Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/65A0E0483F8FEB1975830B245B8AE1088D76B211.cer
File:                     65A0E0483F8FEB1975830B245B8AE1088D76B211.cer (raw, json)
Hash identifier:          Z/4URouZFLka06E8VcrHQXzS12ivg5khaCqFI+KMzBE=
Subject key identifier:   65:A0:E0:48:3F:8F:EB:19:75:83:0B:24:5B:8A:E1:08:8D:76:B2:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7789C4B8AB38DA6C967899DFF41D9B1775B78F02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/65A0E0483F8FEB1975830B245B8AE1088D76B211.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 18:51:29 +0000
Certificate not after:    Wed 03 Dec 2025 18:56:29 +0000
Subordinate resources:    AS: 271208
                          IP: 179.49.136.0/22
                          IP: 2804:77ec::/32
Validation:               Failed, certificate revoked on Sat 07 Dec 2024 21:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:89:c4:b8:ab:38:da:6c:96:78:99:df:f4:1d:9b:17:75:b7:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 18:51:29 2024 GMT
            Not After : Dec  3 18:56:29 2025 GMT
        Subject: CN=65A0E0483F8FEB1975830B245B8AE1088D76B211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:29:62:1c:fa:53:19:38:fc:b2:2e:46:dc:
                    8e:a1:94:bf:58:8a:30:9c:5e:84:45:95:76:ec:db:
                    b5:cd:21:7e:ac:35:c5:d1:ea:b0:ad:74:ff:1c:84:
                    23:91:a2:46:cc:4f:b8:4f:ba:3a:c1:bf:e4:96:96:
                    80:d4:a3:38:05:52:ac:79:1c:08:bd:56:66:13:d6:
                    ac:3d:a5:6c:e3:c1:0c:c3:ec:d4:07:85:13:8a:37:
                    5b:42:45:78:13:15:2b:d9:94:dd:b8:b9:7d:4f:33:
                    4f:ea:29:6f:f3:c6:ca:9c:64:65:21:8b:a3:26:b8:
                    17:81:16:31:95:cb:a2:a0:6a:92:86:04:3c:ed:68:
                    52:16:80:50:93:d1:e9:f0:5e:b3:36:c6:61:6d:bc:
                    44:59:c6:c1:36:b3:10:e1:48:3c:fe:f7:33:d0:d1:
                    ee:69:8a:85:85:41:33:2f:72:a6:9b:2c:91:67:44:
                    ca:57:7b:ab:6c:ab:cf:05:70:6b:05:a8:45:d7:f9:
                    ea:91:92:c4:9c:08:fc:59:5b:8b:fa:f8:9e:65:28:
                    82:64:61:8a:60:7c:b3:c1:cb:c7:e5:f5:b8:bd:d6:
                    d2:4a:61:5e:ca:b2:43:df:72:c8:b7:84:89:b7:42:
                    56:a7:4d:63:59:85:0c:33:48:75:b4:6c:cb:56:0f:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:A0:E0:48:3F:8F:EB:19:75:83:0B:24:5B:8A:E1:08:8D:76:B2:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/65A0E0483F8FEB1975830B245B8AE1088D76B211.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.136.0/22
                IPv6:
                  2804:77ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271208

    Signature Algorithm: sha256WithRSAEncryption
         a2:84:fd:56:c8:9b:13:dc:d6:d8:94:da:4f:5d:8f:2d:42:02:
         91:4c:de:73:55:a0:1c:65:70:9a:e7:0b:69:84:2c:16:c7:8b:
         9f:29:04:41:4b:27:34:cd:92:f4:bc:a7:64:fb:75:28:d2:a2:
         ec:a5:e1:5e:ea:c5:d0:45:09:fc:b2:4c:40:63:c3:b9:9e:85:
         6a:76:2d:71:5f:7a:2f:7e:f3:8f:2f:1b:f7:2f:16:07:da:cd:
         d0:56:76:70:bb:ff:62:02:17:e1:25:f7:87:98:8d:f2:f5:2e:
         86:02:31:bf:30:10:eb:fb:03:ab:87:85:5e:6e:fe:f5:05:32:
         95:bc:72:69:a6:85:23:ef:b3:ae:c8:8c:ba:b3:e5:3f:7d:91:
         aa:fe:c1:c0:a6:d0:36:cf:99:69:be:13:4e:79:42:38:a4:6c:
         36:bf:97:ce:33:02:f7:be:69:a1:6a:e0:75:3f:d5:1b:ed:8a:
         ab:3c:93:3d:5f:2a:87:9e:b9:d0:0b:1f:df:30:01:e2:06:eb:
         a6:d1:d2:9f:30:fb:e5:ef:6f:ba:7d:4d:75:1b:88:18:3f:ff:
         84:78:38:6a:00:e1:a7:73:2b:ce:52:67:96:4a:63:e1:1e:a8:
         e8:48:0a:d1:cb:ea:5b:71:e5:32:e2:f3:75:0c:04:c1:89:d6:
         d4:72:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:03 2025 by rpki-client