Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69FA799381D7B8E70A952654BC9D6CC39F8A58E1.cer
File:                     69FA799381D7B8E70A952654BC9D6CC39F8A58E1.cer (raw, json)
Hash identifier:          UQVkB/ZoD2ccaH71UXB7etz4NvTSVtzLkHhhn9QVaZg=
Subject key identifier:   69:FA:79:93:81:D7:B8:E7:0A:95:26:54:BC:9D:6C:C3:9F:8A:58:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A6217862DD58E412E4D7189CB039D5C4AB87552
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/1/69FA799381D7B8E70A952654BC9D6CC39F8A58E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 May 2024 13:31:21 +0000
Certificate not after:    Thu 01 May 2025 13:36:21 +0000
Subordinate resources:    AS: 21574
                          IP: 168.227.200.0/22
                          IP: 186.249.224.0/20
                          IP: 187.1.176.0/20
                          IP: 200.169.0.0/20
                          IP: 2804:23ec::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 18:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:62:17:86:2d:d5:8e:41:2e:4d:71:89:cb:03:9d:5c:4a:b8:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 13:31:21 2024 GMT
            Not After : May  1 13:36:21 2025 GMT
        Subject: CN=69FA799381D7B8E70A952654BC9D6CC39F8A58E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:a9:8c:76:82:c8:99:c8:4b:5c:fe:24:77:
                    41:ad:aa:bb:d8:16:41:1d:a4:f5:3d:8d:9d:9d:96:
                    cf:fc:e1:b5:e4:da:2c:89:ea:99:1d:00:a7:c1:37:
                    99:87:c4:ac:6f:d0:df:61:c8:41:6e:11:e0:24:d0:
                    b6:b5:4a:44:74:af:fc:da:84:0f:2c:4f:4f:bf:c3:
                    54:53:1b:59:48:ee:e8:0f:cd:e0:00:6d:b1:42:57:
                    3c:e8:dc:01:72:ca:5d:55:ce:98:88:d2:a0:70:ec:
                    9d:ca:af:5e:a9:47:a4:60:72:98:0f:9d:e0:37:ad:
                    45:fb:af:90:f4:87:4b:5c:21:11:07:ee:2c:b2:87:
                    8f:ee:34:2b:2c:25:a9:5d:7e:81:62:3e:ac:9e:56:
                    55:16:cf:11:4d:ef:3c:4d:8c:c3:c9:e8:75:0e:48:
                    30:5d:08:f3:15:96:89:60:d9:34:80:23:7c:e8:db:
                    72:1b:2f:6a:be:f6:33:4a:b4:d3:c4:2e:40:02:91:
                    04:a3:0a:d1:07:76:c4:df:de:80:8a:41:00:6a:b3:
                    ea:87:de:51:54:b4:81:70:a1:f2:c8:a8:2d:2f:b7:
                    a3:68:ca:90:07:49:6a:6f:c9:50:39:33:e6:45:4e:
                    88:64:65:aa:fa:65:4b:0e:7c:b4:36:8b:7d:2f:82:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:FA:79:93:81:D7:B8:E7:0A:95:26:54:BC:9D:6C:C3:9F:8A:58:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/1/69FA799381D7B8E70A952654BC9D6CC39F8A58E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.200.0/22
                  186.249.224.0/20
                  187.1.176.0/20
                  200.169.0.0/20
                IPv6:
                  2804:23ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21574

    Signature Algorithm: sha256WithRSAEncryption
         15:cd:07:a2:dd:92:8a:d7:8f:e7:0d:e8:ba:0b:37:4e:de:46:
         74:c2:c9:62:46:d4:33:3d:13:c1:70:5a:a4:5e:d9:79:ef:c5:
         ad:ba:70:1c:f7:8d:ad:96:f8:3a:dc:34:15:04:ac:ca:14:19:
         cc:0d:64:81:2d:c0:ed:bd:a5:76:13:a3:94:35:06:fc:16:b5:
         13:80:6f:f1:57:ef:d2:e4:dc:9c:3a:6b:68:35:d3:72:20:ef:
         f4:60:fc:c6:44:74:ac:15:38:7c:47:85:32:7b:56:9c:f8:c1:
         f5:43:62:63:15:13:9c:94:11:d1:25:25:17:6a:e5:f2:85:8d:
         39:ae:03:7c:eb:d7:28:c8:cf:76:10:66:af:60:77:44:58:e3:
         3a:e5:60:ef:57:42:35:b6:f8:f2:75:d9:dc:22:df:ad:cc:74:
         55:fb:ab:4a:20:3e:06:00:33:af:00:4e:c7:1a:65:a9:75:df:
         9f:30:e5:6c:ac:db:44:dc:ad:e3:3b:aa:66:cd:60:bc:91:8d:
         f8:2a:ad:08:82:8a:e8:2d:2f:5e:cf:b4:1c:1c:2d:ec:5e:0a:
         cb:59:aa:dc:73:c2:82:2b:9b:33:72:c8:c7:16:dc:5a:23:70:
         2f:12:80:99:d7:f7:2c:0c:df:57:8c:8b:9a:31:26:ef:ca:86:
         3a:0a:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org