Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer
File:                     854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer (raw, json)
Hash identifier:          IZyx81KWPGDYYmVAYiazfd1RxIogJ7UTFfvfWBs7/xY=
Subject key identifier:   85:44:87:FA:0B:6D:A6:FA:46:7F:05:7B:0B:26:36:BF:09:7A:30:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3072E7140135CC8B68DA85842E4AAAE06ADF0AD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:55:19 +0000
Certificate not after:    Thu 03 Apr 2025 20:00:19 +0000
Subordinate resources:    AS: 263327
                          AS: 268329
                          IP: 45.238.84.0/22
                          IP: 191.7.192.0/19
                          IP: 2804:145c::/32
                          IP: 2804:4f78::/32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 20:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:e7:14:01:35:cc:8b:68:da:85:84:2e:4a:aa:e0:6a:df:0a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:55:19 2024 GMT
            Not After : Apr  3 20:00:19 2025 GMT
        Subject: CN=854487FA0B6DA6FA467F057B0B2636BF097A30C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:a0:6a:28:58:2c:a8:18:13:1b:d2:81:c9:
                    82:ea:0b:8b:cb:fb:d8:90:ea:e0:7a:1b:92:7d:f4:
                    0b:75:cf:c4:02:2f:1b:9a:1e:63:0c:71:62:af:dc:
                    0a:58:c7:60:e7:6d:70:9f:aa:dd:0d:4f:51:3a:30:
                    0d:5c:55:1d:98:74:93:30:06:1b:1c:79:eb:ca:ff:
                    35:95:00:5c:d4:9b:fe:95:0e:33:ca:ef:fd:ec:6c:
                    ef:36:47:97:f8:59:c8:a0:a8:fe:a1:3b:38:c9:23:
                    34:88:c0:8a:5c:c6:f4:c1:73:b3:f8:45:5b:61:35:
                    6c:d0:27:be:c8:07:8a:60:df:c0:4b:00:4d:34:ab:
                    fe:80:3e:b6:e3:5e:f3:77:ca:be:0f:41:4e:ba:4d:
                    2e:5e:fd:2a:d8:bf:dd:61:76:eb:23:a7:7a:8c:66:
                    06:45:a9:9c:1b:b2:dc:6c:10:1f:3b:cd:3c:0c:3c:
                    4c:dc:66:55:57:08:50:93:b7:56:3c:00:b3:0c:39:
                    df:85:e2:08:ca:92:af:09:10:25:7a:e2:9c:c9:80:
                    63:44:ba:be:e9:9c:7c:5c:55:ba:8d:67:87:1c:b5:
                    8b:10:12:bc:fd:5c:70:fc:40:a3:9c:29:ee:e2:7d:
                    a5:f0:95:f1:74:e3:92:d9:4b:ef:7b:ff:ec:78:7f:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:44:87:FA:0B:6D:A6:FA:46:7F:05:7B:0B:26:36:BF:09:7A:30:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.84.0/22
                  191.7.192.0/19
                IPv6:
                  2804:145c::/32
                  2804:4f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263327
                  268329

    Signature Algorithm: sha256WithRSAEncryption
         62:75:ad:fe:2b:78:67:8b:0e:37:ce:c0:1e:96:e3:a8:2d:4f:
         80:10:3f:a5:02:26:59:86:b3:d7:12:76:bc:8e:a0:b6:38:eb:
         dd:b0:45:37:cc:e7:28:cb:89:7d:d1:7c:3d:3a:36:e8:1a:06:
         9e:ed:09:fe:3a:82:98:6f:a6:7c:6f:e9:d6:9b:8a:6c:73:30:
         4f:54:1f:93:63:31:8d:a1:2a:24:e6:73:55:b9:c7:aa:0d:c5:
         f6:3c:3c:f7:c5:31:1e:6b:ae:f8:46:11:88:e9:f0:a9:82:ed:
         06:45:b1:e3:f3:4e:9b:f5:6c:f5:1f:9f:f4:66:06:63:1c:ba:
         21:be:88:39:b8:31:e5:32:9e:98:ef:02:b5:97:4f:7f:d2:28:
         91:68:bd:39:f0:54:22:04:ce:ce:0e:7d:55:14:d3:ce:e8:86:
         ea:ae:4f:24:8b:7d:2c:af:6f:b6:19:73:8d:8d:b8:51:a2:cf:
         f2:6e:03:d5:47:ab:06:6b:e7:94:90:8e:63:02:a5:e3:8d:a5:
         a3:65:fd:8a:a8:df:fa:f9:2e:d7:10:ca:38:49:54:ef:c8:b6:
         99:bc:80:74:a0:c1:5b:b2:e4:b8:1d:73:73:90:6a:ea:0f:14:
         2d:0a:81:fc:1b:62:d1:98:ae:fc:7f:d5:d1:6d:20:e0:16:dc:
         50:ed:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 22:17:03 2024 by rpki-client on console-fra.rpki-client.org