Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7FE2B3EC62C108B2F64A74E93871E2D9A1248560.cer
File:                     7FE2B3EC62C108B2F64A74E93871E2D9A1248560.cer (raw, json)
Hash identifier:          G2xKSPuD3ruZEPJERrzNDDsoLrhBbJs9JX97GOl3K+w=
Subject key identifier:   7F:E2:B3:EC:62:C1:08:B2:F6:4A:74:E9:38:71:E2:D9:A1:24:85:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       704BA9DCBDA975D47C2A95BB5FD6882C5CA36619
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Et1a1vmUgian2S4N8GnwgCRBVACZqoVdAV6xFaJNdSC/1/7FE2B3EC62C108B2F64A74E93871E2D9A1248560.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Et1a1vmUgian2S4N8GnwgCRBVACZqoVdAV6xFaJNdSC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:10:13 +0000
Certificate not after:    Wed 02 Apr 2025 21:15:13 +0000
Subordinate resources:    AS: 268646
                          IP: 45.164.192.0/22
                          IP: 2804:5460::/32

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 14:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4b:a9:dc:bd:a9:75:d4:7c:2a:95:bb:5f:d6:88:2c:5c:a3:66:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:10:13 2024 GMT
            Not After : Apr  2 21:15:13 2025 GMT
        Subject: CN=7FE2B3EC62C108B2F64A74E93871E2D9A1248560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:90:38:47:92:8d:c3:cb:34:75:82:50:bc:
                    7a:24:5f:c0:25:a8:dd:cc:46:c9:16:d1:49:55:b2:
                    2c:ea:6b:af:3c:57:8e:b0:9d:ea:df:79:a7:fe:06:
                    ef:a0:b3:d0:f8:b0:60:b0:71:1b:ef:af:db:de:ef:
                    f1:ed:a6:e3:66:50:2a:c3:b7:60:aa:b0:90:29:2e:
                    59:86:2c:6f:e1:c0:a9:4d:43:3e:36:f7:c6:b7:f8:
                    7b:71:3c:98:d5:20:6b:bd:d0:e9:8d:ce:f7:08:5f:
                    56:95:93:33:1b:12:b5:a4:9f:c5:32:ac:2c:ef:b9:
                    b9:3f:2b:2c:bd:3c:13:fd:1a:c4:39:aa:45:22:d3:
                    ff:85:cf:4b:45:c5:c6:46:e5:6d:18:5c:41:74:f9:
                    02:47:9c:00:4c:51:83:a9:32:f1:3d:06:1c:06:ce:
                    92:ed:bc:12:3b:d2:f1:45:95:de:8b:b1:94:ec:2e:
                    81:6d:e1:30:55:03:37:1f:6e:d3:b9:b6:cc:f9:01:
                    aa:cc:81:30:69:64:c5:e1:e0:78:38:18:4c:2d:1e:
                    03:75:1a:96:35:ac:03:22:fd:d9:9c:7b:19:5c:88:
                    33:24:87:d8:55:55:20:df:93:f0:b2:32:d6:ed:99:
                    8c:25:08:28:a5:c7:21:1e:03:b6:2f:c7:87:54:fe:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:E2:B3:EC:62:C1:08:B2:F6:4A:74:E9:38:71:E2:D9:A1:24:85:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Et1a1vmUgian2S4N8GnwgCRBVACZqoVdAV6xFaJNdSC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Et1a1vmUgian2S4N8GnwgCRBVACZqoVdAV6xFaJNdSC/1/7FE2B3EC62C108B2F64A74E93871E2D9A1248560.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.192.0/22
                IPv6:
                  2804:5460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268646

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:ed:df:a3:37:dc:11:67:c2:04:c0:1a:3f:e3:46:99:f9:
         fd:89:e4:32:a2:70:47:99:2d:06:80:d8:e7:44:5e:13:3f:c4:
         76:27:3e:a5:e7:3a:a0:51:05:9b:12:ac:67:73:ec:e5:df:96:
         dd:85:4b:25:2f:5b:d5:fd:77:23:9b:63:54:04:2d:f4:49:16:
         a8:c3:ee:9c:44:c2:ce:ae:65:8d:97:77:0a:f5:05:17:6c:8d:
         da:e7:ee:04:09:92:c2:26:c7:48:92:10:1c:3f:3e:1b:15:47:
         4d:ea:c0:52:fc:f1:af:37:0f:c9:5d:90:9c:33:ec:a6:85:b7:
         4c:9a:a2:eb:85:f2:66:71:dc:28:81:80:51:4b:3b:c3:41:b6:
         5c:c6:1a:43:6e:a4:59:1a:0f:52:6a:fc:a3:ee:31:1b:fc:8e:
         5f:00:a0:04:c5:e2:aa:f3:b8:e5:cb:04:98:11:8b:b0:bb:2a:
         94:b7:aa:9d:d9:89:7f:c9:5e:63:57:e0:ec:f3:b9:92:21:66:
         16:44:71:2f:c7:79:95:18:22:25:0b:72:24:b7:84:9e:4e:51:
         cf:a3:c5:d2:d8:5b:f2:90:97:23:6a:09:f3:aa:14:15:f4:cc:
         57:26:0c:9a:ad:93:17:2c:dd:09:01:05:b9:d9:34:88:fe:82:
         95:69:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 17:04:31 2024 by rpki-client on console-ams.rpki-client.org