Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer
File:                     69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer (raw, json)
Hash identifier:          rnc9HG1eYV1UOhX6fiqhzXrB5nWctD6pBK2+TwC834k=
Subject key identifier:   69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       419F1BE476DC2714C464C49F84A4E579FDA89979
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 14:13:53 +0000
Certificate not after:    Fri 18 Apr 2025 14:18:53 +0000
Subordinate resources:    AS: 263444
                          IP: 138.36.164.0/22
                          IP: 177.91.160.0/22
                          IP: 2804:11dc::/32

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 23:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9f:1b:e4:76:dc:27:14:c4:64:c4:9f:84:a4:e5:79:fd:a8:99:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 19 14:13:53 2024 GMT
            Not After : Apr 18 14:18:53 2025 GMT
        Subject: CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:33:a4:dd:94:bb:f9:61:ff:40:60:61:14:17:
                    6d:63:af:68:4a:6f:8e:eb:8b:0b:f3:08:0c:0d:82:
                    97:43:e1:28:66:56:18:45:20:eb:c0:d9:33:f8:50:
                    90:f5:64:63:dc:26:c2:c6:59:18:26:37:15:16:1d:
                    14:c6:2e:3e:84:f6:ba:ca:97:cc:02:f8:43:fc:71:
                    da:b0:f2:f3:99:35:8f:7c:bd:f4:e7:61:fc:b8:45:
                    6d:3b:49:63:f5:5c:f7:82:23:15:c0:84:62:3e:69:
                    3d:d6:b4:e3:0d:12:07:bd:84:7d:e4:06:9a:4d:c5:
                    4d:c7:f3:22:90:ce:9a:1e:54:4a:58:0a:4f:f6:d4:
                    d0:5e:10:4f:d2:e6:80:ac:06:20:9c:7a:b1:a6:0c:
                    11:80:d9:0b:be:34:57:9c:6e:cb:ed:ca:79:2f:a4:
                    43:f0:1e:bd:5a:d1:47:17:0e:ef:b0:1d:82:42:58:
                    c6:5b:df:57:10:aa:ed:5d:b3:2d:4e:83:73:22:38:
                    ec:5f:06:ff:0f:63:bb:bf:f1:3c:c2:88:0f:9d:48:
                    54:48:6c:e7:24:48:4d:8c:49:06:cf:85:18:45:92:
                    40:ed:ec:59:91:1d:0e:a0:25:da:bb:e2:3e:d0:4b:
                    3a:32:85:bc:0b:39:c0:a9:46:05:65:14:c8:f4:02:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/22
                  177.91.160.0/22
                IPv6:
                  2804:11dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263444

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:b0:c7:b1:35:a6:85:e5:55:6f:79:7c:51:2e:32:d0:75:
         2d:39:d9:25:a0:32:6d:71:0b:08:7a:90:1a:df:bc:47:0e:48:
         86:09:c0:3c:1e:fc:eb:ed:bb:9f:8d:3d:c8:0d:26:02:4c:28:
         25:4c:cf:6b:df:29:00:5f:77:94:ab:96:59:42:88:ec:1b:ec:
         e8:a0:22:1e:31:bf:bd:d8:71:46:da:4a:11:9e:3b:15:65:1b:
         ef:4f:81:50:83:c4:9b:38:95:46:20:33:cb:1f:08:0d:9e:0e:
         ca:7a:5d:00:92:06:c0:a9:96:84:58:24:bf:0a:14:25:e0:93:
         87:56:5f:33:91:1f:08:99:42:c6:fd:4a:83:9f:fc:fe:6e:5f:
         51:18:bd:62:93:f1:a1:b4:d8:98:70:0d:c2:e2:e2:ba:83:a1:
         14:64:1a:a0:ac:ea:f5:6d:5c:17:93:f7:a0:5d:a1:28:cc:1d:
         13:0c:e3:3a:77:77:e6:f7:01:af:62:38:28:01:40:aa:e0:d2:
         db:d4:60:f2:16:9b:ba:2d:89:d1:44:6f:21:e3:2b:38:63:b9:
         0c:25:5d:51:24:c0:67:03:5c:30:49:4b:04:fc:f3:a4:d6:23:
         5d:88:c0:d9:72:6b:d1:fe:2f:11:08:f7:eb:99:81:5a:3f:ce:
         b8:5e:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 00:26:09 2024 by rpki-client on console-ams.rpki-client.org