Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DABE8FD69A0E70AB82099347A2DADA545901DEC.cer
File:                     7DABE8FD69A0E70AB82099347A2DADA545901DEC.cer (raw, json)
Hash identifier:          JVi2gnjvzmQj92KNjctzbSdPCiqtuQq5zSKJZz5O0J4=
Subject key identifier:   7D:AB:E8:FD:69:A0:E7:0A:B8:20:99:34:7A:2D:AD:A5:45:90:1D:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E61480895835B1CBFC3B9C3FDF9DE49FAF733E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/7DABE8FD69A0E70AB82099347A2DADA545901DEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 14:45:54 +0000
Certificate not after:    Mon 08 Sep 2025 14:50:54 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:48:08:95:83:5b:1c:bf:c3:b9:c3:fd:f9:de:49:fa:f7:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 14:45:54 2024 GMT
            Not After : Sep  8 14:50:54 2025 GMT
        Subject: CN=7DABE8FD69A0E70AB82099347A2DADA545901DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:bb:5c:eb:73:0c:d6:fb:20:26:0d:0e:8d:
                    11:af:e7:1b:8c:2f:2e:7e:dd:65:0f:9e:c3:f8:16:
                    1c:dc:dd:2c:09:a1:61:61:36:08:c0:eb:46:a3:68:
                    67:4c:e8:2a:e8:3c:4c:23:99:9d:54:78:ef:38:db:
                    17:8d:fd:4d:ca:83:af:a5:97:dd:99:45:93:21:d2:
                    ce:ce:35:af:e1:3f:10:6f:3f:c9:84:f5:b1:cc:a6:
                    f2:31:ca:6d:38:fb:b3:81:c0:0c:9f:c0:2e:1a:15:
                    6c:eb:8b:90:43:d6:e1:ac:26:69:ac:d0:54:7d:df:
                    31:9b:fb:43:e9:d4:b6:a5:d5:18:ba:3c:cd:b3:16:
                    3f:57:1c:0b:6e:4f:4d:f6:87:70:e9:31:42:f1:ad:
                    c4:2a:44:5b:36:78:e8:ff:f1:df:4d:d9:e6:80:e4:
                    36:1c:41:f3:a8:a0:7b:cf:30:8a:5a:ee:e5:3a:c2:
                    6c:e3:44:22:df:ff:d2:69:a5:a3:0a:cc:d9:cb:a9:
                    33:b9:25:3e:c0:19:37:0b:50:29:9b:3f:ef:af:67:
                    40:98:9c:db:67:19:43:c8:d2:b3:86:ac:0d:3b:bf:
                    82:59:55:b5:c0:4d:14:fc:1e:b3:75:a1:24:a3:57:
                    d3:41:2c:24:98:39:d0:d3:f5:c3:b2:bb:0b:81:97:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:AB:E8:FD:69:A0:E7:0A:B8:20:99:34:7A:2D:AD:A5:45:90:1D:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/7DABE8FD69A0E70AB82099347A2DADA545901DEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:26:22:5f:34:22:8d:b2:49:fb:0c:59:03:d7:04:43:fc:
         3d:6c:36:e6:c6:f4:7d:36:5a:9f:23:0b:d3:c3:60:c6:4c:e8:
         84:85:6e:dd:21:2f:5b:fb:1e:b4:e6:f1:d1:24:f2:67:eb:26:
         95:5d:83:58:fb:03:f4:d2:1a:59:b3:2e:e1:e1:e8:e2:a0:0e:
         4f:76:82:3b:da:ab:3a:21:c8:2c:49:33:7a:a1:e5:8d:c8:9b:
         c2:d8:a0:fd:a8:13:48:0d:e4:58:af:d8:c1:01:5b:5f:c7:52:
         08:01:74:05:7f:21:3e:76:e2:b2:3b:07:49:d3:6b:ee:6b:10:
         54:5b:1e:cc:c3:1b:cd:81:ee:ff:17:47:bf:71:f9:27:73:45:
         e2:2a:c0:7d:5a:03:78:71:0b:63:50:87:ee:05:97:b3:18:81:
         9d:e6:56:b2:d1:b6:5a:8b:58:ea:1a:6c:8f:f5:c9:35:96:88:
         13:d5:cd:e1:86:74:af:de:bc:e8:a8:8f:69:bb:24:3f:46:16:
         bc:b8:dc:7c:37:a1:c8:8a:be:9a:a5:99:5f:a2:24:67:60:71:
         47:bf:92:b5:30:88:33:05:dd:5e:a5:00:a0:c0:67:90:da:01:
         e2:e4:7b:5b:fb:8b:52:3a:c9:29:e5:f6:2b:3d:fb:33:7b:f8:
         f3:42:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org