Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/964ABAE9C7EB7CDF0FEB500DB8F777414329842F.cer
File:                     964ABAE9C7EB7CDF0FEB500DB8F777414329842F.cer (raw, json)
Hash identifier:          tF4weDlks9YtyuTvQ/VM1uYqAdd9ipfbSnU2a4r9PFQ=
Subject key identifier:   96:4A:BA:E9:C7:EB:7C:DF:0F:EB:50:0D:B8:F7:77:41:43:29:84:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       203E1CAF2F7CF5232E6E366E2DDC6C17D655DBD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/1/964ABAE9C7EB7CDF0FEB500DB8F777414329842F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:56:24 +0000
Certificate not after:    Wed 02 Apr 2025 19:01:24 +0000
Subordinate resources:    AS: 266272
                          IP: 170.78.148.0/22
                          IP: 2804:3528::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:1c:af:2f:7c:f5:23:2e:6e:36:6e:2d:dc:6c:17:d6:55:db:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:56:24 2024 GMT
            Not After : Apr  2 19:01:24 2025 GMT
        Subject: CN=964ABAE9C7EB7CDF0FEB500DB8F777414329842F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:13:51:fc:71:19:7e:e6:3a:1c:01:2c:4c:
                    5b:71:87:46:f4:ea:de:52:bc:e0:86:ce:e5:dd:1d:
                    02:12:3b:82:78:e6:41:d0:50:16:8d:1b:c1:27:24:
                    02:5b:db:12:e8:e6:29:97:d4:e6:b8:a8:f9:74:54:
                    fc:bb:78:8b:42:f2:05:9e:e5:67:44:ba:bb:2b:9e:
                    ad:3f:f3:9f:38:f1:47:a8:f1:ce:d0:e0:8f:3f:8b:
                    a2:4e:fe:b6:a3:12:ff:a6:90:4b:79:6d:fa:30:64:
                    89:9c:c8:62:50:05:df:ea:59:78:3f:5f:e3:22:6c:
                    71:f4:f7:4c:5f:29:9c:dc:7d:1c:29:e5:f0:40:3f:
                    22:a0:ee:a5:3a:44:8f:fb:fe:c0:95:b6:d7:5e:9c:
                    2f:bd:c2:13:9d:38:00:93:4b:ee:ff:29:cd:b4:8f:
                    86:0e:d6:2e:a5:73:d6:8d:08:ff:00:d3:7e:84:95:
                    0e:18:28:5b:70:be:85:55:9c:74:ac:03:69:30:ed:
                    de:3c:6b:5b:cd:03:bd:99:ba:d9:46:52:c0:74:b1:
                    9c:70:61:bf:4a:ef:62:d6:88:60:b6:93:27:a2:77:
                    f0:7e:55:8e:46:d2:ba:aa:22:61:11:20:93:58:b0:
                    94:01:7b:b9:c1:6e:19:ca:ab:f0:c1:d5:5b:39:e2:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:4A:BA:E9:C7:EB:7C:DF:0F:EB:50:0D:B8:F7:77:41:43:29:84:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/1/964ABAE9C7EB7CDF0FEB500DB8F777414329842F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.148.0/22
                IPv6:
                  2804:3528::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266272

    Signature Algorithm: sha256WithRSAEncryption
         ce:1e:51:c8:dd:b0:18:ee:65:d6:aa:5f:89:7b:fc:e9:67:a4:
         f0:9e:71:1b:d5:50:86:c3:8f:81:5c:e4:7d:4f:41:1d:08:71:
         be:b6:c8:db:bc:cd:61:8e:4b:12:0e:69:1a:aa:ac:06:59:64:
         a3:8c:bb:4e:03:33:c0:0d:b7:3d:81:92:ee:9f:e7:33:44:f5:
         ed:7b:90:11:e1:af:a2:1c:3e:72:16:f6:02:b9:fd:79:2e:dd:
         61:c9:30:84:95:0b:03:6b:f7:75:84:9e:6f:2a:1e:5f:a2:3a:
         31:ec:04:bd:78:8f:c1:57:6f:0d:52:67:81:f5:1b:32:7e:0f:
         c1:2d:c1:01:dc:88:23:d7:1d:bc:19:07:de:bc:69:1f:83:a5:
         0c:a0:f1:61:b3:87:b9:ae:85:d1:96:21:2c:11:80:ef:e5:99:
         05:49:2c:b4:7c:75:f3:04:a1:3c:a2:e9:86:02:e3:ae:fe:6a:
         27:92:c1:6b:d0:59:70:1a:5f:3d:a1:bf:9e:d4:8f:78:81:28:
         49:eb:a7:de:c3:e8:43:ec:35:f4:47:92:7c:8b:dd:06:a9:33:
         f0:7f:01:e9:58:bf:15:78:fa:68:be:52:f4:a9:d5:ca:9f:9d:
         e7:15:13:6a:4d:26:37:17:d3:04:e3:7a:4a:4b:8f:5e:09:e4:
         7f:4a:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org