Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer
File:                     8960917263524044D6C2C72B89F0753C576C268A.cer (raw, json)
Hash identifier:          o70xVv0kFzm2BiG966kJh5/QtGWwZv4W2CVqShJdKDc=
Subject key identifier:   89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2DB45FA66F5F51A18D77EF2C1810E352EEABCFFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/8960917263524044D6C2C72B89F0753C576C268A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jun 2024 11:30:00 +0000
Certificate not after:    Sat 21 Jun 2025 11:35:00 +0000
Subordinate resources:    AS: 268057
                          IP: 45.168.108.0/22
                          IP: 2804:574c::/32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 11:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b4:5f:a6:6f:5f:51:a1:8d:77:ef:2c:18:10:e3:52:ee:ab:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 22 11:30:00 2024 GMT
            Not After : Jun 21 11:35:00 2025 GMT
        Subject: CN=8960917263524044D6C2C72B89F0753C576C268A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:56:51:5a:df:05:18:c9:c7:88:a3:7f:04:
                    65:58:d5:42:09:b8:5c:60:1b:f3:c2:06:96:05:4a:
                    87:30:dc:84:95:45:3c:9e:48:33:bb:13:18:50:d0:
                    45:75:67:1c:60:66:ef:24:62:23:5e:10:9c:10:fe:
                    b2:fb:e8:45:72:71:27:11:72:fe:20:f8:60:41:e4:
                    ae:1d:b1:ad:4a:a1:91:34:d3:3d:d0:83:26:ef:d3:
                    8d:4f:db:08:e3:e9:f1:b2:fe:cc:52:b6:cc:fd:e3:
                    e2:06:dc:48:55:71:1d:c7:54:14:e5:13:f4:11:58:
                    ef:18:41:6a:f4:c5:d2:81:09:34:f4:3b:67:f5:6a:
                    32:d3:ca:74:bb:40:a6:87:41:df:3c:68:6d:fb:d8:
                    4d:c3:f9:f0:6b:88:23:7a:25:9b:3c:eb:26:42:6f:
                    97:55:42:4d:ab:8c:e8:01:01:1f:2b:b4:2a:6d:9e:
                    a3:7b:b5:8d:84:57:da:50:6b:25:cb:5e:db:38:fa:
                    af:96:7a:8a:6e:76:53:2d:b5:5f:74:82:a0:5a:d2:
                    c0:af:85:14:e5:44:3f:8a:9f:1f:66:13:e9:06:2f:
                    3d:c6:09:17:a5:e7:88:c2:14:43:45:45:52:a6:60:
                    f7:e4:8a:fb:d8:49:8e:76:69:52:20:86:aa:bd:63:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/8960917263524044D6C2C72B89F0753C576C268A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.108.0/22
                IPv6:
                  2804:574c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268057

    Signature Algorithm: sha256WithRSAEncryption
         69:c4:6c:fd:57:98:bc:d4:30:f7:c4:d8:c5:3a:1c:24:f5:71:
         a0:6d:fd:82:cb:ea:aa:59:b2:3b:e6:93:72:a4:5e:1b:35:56:
         cc:45:4e:ec:e3:ef:9e:cf:59:ed:7d:ef:94:7e:fb:c9:4f:ec:
         9b:bb:7c:2d:ea:ec:25:75:60:b1:33:6c:80:87:dc:4f:d6:73:
         71:e0:12:54:8b:a3:db:0f:a1:8f:2e:c6:2f:d1:2f:67:b3:18:
         44:65:e1:91:88:52:14:58:ea:24:eb:c7:ce:6c:ef:19:8c:4e:
         31:1b:58:62:8a:21:2e:45:c3:9c:0c:4b:f3:e9:0d:51:48:8d:
         88:88:99:65:30:36:65:e4:bc:d5:df:cb:c0:7e:47:dc:6e:90:
         c4:5c:da:da:1e:bc:08:f4:5c:ec:76:f5:21:34:1f:91:a7:0d:
         97:d8:c6:87:f9:9d:63:fb:95:6d:5c:d2:d8:a6:f6:52:d1:ee:
         bf:e7:e1:22:eb:fb:1f:5a:ee:c2:6c:26:c7:44:75:9b:8d:06:
         74:57:98:71:af:f5:79:fe:9b:ed:d6:a0:3b:87:48:d5:bb:4e:
         2a:25:b8:ff:36:03:da:e6:3a:1f:a0:0a:82:47:d6:44:e5:74:
         56:14:4c:31:20:b0:4d:9c:ab:65:99:02:e0:c4:5e:17:65:2b:
         a6:ab:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:25 2024 by rpki-client on console-fra.rpki-client.org