Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F4FB7774DBB2A5738ED411A652B94DEF9873A05.cer
File:                     9F4FB7774DBB2A5738ED411A652B94DEF9873A05.cer (raw, json)
Hash identifier:          yAvkQ2AmLkGQMLY9m3MKXFK9jNhwhZrYC2XER0RzNW4=
Subject key identifier:   9F:4F:B7:77:4D:BB:2A:57:38:ED:41:1A:65:2B:94:DE:F9:87:3A:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C6C8109E0445D12B1C3C0819B9E0F75F3B4F3D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/1/9F4FB7774DBB2A5738ED411A652B94DEF9873A05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 13:14:10 +0000
Certificate not after:    Fri 07 Nov 2025 13:19:10 +0000
Subordinate resources:    AS: 263110
                          AS: 266177
                          IP: 170.239.132.0/22
                          IP: 177.137.96.0/20
                          IP: 200.106.148.0/22
                          IP: 2804:16f4::/32
                          IP: 2804:3be0::/32

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6c:81:09:e0:44:5d:12:b1:c3:c0:81:9b:9e:0f:75:f3:b4:f3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 13:14:10 2024 GMT
            Not After : Nov  7 13:19:10 2025 GMT
        Subject: CN=9F4FB7774DBB2A5738ED411A652B94DEF9873A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:fe:8f:6c:8d:6b:71:13:5a:63:26:82:bf:
                    35:05:05:fc:29:dc:92:37:fe:5a:04:20:b2:6d:6d:
                    66:6a:16:77:85:64:d6:47:46:e5:9a:b5:32:ed:34:
                    fd:2b:35:f2:60:b6:53:a6:97:60:9d:8a:d4:1f:6a:
                    de:25:7a:09:b6:87:8f:37:76:96:8f:2d:1c:4c:ad:
                    64:6c:4b:fe:19:9d:11:62:2b:38:17:89:f2:e7:23:
                    4d:78:75:00:36:be:a6:0e:76:83:93:a4:77:5d:a5:
                    b1:30:5e:d8:85:bd:09:20:e7:8d:3b:34:8c:d0:ef:
                    26:08:1d:6f:cb:80:29:e2:a8:bf:ad:7c:b5:b5:90:
                    d6:ed:af:69:70:82:fc:d2:75:0c:a8:3d:39:d9:cc:
                    cf:82:6b:97:8f:64:06:21:74:a7:3c:6e:df:8b:06:
                    59:83:91:b8:d7:40:ce:14:13:11:6f:76:88:87:2c:
                    1d:6f:af:28:fc:0f:27:6d:79:da:ae:fc:8a:33:dc:
                    1d:80:03:0e:38:57:09:77:a2:5f:87:bc:0f:12:b9:
                    b1:e9:e7:ae:69:df:f8:bb:1d:eb:cf:50:7a:03:89:
                    2f:a4:54:6d:19:a7:39:bf:ec:c5:db:08:49:85:f7:
                    68:df:4b:b5:a3:5a:64:83:29:ec:b7:25:63:17:b6:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:4F:B7:77:4D:BB:2A:57:38:ED:41:1A:65:2B:94:DE:F9:87:3A:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/1/9F4FB7774DBB2A5738ED411A652B94DEF9873A05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.132.0/22
                  177.137.96.0/20
                  200.106.148.0/22
                IPv6:
                  2804:16f4::/32
                  2804:3be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263110
                  266177

    Signature Algorithm: sha256WithRSAEncryption
         a3:cf:44:66:6b:ac:b9:f4:7c:3c:fc:45:82:c1:0b:a2:da:17:
         b5:87:06:76:8e:e3:48:ea:07:d1:cb:c7:71:02:c7:1b:8e:cb:
         1f:08:bf:75:42:11:f3:44:50:7f:56:3c:04:9e:95:eb:56:2c:
         47:fa:18:c2:99:d4:4a:17:cb:ed:31:fe:99:26:c4:a0:75:45:
         e1:cb:1e:56:4f:2f:07:c7:cc:3d:cc:ad:74:5b:b3:69:1f:73:
         27:49:00:96:ab:40:c8:d0:ee:98:82:67:0d:1d:35:e7:9a:3e:
         77:db:da:e1:09:c4:c7:91:c1:75:8a:f3:13:b5:b7:5d:03:7f:
         46:05:f7:7f:60:40:80:8f:97:0e:70:89:62:68:ac:1b:1a:6e:
         71:74:b8:28:74:36:9a:f7:29:f3:c5:f8:60:3c:e1:04:e5:5f:
         2f:6b:15:81:75:3a:dd:84:8c:29:41:bd:34:9d:c4:66:fa:71:
         08:8a:c5:2f:ba:dd:5c:2f:26:ed:1b:6d:22:58:60:44:8a:37:
         07:48:ef:0d:0c:7d:09:87:7a:8b:0f:e7:09:d9:ad:82:50:a9:
         76:f2:3a:da:15:4d:3a:96:d6:ea:83:4b:33:ca:1c:88:dc:d9:
         30:84:52:0d:13:dc:85:be:17:40:ca:76:4e:81:51:6b:1b:1c:
         fe:70:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 16:47:20 2024 by rpki-client on console-fra.rpki-client.org