Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C892521592982632F0C7682F6D71DD549057974.cer
File:                     9C892521592982632F0C7682F6D71DD549057974.cer (raw, json)
Hash identifier:          syTUTdpb/GUQhR65yuvnFeA8omNwfzNAhPFR0Pp99to=
Subject key identifier:   9C:89:25:21:59:29:82:63:2F:0C:76:82:F6:D7:1D:D5:49:05:79:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24BF80D6069512D644775ABCF4982D4B6FECEA24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/1/9C892521592982632F0C7682F6D71DD549057974.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 19:01:06 +0000
Certificate not after:    Thu 14 Aug 2025 19:06:06 +0000
Subordinate resources:    AS: 263283
                          IP: 179.127.72.0/21
                          IP: 2804:1658::/32

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 19:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:80:d6:06:95:12:d6:44:77:5a:bc:f4:98:2d:4b:6f:ec:ea:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 19:01:06 2024 GMT
            Not After : Aug 14 19:06:06 2025 GMT
        Subject: CN=9C892521592982632F0C7682F6D71DD549057974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:90:2b:e7:53:20:e3:b7:7f:9a:9a:a8:88:
                    af:e2:5a:73:09:b0:96:9d:f9:86:71:a0:1b:af:c1:
                    1b:66:50:5a:55:c0:8a:20:98:5b:71:7c:63:80:1c:
                    3c:df:18:1b:54:b0:66:95:a7:5b:9b:bb:c9:57:52:
                    e6:73:a7:62:da:7b:19:34:d0:ae:03:27:cd:c6:05:
                    76:39:5f:42:1e:21:27:3f:1d:bc:22:43:d3:f9:38:
                    de:09:2d:39:30:9d:a8:1c:d9:fd:ca:bf:8f:62:a1:
                    d0:e8:01:a6:f7:35:59:6d:aa:52:8e:0a:53:20:c2:
                    75:c1:85:f2:19:ad:4c:8f:5b:cb:6b:ff:c8:f6:db:
                    75:29:74:83:11:c6:ee:56:7d:4d:8b:91:41:6a:25:
                    79:7c:a7:8d:f1:12:ae:ee:35:c8:da:6a:1c:09:c5:
                    2a:bb:1c:17:a8:9b:ef:0d:0c:8f:b2:c0:ab:77:e8:
                    7d:9b:8b:60:8f:a8:aa:03:1d:72:f6:f5:34:20:d3:
                    67:be:65:2d:1c:13:19:c4:4d:e4:08:27:90:ef:f6:
                    7d:22:1e:3a:81:c9:13:36:89:5a:c5:b5:34:00:ef:
                    c6:8e:8f:13:4c:0e:d2:4d:37:9b:68:df:88:ce:34:
                    f2:8d:fa:b9:c6:9f:9a:74:c5:af:ba:09:fb:ca:10:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:89:25:21:59:29:82:63:2F:0C:76:82:F6:D7:1D:D5:49:05:79:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/1/9C892521592982632F0C7682F6D71DD549057974.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.72.0/21
                IPv6:
                  2804:1658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263283

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:62:b2:be:f4:93:a8:d7:37:38:85:8f:b2:36:e6:72:25:
         7d:d5:e3:6b:d4:28:a2:6d:84:2e:0a:cf:d2:4f:1d:ac:c4:b7:
         58:30:e5:c8:a7:e0:e5:b4:1b:08:a5:f7:ec:86:5a:fd:e3:58:
         6c:80:d4:45:a6:65:b1:45:6c:eb:4c:1a:93:b1:7b:1e:1e:8e:
         00:a4:a2:c9:09:46:1b:6c:35:59:69:15:24:c6:ea:ce:a9:0e:
         8c:a4:ab:74:c3:12:d8:a8:25:8c:d9:02:2a:5c:7b:18:35:09:
         a8:17:d0:29:d7:04:bd:c8:c3:8e:b7:a4:9c:0d:71:34:54:31:
         94:ea:8f:e0:95:dc:38:5c:cb:da:86:ac:b9:5f:a3:01:13:21:
         42:1d:b0:f6:7c:09:14:21:eb:5d:12:d5:bf:62:31:74:62:5e:
         e8:cf:c4:69:24:84:ec:e5:f2:d1:a0:70:6e:84:cd:12:66:85:
         a8:66:cb:8d:0a:bc:f9:45:c5:60:81:cd:c6:27:53:d3:56:cc:
         c6:f3:23:24:71:fd:65:c8:21:4a:6d:04:9d:90:89:3b:48:52:
         b3:8d:c6:12:bc:62:64:03:64:be:9a:e3:b6:94:54:3f:3b:e5:
         9a:d9:c8:ea:25:89:36:ab:01:d8:71:ee:0b:7d:c5:85:69:10:
         cf:8b:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org