Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer
File:                     8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer (raw, json)
Hash identifier:          cAbz/YE8PTS683m5DZ9EUtNOCIiRXr7jWGbCTBm5/60=
Subject key identifier:   83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5026169E0B08154E9B7A4507ED33CD74F6C4387D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 17:04:30 +0000
Certificate not after:    Mon 21 Jul 2025 17:09:30 +0000
Subordinate resources:    AS: 262659
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0/20
                          IP: 186.193.64.0/19
                          IP: 187.1.64.0/20
                          IP: 187.85.0.0/19
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 2804:58::/32
                          IP: 2804:e8::/32
Validation:               Failed, certificate revoked on Wed 24 Jul 2024 14:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:16:9e:0b:08:15:4e:9b:7a:45:07:ed:33:cd:74:f6:c4:38:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 17:04:30 2024 GMT
            Not After : Jul 21 17:09:30 2025 GMT
        Subject: CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:ca:76:d3:97:4e:26:c6:08:e4:ec:70:3f:
                    68:ff:45:d2:a6:f8:bb:3f:1a:f4:69:ef:3a:b7:ad:
                    2f:a1:4c:20:1d:71:71:ef:c5:2d:ed:f7:1f:06:58:
                    fc:a4:4e:55:c2:c0:d4:9c:65:8b:e2:23:d8:0a:b1:
                    4f:fb:13:78:37:f5:c9:2a:9b:2c:a7:d2:f1:7c:45:
                    3a:82:8b:82:a3:79:fa:1c:64:f0:0b:ac:ab:76:61:
                    d7:e3:2c:90:71:33:db:10:df:af:92:da:e4:e2:02:
                    ec:1e:fd:be:90:14:43:4a:4d:6f:bf:8c:f5:e6:e4:
                    1f:c2:80:c7:07:10:cd:7f:2f:7e:4f:c6:40:80:1d:
                    48:0f:88:0c:9d:32:18:f1:f7:c7:69:7f:0f:84:ec:
                    d5:35:91:83:df:93:fa:5f:c3:dc:ed:4e:2c:46:6c:
                    25:10:10:02:8a:d5:0f:03:de:b1:41:7b:47:db:56:
                    b6:c0:d2:c1:7e:63:95:09:1c:0f:4a:1c:1b:1e:3f:
                    e4:d0:4d:2c:48:33:bd:26:39:f9:ce:99:cd:02:1f:
                    b3:8b:b0:ea:c2:a9:52:62:3a:83:8b:91:86:9f:70:
                    c6:a2:c3:43:62:d4:a3:d3:ee:06:94:69:db:7e:11:
                    63:04:7a:19:f2:a3:30:72:1a:60:cc:e9:3c:2b:e2:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20
                  179.127.48.0/20
                  186.193.64.0/19
                  187.1.64.0/20
                  187.85.0.0/19
                  200.52.16.0/20
                  201.33.240.0/20
                IPv6:
                  2804:58::/32
                  2804:e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262659

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:85:73:68:7a:d4:7a:31:b0:de:b9:69:46:cc:16:a4:60:
         ed:5e:eb:84:e8:1c:95:0c:38:9b:55:c8:0d:b5:cc:07:41:ba:
         9c:08:80:c2:2e:b6:a0:e7:e6:67:45:f5:84:29:4e:a4:09:3c:
         f7:75:54:01:5e:30:40:c2:fd:e5:d6:1b:db:f6:80:5d:ca:be:
         c6:23:a4:0d:96:cd:d6:85:84:29:0c:49:0e:8a:1e:ac:ac:fb:
         cd:5a:6b:ac:09:16:46:e5:a8:b5:f2:67:3c:cb:bb:4f:c9:56:
         12:1b:70:3f:89:43:c9:e0:24:10:72:61:57:3c:7e:dd:15:66:
         5d:89:57:0a:f5:e5:bc:28:77:60:88:27:d8:01:6a:82:8d:6e:
         55:00:96:e0:c6:d8:ed:43:bc:62:84:e6:22:00:1c:1b:0d:b4:
         ad:a8:e0:05:1e:65:44:05:5e:cd:da:24:43:3a:ff:35:80:c7:
         1a:d6:73:98:c7:27:fb:43:49:a6:a4:a0:9c:9d:c6:5b:e2:4c:
         99:6a:87:19:66:e9:28:b4:5f:c3:18:df:a5:7c:4f:ec:dd:85:
         97:88:70:ad:9e:33:0a:c3:66:dd:17:54:0e:cf:70:50:3a:6b:
         c2:03:b5:b4:8c:8a:ff:7e:57:53:25:8e:e3:28:14:bd:1a:c0:
         02:92:b0:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:27 2025 by rpki-client