Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1326531AB57E6BD31E53DA043D32651C5FA73E0.cer
File:                     A1326531AB57E6BD31E53DA043D32651C5FA73E0.cer (raw, json)
Hash identifier:          egjPy5vrzCxjvNkSs+XWz0csdZ1TN5hJFmIRktw87Q0=
Subject key identifier:   A1:32:65:31:AB:57:E6:BD:31:E5:3D:A0:43:D3:26:51:C5:FA:73:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       158769864DEAC9AD2D86AAB8AA6BCB8071C89EAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/1/A1326531AB57E6BD31E53DA043D32651C5FA73E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:25:38 +0000
Certificate not after:    Thu 03 Apr 2025 12:30:38 +0000
Subordinate resources:    AS: 61697
                          IP: 201.7.212.0/22
                          IP: 2804:1ae4::/32

Validation:               Failed, certificate revoked on Sat 02 Nov 2024 01:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:69:86:4d:ea:c9:ad:2d:86:aa:b8:aa:6b:cb:80:71:c8:9e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:25:38 2024 GMT
            Not After : Apr  3 12:30:38 2025 GMT
        Subject: CN=A1326531AB57E6BD31E53DA043D32651C5FA73E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:f0:71:07:66:82:1d:69:89:a1:80:99:62:
                    d1:98:b2:ee:19:7e:27:16:fc:a7:40:28:9c:3a:91:
                    a3:28:64:0d:08:14:ae:8d:1d:81:cb:af:a1:bb:98:
                    5f:10:c8:22:04:47:cb:c8:2a:42:47:4d:9c:69:0c:
                    7f:b4:c2:fa:41:b3:f5:5e:c3:a0:de:f8:9d:df:71:
                    5c:cf:68:42:6d:99:bd:ec:03:5b:8b:d6:8b:f5:4f:
                    c8:46:1c:e0:10:48:b8:72:10:4c:1d:c4:87:15:da:
                    65:3e:2e:b2:d4:16:ba:0b:6b:b7:1f:90:5b:9c:d0:
                    64:cf:3f:85:5c:90:ae:54:a3:75:33:5b:93:66:72:
                    19:1c:5c:ef:34:6e:ce:35:c2:0b:d8:e0:23:a7:52:
                    8d:88:8f:f1:ef:0c:f0:dd:ac:2b:b7:8a:de:1f:43:
                    88:84:96:ca:ed:f5:f5:46:34:1a:e9:0d:cb:15:53:
                    2a:fe:09:20:fd:c9:4a:51:17:15:32:73:6b:41:a4:
                    be:f8:bf:1d:a6:51:26:56:8b:dd:98:8c:21:b1:08:
                    9d:e8:20:f9:23:ae:2f:3a:91:89:93:96:bf:be:d5:
                    fc:fe:c5:34:ef:03:0d:91:52:88:e5:84:55:24:69:
                    65:34:a4:86:e8:37:31:03:8f:ca:c5:f1:1c:21:22:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:32:65:31:AB:57:E6:BD:31:E5:3D:A0:43:D3:26:51:C5:FA:73:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/1/A1326531AB57E6BD31E53DA043D32651C5FA73E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.212.0/22
                IPv6:
                  2804:1ae4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61697

    Signature Algorithm: sha256WithRSAEncryption
         a2:ec:30:dc:0a:cd:4b:e6:c7:f4:2b:3f:08:62:b3:e1:29:d6:
         fe:f0:b5:c1:8e:3b:e6:a2:55:ea:41:31:7a:3f:02:f1:99:63:
         8c:47:ab:f5:9b:f0:f3:bd:92:91:7d:b3:37:1b:0e:80:41:60:
         00:c7:8a:88:7e:6f:25:43:93:6a:89:3d:e6:36:f4:5d:68:70:
         35:03:e9:34:12:d0:24:65:ec:3e:6c:a7:66:9e:42:9e:41:45:
         1f:bc:a3:47:12:17:2a:72:ad:30:9a:bd:93:54:5e:96:4b:5b:
         18:2b:cc:21:6d:73:23:d4:f5:f6:2c:5e:ee:15:ac:46:3c:5f:
         09:25:6d:0f:a3:55:26:8a:46:12:03:15:db:f4:16:dd:4c:32:
         6c:2e:50:36:5f:cb:3f:f1:79:0c:90:8a:70:80:cb:b6:15:53:
         ee:c2:ff:35:f1:35:12:99:b8:56:7f:80:64:e3:e7:02:c3:03:
         b7:f6:9b:a0:23:22:df:09:3a:df:50:32:4d:fe:d0:62:fc:11:
         21:72:04:bf:13:6d:45:85:55:f2:6b:cf:58:44:a2:15:5b:78:
         08:7f:17:50:70:59:50:7f:ce:11:c7:be:5e:a3:02:3e:58:14:
         ac:2a:5b:52:87:39:bf:0e:7e:de:d4:fa:99:d4:a8:42:6e:c6:
         fe:eb:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 03:41:12 2024 by rpki-client on console-fra.rpki-client.org