Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer
File:                     69BAEDBA4E49257B951660C842A16EF5C736B492.cer (raw, json)
Hash identifier:          5gqeezbT+5Psj2s8RCLlB7sm28ErwuJSyrusYNNZKhc=
Subject key identifier:   69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7886D2BB3F353DD46132741F5658A4A6BDF3172B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/69BAEDBA4E49257B951660C842A16EF5C736B492.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 12:45:10 +0000
Certificate not after:    Mon 21 Jul 2025 12:50:10 +0000
Subordinate resources:    AS: 270930
                          IP: 138.94.40.0/22
                          IP: 2804:73ac::/32

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 16:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:86:d2:bb:3f:35:3d:d4:61:32:74:1f:56:58:a4:a6:bd:f3:17:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 12:45:10 2024 GMT
            Not After : Jul 21 12:50:10 2025 GMT
        Subject: CN=69BAEDBA4E49257B951660C842A16EF5C736B492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:5f:32:fa:9a:8a:5d:d4:c8:84:6e:c4:78:
                    5a:7d:df:38:6b:1c:c6:d4:04:d9:9d:e8:76:0d:78:
                    c0:4f:8e:ce:50:3e:77:7e:c2:67:e3:f4:ae:f2:cc:
                    82:68:0d:3a:12:93:f6:89:3b:7d:f8:e7:a6:58:1a:
                    73:55:4c:57:b1:27:52:72:b9:2e:09:9a:57:47:30:
                    08:4a:ed:db:51:27:2d:c9:25:f6:c5:5f:2b:eb:d4:
                    2a:35:48:04:f8:fb:57:bb:37:f0:f6:1d:f7:e1:ab:
                    ba:d6:e9:24:5c:31:80:a4:81:31:8d:6a:1d:55:84:
                    6d:59:58:7c:53:99:76:dd:aa:96:89:7f:00:3b:6c:
                    fb:7d:80:76:ea:66:c7:99:34:0f:9a:96:af:91:80:
                    3f:09:62:73:5f:cb:ff:08:9d:d4:05:5e:b3:24:d6:
                    13:28:f9:f0:c4:13:53:b3:fa:27:81:d2:58:4c:7b:
                    a3:9a:f5:e6:3d:9c:b6:a9:cc:db:84:34:3a:5a:6d:
                    2e:05:9e:74:6b:9e:62:88:68:d5:60:71:2c:6a:af:
                    9a:19:6a:fd:3f:b4:fc:07:e0:0e:ef:c0:a6:56:7d:
                    6c:72:2c:87:67:5c:e2:6f:a4:19:ee:ea:08:4b:dd:
                    94:c1:19:05:66:62:44:45:af:58:6f:f3:85:b3:db:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/69BAEDBA4E49257B951660C842A16EF5C736B492.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.40.0/22
                IPv6:
                  2804:73ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270930

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:fd:46:da:11:ee:4d:bb:2f:12:0b:7a:bf:93:0f:e4:e7:
         8c:71:aa:da:c4:72:f2:9e:00:22:0d:0c:89:99:86:24:1a:21:
         c3:a5:6e:4d:46:50:d2:46:6b:b3:fd:a3:98:39:d6:47:0c:2a:
         79:b9:9d:6a:cd:1e:14:83:99:e1:b4:07:2e:98:5f:89:9f:0a:
         a0:ea:91:71:cd:74:2e:9a:97:80:89:64:7f:b1:84:21:9e:fe:
         3f:7b:58:23:54:a6:75:d5:79:03:af:06:f1:80:b4:8a:ba:32:
         73:50:e8:7d:a9:80:cf:3e:22:42:c6:83:3f:e9:03:b5:0d:f5:
         18:9e:a2:ff:eb:0d:6c:c9:d1:b6:69:9a:b6:bb:0a:13:97:16:
         22:88:ca:8b:c6:d7:0d:15:ef:f2:f2:54:90:55:95:d8:7e:15:
         85:6b:5a:52:e7:66:25:2d:e6:9c:c5:70:5c:17:1d:ef:04:0a:
         ac:9f:8b:c4:a0:af:12:45:f4:77:ab:20:6d:77:32:37:2c:1a:
         f3:37:9f:b0:fa:6d:d1:fe:9a:a0:71:82:a0:9d:d2:ba:ea:7c:
         20:c5:33:9c:d9:22:19:37:cf:15:52:38:89:40:23:9f:27:7e:
         93:2f:69:90:a9:45:8a:9d:0d:7f:94:86:e8:67:e6:a0:05:14:
         68:26:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:41:06 2024 by rpki-client on console-fra.rpki-client.org