Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.cer
File:                     8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.cer (raw, json)
Hash identifier:          hz6af/XCV7WEJwU1UubTkDs1xkaYchjzUjO5l7WCTPU=
Subject key identifier:   80:06:B3:3C:CA:A0:FE:17:1A:BB:82:4C:41:3C:4D:E8:4E:66:DA:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BDE17C24AF286EA23824AD9D77F96D8C6DAC425
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jul 2024 18:58:28 +0000
Certificate not after:    Mon 14 Jul 2025 19:03:28 +0000
Subordinate resources:    AS: 61895
                          IP: 177.91.16.0/20
                          IP: 2804:1184::/32

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 08:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:de:17:c2:4a:f2:86:ea:23:82:4a:d9:d7:7f:96:d8:c6:da:c4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 18:58:28 2024 GMT
            Not After : Jul 14 19:03:28 2025 GMT
        Subject: CN=8006B33CCAA0FE171ABB824C413C4DE84E66DAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3b:45:64:42:83:49:a2:55:16:3b:30:63:f6:
                    46:0e:8d:3c:ac:19:31:87:2b:de:f5:9d:30:e9:2e:
                    1a:3c:ab:48:d6:88:9d:f6:c6:0f:c3:48:a2:d5:4b:
                    44:4a:19:cc:80:76:5f:58:f6:5d:70:5b:44:40:3b:
                    63:b6:ef:e7:20:88:c6:62:f6:2d:71:24:17:7b:6d:
                    07:ee:ee:53:8e:f6:a0:47:f4:74:46:a8:53:ff:a4:
                    d5:c1:2c:b9:8d:25:da:25:c5:9c:4a:4e:b5:f0:b6:
                    98:13:81:2c:b8:0b:e8:bf:92:6f:84:ab:9c:cb:e8:
                    9a:38:f6:b9:9c:e5:4b:8e:6b:ca:be:7b:b9:8e:31:
                    3d:c6:ec:97:f4:91:5d:61:c1:10:2b:35:95:c4:ff:
                    5d:e2:41:0d:cf:75:46:db:39:e2:dd:35:a2:32:53:
                    6b:90:4b:b0:69:d8:fc:20:cd:a4:76:04:0c:ab:ff:
                    75:8c:51:b9:f5:c3:a4:ae:99:c9:ae:18:a6:c4:ca:
                    e5:96:03:ea:5c:66:1d:8c:ee:24:a4:8d:28:03:c9:
                    10:4c:9f:74:b0:6f:c0:25:64:00:36:81:d5:d0:d4:
                    6c:a7:eb:1f:99:83:fb:5f:48:7a:22:8e:30:70:e9:
                    ed:81:37:61:18:f0:d0:d5:36:0b:09:29:c9:06:8f:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:06:B3:3C:CA:A0:FE:17:1A:BB:82:4C:41:3C:4D:E8:4E:66:DA:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.16.0/20
                IPv6:
                  2804:1184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61895

    Signature Algorithm: sha256WithRSAEncryption
         8f:1e:57:84:a5:d8:a4:17:d0:60:4a:54:54:19:57:bf:c6:8d:
         ce:5e:e8:79:ff:a2:56:07:4e:06:0b:ba:16:e3:1a:8d:6a:9b:
         55:a8:49:c6:5b:99:42:0a:d2:7c:ac:21:c5:b4:87:2e:e3:56:
         03:ac:d1:0f:22:27:08:a0:83:62:94:b6:97:0b:36:99:1f:56:
         fb:85:21:79:5c:fd:e2:74:b3:b1:ca:ea:b2:8c:10:4d:5a:01:
         ab:62:b4:d3:be:40:9e:b8:20:dc:52:81:5b:e0:93:38:69:3b:
         0c:8a:b1:19:23:81:36:32:67:59:c8:27:d8:d6:a3:a8:67:ee:
         f9:34:f3:30:1a:cc:2d:a4:c0:b0:96:22:ad:a0:e8:92:91:bc:
         b6:55:97:ce:47:24:92:af:09:d8:9c:51:30:e4:eb:be:47:01:
         b6:ec:e3:00:90:79:dd:8d:98:fb:9e:30:e7:6f:3b:f4:4f:46:
         cf:c8:97:ec:47:e2:ce:ba:b7:5c:26:a2:7e:d1:0e:b8:c2:2d:
         de:3d:ca:a0:21:dc:5a:f5:0e:74:7a:4a:a7:45:a0:2e:9c:20:
         49:49:90:d6:c9:f9:ed:19:ab:2d:8a:a7:2d:28:da:86:da:a4:
         e8:fb:e6:f2:6f:f5:cc:2e:93:c1:59:2a:82:36:a6:94:d2:19:
         b7:b8:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:50 2024 by rpki-client on console-fra.rpki-client.org