Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer
File:                     7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer (raw, json)
Hash identifier:          MMTn7+nATEvn0YuxuyuRhS3yuxTNJmynYXdgXsc6yeQ=
Subject key identifier:   7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34446EED42F0A50A14DDE1A31B3A0A742E7B79E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Aug 2024 13:54:45 +0000
Certificate not after:    Tue 19 Aug 2025 13:59:45 +0000
Subordinate resources:    AS: 270608
                          IP: 186.219.232.0/22
                          IP: 2804:6e9c::/32

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 10:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:44:6e:ed:42:f0:a5:0a:14:dd:e1:a3:1b:3a:0a:74:2e:7b:79:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 20 13:54:45 2024 GMT
            Not After : Aug 19 13:59:45 2025 GMT
        Subject: CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:44:8a:de:8e:9c:8a:ac:c9:e3:b4:6b:27:
                    62:cd:58:70:a5:27:7e:66:11:d6:bd:df:e9:96:e7:
                    ca:68:e2:50:e7:c1:a4:06:36:b8:37:06:06:f9:38:
                    e6:b0:4f:80:1f:38:d9:1d:42:69:e5:ec:0e:dd:b1:
                    97:7e:ff:45:84:47:be:ec:24:33:31:d8:ac:ee:63:
                    cd:c0:48:0b:ac:ec:fa:5d:c1:8c:fc:49:62:71:e7:
                    f9:dc:d8:10:83:20:89:b4:fa:33:ce:f3:85:c1:41:
                    4d:d1:87:19:08:c8:82:42:57:7c:50:ca:7f:97:65:
                    9a:34:08:81:c9:6c:f5:a5:a0:51:74:91:58:c6:1e:
                    af:a9:fa:9a:36:f3:e3:aa:d9:de:b3:ff:22:db:76:
                    43:9b:ec:e8:9d:49:ce:af:fe:79:3c:ae:9d:4c:c4:
                    9c:47:91:6d:d0:d2:86:d0:53:ff:df:c9:b9:d4:95:
                    d2:c6:4e:9a:1c:1c:42:37:bd:91:3f:68:f1:ad:97:
                    62:e3:90:47:22:9a:68:cf:2c:9b:f7:03:24:c0:6b:
                    56:7e:49:79:58:ec:79:15:42:1e:04:e1:3b:d0:da:
                    fe:50:06:81:e5:66:19:3d:36:67:96:2a:bc:b0:1c:
                    73:c9:e4:ef:86:b7:75:1d:4a:ac:97:53:c7:65:8c:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.232.0/22
                IPv6:
                  2804:6e9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270608

    Signature Algorithm: sha256WithRSAEncryption
         42:11:14:bb:87:53:3b:78:df:07:e5:2f:f7:f6:7c:a7:80:f0:
         c7:6d:df:6b:c9:46:a4:95:3a:bb:33:08:bf:58:30:9d:9a:a2:
         e5:9c:4f:f4:b2:83:a3:32:36:d1:13:a1:e9:82:7f:8a:30:b5:
         fa:b6:97:30:00:5d:8a:ac:3f:4d:f3:20:41:cf:50:42:24:7c:
         d4:5e:ac:0e:1f:73:46:f6:75:24:45:e7:7e:46:3c:9d:f5:cd:
         1f:c8:ae:3d:07:44:49:ce:e6:c8:31:a7:f9:7e:63:76:61:e4:
         4d:ba:61:55:49:92:d3:f2:ca:38:31:17:a2:23:97:7e:c5:48:
         8f:4a:fa:88:f0:07:85:72:ef:37:48:28:3e:7b:5c:03:9e:eb:
         50:ac:8d:7c:44:b8:f2:82:11:c5:d3:0d:15:a1:5c:10:4b:64:
         df:24:b3:55:36:97:35:2a:38:e8:10:9d:db:2e:9a:58:9b:60:
         4d:e3:5a:bb:ee:7b:d6:13:5d:c2:24:30:71:3e:ad:1c:1e:b2:
         1d:00:23:0f:cb:51:c5:a6:9e:4b:ee:56:46:6d:f1:84:da:c3:
         ae:a6:93:ad:94:9a:b3:84:ed:c6:d4:e3:f1:ce:ec:e1:d9:b0:
         6c:3c:6c:3b:bb:d9:ff:31:b7:4c:9f:ed:f3:02:30:26:b0:b8:
         3e:a5:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 13:42:22 2024 by rpki-client on console-fra.rpki-client.org