Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
File:                     7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer (raw, json)
Hash identifier:          dmUwUJrs9LL1lMUf5Y3ao1jX+0n68KiEdjALpVNxzn0=
Subject key identifier:   7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E1A2D7C645E9903B9CBD0E67DF061D55F26A3C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 17:10:32 +0000
Certificate not after:    Fri 08 Aug 2025 17:15:32 +0000
Subordinate resources:    AS: 28359
                          AS: 270814
                          IP: 45.6.32.0/22
                          IP: 45.177.112.0/22
                          IP: 138.0.224.0/22
                          IP: 138.99.88.0/22
                          IP: 168.90.228.0/22
                          IP: 170.247.124.0/22
                          IP: 177.20.160.0/20
                          IP: 177.53.0.0/20
                          IP: 177.70.192.0/20
                          IP: 177.128.144.0/20
                          IP: 177.185.144.0/21
                          IP: 177.223.96.0/20
                          IP: 179.97.192.0/19
                          IP: 186.235.32.0/20
                          IP: 187.94.128.0/19
                          IP: 187.121.160.0/20
                          IP: 189.45.224.0/20
                          IP: 189.76.176.0 -- 189.76.207.255
                          IP: 190.123.8.0/23
                          IP: 191.52.216.0/22
                          IP: 2804:f70::/32
                          IP: 2804:15fc::/32
                          IP: 2804:71d4::/32

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 23:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1a:2d:7c:64:5e:99:03:b9:cb:d0:e6:7d:f0:61:d5:5f:26:a3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 17:10:32 2024 GMT
            Not After : Aug  8 17:15:32 2025 GMT
        Subject: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:36:51:f1:c4:71:f7:57:e0:1b:a6:ac:1c:
                    0e:92:61:77:43:37:c4:55:cb:d4:42:90:88:ed:48:
                    3b:f3:b1:93:1f:cc:28:28:10:ac:62:e4:18:e8:a7:
                    6b:4a:90:4a:8f:76:94:1e:23:99:6d:ce:97:36:14:
                    42:0f:0c:25:a2:8d:c9:96:f2:45:a7:70:de:9b:83:
                    32:8e:f2:eb:7c:0c:5b:a5:1f:d4:89:e5:7e:5c:1c:
                    f4:78:73:c7:09:ab:6b:aa:26:45:72:20:f5:4d:64:
                    55:65:0a:4f:a6:bd:62:ec:06:0a:dd:10:c3:9a:39:
                    04:88:b5:1a:9a:be:95:1c:6b:39:11:cc:6e:a4:1d:
                    d3:8c:3e:12:68:f2:e7:a7:5e:cd:12:a4:4a:88:f6:
                    a7:32:ca:70:52:1f:08:49:99:f7:bd:d9:2e:c1:51:
                    76:c9:c6:c7:17:07:69:02:38:68:09:75:be:d4:35:
                    ff:c3:c2:4d:86:18:04:2f:1a:9a:17:7f:50:ab:be:
                    68:35:29:57:b3:11:9f:49:0c:0c:85:4e:18:6a:20:
                    97:ee:3c:6e:a3:70:92:62:43:55:c7:6b:91:49:1c:
                    d2:1c:b5:d6:01:1a:04:38:a7:86:71:bb:36:0e:66:
                    4e:8b:1d:40:ef:33:08:b7:69:6b:c9:72:ff:3e:5e:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.32.0/22
                  45.177.112.0/22
                  138.0.224.0/22
                  138.99.88.0/22
                  168.90.228.0/22
                  170.247.124.0/22
                  177.20.160.0/20
                  177.53.0.0/20
                  177.70.192.0/20
                  177.128.144.0/20
                  177.185.144.0/21
                  177.223.96.0/20
                  179.97.192.0/19
                  186.235.32.0/20
                  187.94.128.0/19
                  187.121.160.0/20
                  189.45.224.0/20
                  189.76.176.0-189.76.207.255
                  190.123.8.0/23
                  191.52.216.0/22
                IPv6:
                  2804:f70::/32
                  2804:15fc::/32
                  2804:71d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28359
                  270814

    Signature Algorithm: sha256WithRSAEncryption
         d3:f5:20:a2:55:6f:20:13:89:46:72:40:ce:8c:69:92:5f:61:
         de:22:43:9f:5d:00:96:07:ab:4f:41:3a:50:e5:ba:36:4d:22:
         9f:3e:8e:fb:4c:16:95:eb:89:54:ee:c9:7d:8d:92:92:de:c8:
         93:01:a8:a9:ea:18:24:93:52:c5:f8:02:6e:e3:1f:ad:2a:2e:
         f9:9a:e8:84:a9:30:ee:67:20:dc:fd:26:31:d7:a9:3c:b1:e6:
         05:f7:cc:a6:fa:0b:18:d4:dd:cb:2a:03:05:5e:1f:e0:59:af:
         5c:26:94:09:9d:8a:4b:d5:63:79:71:23:19:2a:81:8b:93:b9:
         f0:3f:a0:98:fb:09:6f:cd:9b:d1:10:49:13:33:da:a0:28:f5:
         22:ee:21:7e:d4:70:7d:49:04:a9:8a:97:b9:80:2d:2b:93:bc:
         23:70:53:95:8e:f1:57:35:92:d0:47:4c:d0:b5:39:88:15:5c:
         2b:7d:07:d9:78:a3:b3:e3:58:77:3c:3d:43:7c:01:c1:20:28:
         61:eb:14:6d:4d:eb:0e:5a:20:76:ff:d2:3c:0c:ac:3b:45:e5:
         d8:a2:b8:59:52:ae:a6:0e:ce:c3:13:cc:89:6b:0f:9a:93:47:
         de:1a:69:20:4c:4f:a5:96:6f:b2:8b:52:af:06:6e:84:5b:0f:
         32:cd:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 02:16:21 2024 by rpki-client on console-fra.rpki-client.org