Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CB6864F614E0086B095E1DC5A54474BAA5B3380.cer
File:                     7CB6864F614E0086B095E1DC5A54474BAA5B3380.cer (raw, json)
Hash identifier:          JTWElSPYf2lBmOblD+gK0Br7vinD6yA1rZzE513eTtA=
Subject key identifier:   7C:B6:86:4F:61:4E:00:86:B0:95:E1:DC:5A:54:47:4B:AA:5B:33:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0638AFC054708A919B078968578D725096601AE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/1/7CB6864F614E0086B095E1DC5A54474BAA5B3380.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 May 2024 13:58:35 +0000
Certificate not after:    Mon 19 May 2025 14:03:35 +0000
Subordinate resources:    AS: 271377
                          IP: 181.189.92.0/22
                          IP: 2804:7a88::/32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 03:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:38:af:c0:54:70:8a:91:9b:07:89:68:57:8d:72:50:96:60:1a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 13:58:35 2024 GMT
            Not After : May 19 14:03:35 2025 GMT
        Subject: CN=7CB6864F614E0086B095E1DC5A54474BAA5B3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:35:3b:17:ba:e5:ff:6a:28:1e:fd:d8:6a:
                    04:b9:c8:8b:04:a4:f3:2c:5a:4b:52:47:6e:8a:25:
                    3f:a0:90:73:c5:fc:70:5b:78:33:e6:15:99:97:8a:
                    91:6a:3a:15:f8:8b:0f:95:43:26:47:e9:88:2f:4d:
                    2d:63:4c:6c:75:b1:15:be:7f:f4:29:cc:96:6a:af:
                    01:f0:be:20:de:6a:33:fb:3c:f6:74:53:e8:6b:a4:
                    be:23:10:7b:3c:fe:e4:c0:b2:84:12:81:4f:e8:f5:
                    dc:38:9f:9d:4e:c4:00:36:a2:b7:e2:cb:6a:bb:08:
                    97:68:e4:cd:8b:ca:5e:94:53:c6:2a:72:18:a6:59:
                    c3:fd:7a:ca:24:2a:12:c4:87:da:76:71:a1:d9:70:
                    42:86:1b:cf:bb:84:78:47:16:9b:6a:4a:f6:62:39:
                    fd:34:5c:21:ec:c3:35:c6:32:cb:51:1d:0d:2a:e8:
                    bd:8d:ed:4e:e8:c6:1d:d3:e2:8e:7b:42:89:b6:38:
                    bb:4c:df:43:87:24:e3:3f:5e:24:7e:5a:13:de:91:
                    d5:2c:78:b3:11:18:31:d1:38:23:d5:e6:87:dc:c2:
                    01:78:78:ad:cd:14:05:31:0d:6c:23:a3:e7:c5:95:
                    52:98:e9:1e:64:33:ef:03:4e:2c:92:eb:b8:20:51:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:B6:86:4F:61:4E:00:86:B0:95:E1:DC:5A:54:47:4B:AA:5B:33:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/1/7CB6864F614E0086B095E1DC5A54474BAA5B3380.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.92.0/22
                IPv6:
                  2804:7a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271377

    Signature Algorithm: sha256WithRSAEncryption
         a9:ea:cc:b2:18:6c:12:ed:cc:1f:fc:94:70:42:39:f4:2c:b8:
         3d:a1:f0:25:1c:6b:36:01:28:2e:30:72:50:2e:f4:76:d3:66:
         d0:ed:1e:05:64:31:f3:93:48:21:1c:6c:b5:33:e0:ef:64:d4:
         e5:85:59:09:fa:0a:d8:33:2f:14:c1:3a:6a:5c:72:cb:52:00:
         c7:8a:8d:67:47:77:31:1f:04:6a:54:17:e6:5b:c0:09:d5:83:
         ca:4c:c1:51:2a:ed:a4:15:87:3a:33:8b:5b:61:72:d9:b2:24:
         ff:51:cd:50:2f:83:dd:45:a3:8d:7e:bb:7a:28:4a:3d:ec:eb:
         b6:36:d3:ab:7f:fb:ed:e7:29:9a:a3:92:44:67:f2:9c:81:13:
         d3:46:81:48:10:d6:d4:50:50:5c:e6:ea:a5:56:11:c1:8d:69:
         c0:40:d4:5b:6d:bc:61:58:34:ab:db:4c:16:25:90:b2:85:05:
         00:a6:f0:1a:6b:35:88:d9:ab:c1:cb:57:8d:fc:a8:49:1e:bc:
         a4:cc:47:22:8e:f6:ba:7a:99:4c:8b:cf:22:f5:84:9e:8a:ae:
         cb:e8:0a:df:c4:49:70:7f:41:d7:cb:ce:fa:4b:f5:3c:5d:cd:
         b4:9b:62:c9:41:92:cf:f3:24:e7:5b:77:ed:a5:15:4f:1e:c8:
         93:aa:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org