Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/948EA56346C30111F41B57D5B430F498F7CAC525.cer
File:                     948EA56346C30111F41B57D5B430F498F7CAC525.cer (raw, json)
Hash identifier:          RtPX2/cnF7M5uYBVS49s11H35Xm1/CDsmkUGAG6s0jc=
Subject key identifier:   94:8E:A5:63:46:C3:01:11:F4:1B:57:D5:B4:30:F4:98:F7:CA:C5:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2459981B3E0BB4D90072B68B6CC2ABCDCBAE4E5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/948EA56346C30111F41B57D5B430F498F7CAC525.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 May 2024 21:26:17 +0000
Certificate not after:    Fri 16 May 2025 21:31:17 +0000
Subordinate resources:    AS: 266460
                          IP: 170.82.252.0/22
                          IP: 2804:3828::/32

Validation:               Failed, certificate revoked on Mon 27 May 2024 23:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:59:98:1b:3e:0b:b4:d9:00:72:b6:8b:6c:c2:ab:cd:cb:ae:4e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 17 21:26:17 2024 GMT
            Not After : May 16 21:31:17 2025 GMT
        Subject: CN=948EA56346C30111F41B57D5B430F498F7CAC525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:2a:b2:bf:64:42:b2:bb:2c:81:fe:94:14:
                    c7:ed:07:07:af:82:be:4b:de:b8:d4:39:28:6e:5c:
                    7c:4f:d9:f8:5c:fd:1e:be:ce:8a:36:1e:04:c8:38:
                    df:17:84:dd:46:54:09:cc:16:85:de:4a:61:db:f2:
                    27:08:42:ff:2b:93:73:5b:84:23:3d:4d:27:13:99:
                    3b:35:e1:1c:3b:f6:64:fb:33:d9:b5:4e:a7:50:ef:
                    fc:1d:5f:c8:df:ea:83:07:d0:63:bc:f3:50:4e:81:
                    3a:af:6c:20:f8:8f:ec:91:dd:fd:6a:81:26:24:d7:
                    33:4f:d3:32:53:a5:6b:14:53:4a:fb:14:0d:76:b8:
                    4a:ef:60:fd:1c:c2:85:eb:95:a4:7f:cd:44:3e:6c:
                    4f:61:12:0a:fa:eb:0c:17:c0:8c:c2:44:96:27:cf:
                    27:b8:dc:4e:e4:d7:e2:44:81:f1:48:ab:25:0d:fb:
                    68:5a:b5:1a:5a:2c:77:c6:b7:c4:01:e5:4a:09:c4:
                    2f:39:04:18:6a:d9:f7:7d:94:73:3b:ab:45:ab:13:
                    c5:43:1f:a8:84:fd:2b:01:6e:d7:8b:6a:e6:6a:38:
                    bb:f2:24:14:78:2f:0f:b2:14:cd:fb:9b:26:10:ad:
                    6b:00:c0:10:91:66:4f:ed:94:5c:82:4f:d8:28:10:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:8E:A5:63:46:C3:01:11:F4:1B:57:D5:B4:30:F4:98:F7:CA:C5:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/948EA56346C30111F41B57D5B430F498F7CAC525.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.252.0/22
                IPv6:
                  2804:3828::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266460

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:3b:77:18:30:d2:07:d9:3c:7f:0f:3c:8f:96:1f:c1:45:
         ec:66:60:89:fa:8a:73:1f:b6:8a:2d:c5:da:cc:7c:44:52:b8:
         3f:67:59:e6:36:a4:40:57:4d:41:79:99:1d:a2:a2:58:99:2a:
         1b:be:80:ea:fd:9c:0b:81:87:ad:16:4b:49:79:c2:0a:4c:9b:
         fd:6b:82:a1:39:0b:7c:2a:c0:e2:28:20:be:4d:69:8c:60:c5:
         70:86:e3:ce:64:ec:b5:96:ae:79:37:6d:67:e2:1c:5e:18:29:
         84:d3:90:4e:c4:28:87:f6:3d:51:28:6b:90:93:fc:7b:85:81:
         ba:1b:26:90:f1:ad:27:b0:ba:a0:e9:77:74:d7:12:c2:07:4a:
         da:37:37:57:cf:15:8a:82:a1:6b:45:3a:65:a4:79:83:5b:3c:
         df:98:d1:36:52:11:25:03:04:f9:45:15:40:25:f4:0b:d7:63:
         c1:e4:39:2a:f3:58:78:b4:2c:44:69:4d:55:1b:42:5f:76:12:
         26:72:d3:8c:ae:eb:04:92:d6:91:15:41:21:d0:a9:c7:a4:82:
         a1:a7:21:f7:4e:ef:86:07:39:0e:49:be:cf:90:76:e9:d1:64:
         79:6e:32:2d:fb:1d:1d:98:8c:54:82:24:5f:75:40:8c:7c:24:
         94:d2:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org