Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/943B5DEE64444E87E58804BCD51E5F212723369E.cer
File:                     943B5DEE64444E87E58804BCD51E5F212723369E.cer (raw, json)
Hash identifier:          I71mqMQD4IwD7dQETURKQQvI6ONfFftaDaSC2ZVcb6o=
Subject key identifier:   94:3B:5D:EE:64:44:4E:87:E5:88:04:BC:D5:1E:5F:21:27:23:36:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2951CC9ED748C2D6441BA0125A2DE651246B5E94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/1/943B5DEE64444E87E58804BCD51E5F212723369E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 13:19:04 +0000
Certificate not after:    Mon 05 May 2025 13:24:04 +0000
Subordinate resources:    AS: 262585
                          IP: 201.55.160.0/20
                          IP: 2804:8f70::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 15:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:51:cc:9e:d7:48:c2:d6:44:1b:a0:12:5a:2d:e6:51:24:6b:5e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 13:19:04 2024 GMT
            Not After : May  5 13:24:04 2025 GMT
        Subject: CN=943B5DEE64444E87E58804BCD51E5F212723369E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:bd:0b:47:ee:69:0e:5c:71:b1:d4:52:5e:
                    86:9b:66:f7:49:20:d1:cb:d7:53:b3:f2:da:51:c5:
                    44:76:c2:6b:dc:0d:a9:a3:ff:12:ba:c7:2d:90:45:
                    6a:d9:70:d6:6f:69:8d:f5:f0:40:18:e0:04:bc:07:
                    4d:d2:d8:13:e2:a6:2a:db:5b:ee:13:67:8d:6b:a4:
                    84:2d:c4:a5:11:a2:cd:e7:75:b6:49:13:63:88:48:
                    8e:8b:f5:da:af:13:4f:e7:0f:73:8d:b5:b5:c5:d6:
                    23:88:49:24:05:31:ec:91:e0:b7:6e:ce:c4:87:0e:
                    fc:ba:7c:20:8d:fd:cc:e5:c9:35:da:fc:b0:ca:bd:
                    74:d1:23:64:6e:86:55:0b:65:5a:aa:fe:f8:50:72:
                    ea:ed:f9:bf:aa:86:b2:92:d0:04:e8:24:8f:d3:8d:
                    b7:43:5a:a3:bf:6b:b6:1f:c4:f6:d2:47:bf:27:7e:
                    ef:65:0c:e7:fc:11:d4:37:c9:c9:51:2b:2c:32:7b:
                    97:3a:1a:a0:8d:31:57:c6:2c:e6:54:46:52:c0:d2:
                    1a:ff:27:c6:80:86:f8:fc:e0:19:a0:de:92:c5:e9:
                    3e:ed:93:07:61:ed:4f:5d:cd:ef:1f:9f:da:45:02:
                    3c:1a:f1:32:08:ae:78:fe:83:72:fd:b3:67:b9:a9:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:3B:5D:EE:64:44:4E:87:E5:88:04:BC:D5:1E:5F:21:27:23:36:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/1/943B5DEE64444E87E58804BCD51E5F212723369E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.160.0/20
                IPv6:
                  2804:8f70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262585

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:e5:ba:7f:66:a3:73:d1:21:80:9e:a8:88:ab:4b:6a:07:
         de:0f:a5:20:9a:76:66:25:fa:e8:31:fa:23:71:3e:3c:75:fb:
         11:7d:6c:5a:94:2e:d5:7a:52:cc:78:c2:04:0d:3d:8c:5e:5e:
         ea:89:68:51:08:a5:2f:b0:c0:3b:1d:81:49:7b:09:c4:53:95:
         7b:a4:23:b8:77:b3:3d:2f:22:59:4a:87:9d:28:ab:a4:3b:f1:
         7a:4a:ee:3d:c2:09:eb:f3:7e:fc:67:3f:65:76:e2:8b:d1:77:
         bb:25:34:f6:f6:f8:7c:c8:32:dc:3f:04:24:1e:8c:f1:21:0b:
         f8:9b:5a:90:d5:72:ce:3f:70:72:8a:be:51:9b:bb:fb:c3:42:
         66:bc:7d:34:1c:d7:ea:11:00:db:47:4e:22:26:cc:29:e2:a5:
         6c:4e:06:38:49:f8:8d:52:05:79:24:ae:14:ab:2f:dc:50:16:
         32:af:9d:54:f5:2e:86:0a:f7:7a:8b:d8:00:e8:a4:a2:13:30:
         f3:32:88:c2:3d:95:09:a6:ad:87:e3:8d:80:cd:7b:1a:73:09:
         d3:d9:e2:c3:06:a1:49:4e:39:5d:f8:fb:f0:6e:31:0c:a2:47:
         68:f1:cf:85:9e:19:a2:7d:bd:b1:06:77:8e:12:6c:f9:a4:08:
         78:51:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org