after:    Tue 28 Oct 2025 19:46:00 +0000
Subordinate resources:    AS: 262569
                          IP: 45.167.60.0/22
                          IP: 143.137.60.0/22
                          IP: 170.82.72.0/22
                          IP: 177.73.112.0/21
                          IP: 2804:62c::/32

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 10:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:95:1b:38:06:28:27:35:4a:a0:fd:d6:f3:c6:39:34:92:0d:79:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 29 19:41:00 2024 GMT
            Not After : Oct 28 19:46:00 2025 GMT
        Subject: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:1f:1d:ed:ba:bf:ff:e7:78:ec:9d:9e:87:
                    11:d6:b0:c3:bd:75:bb:73:f1:d6:d6:be:00:37:93:
                    0a:5a:82:2f:53:8b:49:c3:52:9e:fe:ca:29:ef:9c:
                    a3:d5:ac:68:79:c7:03:23:f2:85:9b:f6:f8:12:a3:
                    6c:40:9b:91:f8:c2:98:18:93:e5:39:92:bc:1f:f7:
                    59:a5:a9:3f:95:27:25:9f:66:32:4d:ab:87:cb:cc:
                    e2:ab:3c:d7:fc:40:29:51:dd:8c:df:bd:3c:39:26:
                    82:c3:15:72:c6:41:27:79:73:88:9d:78:2e:03:98:
                    a1:25:14:03:de:03:12:45:94:00:fb:9b:2a:90:b1:
                    7c:75:eb:b3:b6:e4:6f:98:ec:13:fd:34:52:3d:f0:
                    85:70:35:86:6d:18:c3:5f:ba:27:de:72:57:50:12:
                    3c:7d:12:3e:4b:11:d0:fe:cf:f3:ad:6e:aa:50:c2:
                    22:e6:42:7b:39:39:26:10:ff:08:45:7f:8f:34:00:
                    d2:99:b3:09:e1:b1:52:6d:40:ba:8c:31:a2:e6:31:
                    cb:cd:50:ad:a4:53:60:82:50:91:d4:ee:7b:cb:18:
                    fd:66:8e:6e:da:34:cd:1e:76:66:fe:a7:3d:0e:d4:
                    8f:30:22:99:31:bc:3e:91:9e:0d:9c:9b:e2:01:e5:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/22
                  143.137.60.0/22
                  170.82.72.0/22
                  177.73.112.0/21
                IPv6:
                  2804:62c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262569

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:ef:57:ff:a0:0e:c8:33:97:56:58:a5:ac:e4:1a:00:7a:
         19:48:7b:1e:8c:e0:9f:d5:fd:32:f9:5f:0d:3a:d1:a3:12:71:
         9d:a8:e4:f5:b0:a1:82:a1:b4:72:1c:d6:49:e0:a7:b1:a2:57:
         d1:99:64:b3:92:4a:a8:59:7a:43:bd:74:59:44:92:1e:d7:2b:
         9f:60:fa:5e:f6:3c:f5:84:92:c3:ae:4e:5a:76:33:ab:a0:87:
         bd:76:14:9e:fc:5f:58:07:5d:04:72:5a:9e:e6:29:12:c5:86:
         40:67:93:9a:0d:c7:fe:e4:17:3c:d7:52:12:9d:88:fb:a2:9c:
         5d:37:1a:ae:1a:02:a1:17:d0:d5:22:9f:6b:f6:18:89:c8:16:
         21:9f:26:0e:87:fc:56:5b:e5:8b:40:11:47:2f:4c:6c:f6:c1:
         e3:49:fc:4e:77:ad:46:a5:65:db:f2:1d:66:6a:17:e8:c4:57:
         80:e7:7b:9e:e4:df:a1:8f:7f:c4:03:07:38:bd:3a:14:16:bc:
         fb:ff:e3:a1:7e:d3:ca:f5:19:83:ba:b9:73:d4:bc:58:00:b7:
         23:7f:7e:de:2b:9c:50:2c:7b:d3:50:75:76:3d:d2:74:1b:f7:
         a0:3b:be:3a:47:20:f1:13:ef:9c:00:61:d5:4f:97:60:51:1d:
         19:b2:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:23 2024 by rpki-client on console-fra.rpki-client.org