Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.cer
File:                     9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.cer (raw, json)
Hash identifier:          42U4QC55bEl9izZf94hxczM3kR98UHcikNY2NJjGZO4=
Subject key identifier:   9D:E5:BD:9F:77:5A:7B:F3:95:FD:CC:8E:A8:1D:68:9E:5F:04:EC:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44B22DB50D30C19A57B642DCFCD040167E418518
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 20:24:18 +0000
Certificate not after:    Mon 05 May 2025 20:29:18 +0000
Subordinate resources:    AS: 265328
                          IP: 168.181.64.0/22
                          IP: 2804:2e28::/32

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 05:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:2d:b5:0d:30:c1:9a:57:b6:42:dc:fc:d0:40:16:7e:41:85:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 20:24:18 2024 GMT
            Not After : May  5 20:29:18 2025 GMT
        Subject: CN=9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:a6:36:7f:f8:76:32:b6:2e:cc:c8:31:9a:
                    6c:40:1c:7f:02:e0:be:1c:3f:d1:9c:0d:57:3a:6a:
                    ca:ee:ad:0f:8b:b0:b8:ab:1c:30:65:b9:b1:6c:2a:
                    cf:35:e0:32:88:ad:9d:d6:bc:e1:72:b1:b6:01:18:
                    b6:0b:06:f8:f8:c2:1c:52:82:6b:62:a7:3a:f9:af:
                    d8:fa:db:5f:c8:3f:29:59:0a:d5:51:7e:73:dc:71:
                    c7:f9:68:6b:25:8b:d6:e3:88:33:9c:26:e7:af:f6:
                    1f:ec:72:7e:a8:c7:b6:82:5e:ca:c6:8c:c2:16:26:
                    9e:a2:18:db:06:70:2b:5f:0e:13:60:44:7a:4e:8c:
                    e5:84:88:43:14:08:23:85:e5:59:aa:52:d8:98:36:
                    5e:bc:1a:15:b5:42:d4:ee:3a:e0:c1:1d:82:9e:db:
                    bb:f2:e1:c2:8f:24:ac:09:ea:11:bf:6a:b2:9e:ad:
                    e1:fb:b2:9e:51:cf:73:d2:a4:8b:f3:42:bb:4f:02:
                    c1:11:0e:85:17:b7:3a:3b:57:8e:32:9a:f5:16:b0:
                    49:b8:f9:89:8f:0f:f6:82:c1:33:0e:0e:f5:f9:a5:
                    0a:8d:9b:04:23:a8:82:28:db:1e:9c:72:01:52:f5:
                    34:60:55:e4:31:a6:6e:34:bc:3b:be:e1:a1:21:6c:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:E5:BD:9F:77:5A:7B:F3:95:FD:CC:8E:A8:1D:68:9E:5F:04:EC:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22
                IPv6:
                  2804:2e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265328

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:16:8c:15:80:b9:c9:1f:80:28:95:e5:c5:a4:66:6d:e2:
         31:c2:b5:9e:a5:29:85:cf:cc:ea:a1:f7:c2:55:36:1b:86:ca:
         46:58:b9:3c:04:0f:5b:2b:f3:0a:d0:cb:ee:46:7f:bb:76:a8:
         01:cf:f1:cd:db:16:4b:a4:30:13:4e:7d:4f:3c:d6:83:47:f5:
         10:a0:88:57:0b:ff:fe:3d:7a:86:da:2c:14:3d:d5:9d:20:a2:
         cf:34:d5:09:11:58:f6:be:3b:d2:24:b9:e3:fd:c0:a8:75:3a:
         6a:f3:23:83:88:18:c2:1d:69:fa:15:fd:54:84:d8:b8:2a:43:
         78:de:9f:f5:3b:0a:4a:27:9d:7f:84:d2:16:47:81:23:44:9a:
         46:1e:b6:86:31:dc:58:74:7a:cc:f3:7a:78:db:2c:41:7a:d6:
         8e:3e:4e:f0:aa:8a:5e:30:d3:b9:df:65:aa:47:03:cd:1c:58:
         17:cb:9b:ea:b0:27:5b:06:7e:2c:23:c0:84:93:eb:53:ba:03:
         a2:ad:89:1d:63:44:69:86:f8:bf:7b:c3:27:13:b2:c1:60:38:
         ee:cb:5a:6a:4d:e8:82:3e:2f:b2:d3:de:76:43:76:95:fa:f4:
         d4:47:9f:15:6a:18:73:97:79:72:08:88:04:4c:8c:48:b9:fd:
         12:bc:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:58:29 2024 by rpki-client on console-fra.rpki-client.org