Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.cer
File:                     7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.cer (raw, json)
Hash identifier:          9cna3Df7niFn7uDt8MZPenqZtnRYsqqaedg/vCihfe0=
Subject key identifier:   7D:A7:D5:78:33:C3:3D:3F:4C:FF:51:43:76:77:3A:5F:E2:7E:4E:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       693369429ED6509C0B92C61BB96889B258F66BDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:58:24 +0000
Certificate not after:    Thu 03 Apr 2025 16:03:24 +0000
Subordinate resources:    AS: 262657
                          IP: 200.7.0.0/22
                          IP: 2804:1818::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 23:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:33:69:42:9e:d6:50:9c:0b:92:c6:1b:b9:68:89:b2:58:f6:6b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:58:24 2024 GMT
            Not After : Apr  3 16:03:24 2025 GMT
        Subject: CN=7DA7D57833C33D3F4CFF514376773A5FE27E4E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:60:03:ea:7c:37:fc:b9:9e:f4:0c:72:d0:
                    ea:2a:a1:e8:63:1c:a8:46:65:ed:c1:87:ba:8c:c1:
                    d0:b9:84:26:8d:91:a4:63:fa:1b:26:87:10:4b:23:
                    ed:f5:f6:8a:84:58:0b:d9:62:cd:e0:8c:fb:23:9b:
                    d4:c3:87:e2:72:fc:8d:fd:bc:10:e5:e6:f3:d7:01:
                    98:ce:1d:40:58:44:86:9b:f1:b5:85:43:65:68:76:
                    49:71:d6:af:ae:0d:05:90:1f:ae:53:c7:ba:f0:d1:
                    4d:c8:b6:d0:1f:3c:f6:76:63:3c:db:a8:df:2c:cb:
                    b7:72:ea:09:7e:a9:3c:3e:12:b3:c7:34:b5:ea:ac:
                    16:2d:bc:a5:ce:4b:e9:15:c5:02:66:cf:03:19:54:
                    64:9e:c7:eb:60:3b:14:af:e7:39:d8:06:ed:91:df:
                    3a:9b:cc:c2:19:79:15:27:06:9e:63:61:9b:d6:f8:
                    4e:8b:fe:56:a3:dd:11:e8:1f:2a:5b:5c:36:4d:c0:
                    eb:d3:96:34:be:74:09:b0:07:a7:2f:fc:d5:cb:53:
                    31:94:e2:d2:e8:b4:72:1a:dd:c3:2e:74:90:11:c6:
                    5c:16:cf:9f:ad:65:5f:70:15:f8:f9:fe:34:4d:b6:
                    b9:0d:9d:67:d4:9b:c5:94:e1:4e:e1:43:dc:2f:88:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:A7:D5:78:33:C3:3D:3F:4C:FF:51:43:76:77:3A:5F:E2:7E:4E:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.0.0/22
                IPv6:
                  2804:1818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262657

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:ab:26:5d:89:c0:f5:cd:5b:ba:6e:8f:0c:e8:f0:3d:71:
         0a:19:37:59:d8:bb:0e:c7:01:d5:c0:17:28:a6:f0:ca:0d:5b:
         db:f7:f2:1a:9c:18:f1:47:a6:5f:a7:bc:d6:bb:1a:63:00:53:
         a8:18:45:8c:56:e6:53:9a:1a:2b:86:e0:1a:08:13:04:7d:e4:
         0e:36:d7:7e:a8:3e:98:3c:e5:88:6b:8b:15:91:8f:4c:87:e1:
         9f:8c:c2:0f:69:59:83:c6:75:1e:a8:0f:ce:af:02:60:ab:26:
         d3:eb:63:c1:fe:63:c7:1c:7e:80:d8:1e:37:d6:75:ce:4e:27:
         2c:ad:2e:5f:a9:04:c4:db:28:a8:1f:3d:91:4a:ec:93:9f:e3:
         74:09:11:fe:db:d3:d6:ef:e4:8e:d5:31:de:75:4c:3f:65:d9:
         c1:f0:5e:29:b2:a6:48:4d:1b:68:c7:cb:67:d9:46:b3:1c:04:
         ad:d8:18:ec:cb:db:51:0e:7e:99:8f:4c:31:5e:b2:ae:41:9c:
         06:f3:4a:0b:48:67:0a:58:5a:91:ba:32:70:b1:4e:e5:02:c4:
         eb:e7:37:a6:b8:a1:8f:3a:81:92:84:5b:d5:1d:91:ac:5e:05:
         fb:d6:28:65:b5:30:20:43:01:bb:3a:73:21:00:36:36:9d:cd:
         46:e1:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org