Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2DB358EECC299F730CA1AD94A43EB94156141AA.cer
File:                     A2DB358EECC299F730CA1AD94A43EB94156141AA.cer (raw, json)
Hash identifier:          h5hAZggTLCOe3pwZa1Z6gVWUexRYr7FGs2aXeVuhKpE=
Subject key identifier:   A2:DB:35:8E:EC:C2:99:F7:30:CA:1A:D9:4A:43:EB:94:15:61:41:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D7EC6F8953EE26E37D1BF2B51F71489EFF85D3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/A2DB358EECC299F730CA1AD94A43EB94156141AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 14:53:40 +0000
Certificate not after:    Thu 26 Jun 2025 14:58:40 +0000
Subordinate resources:    AS: 271554
                          IP: 179.63.96.0/22
                          IP: 2804:7d54::/32

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7e:c6:f8:95:3e:e2:6e:37:d1:bf:2b:51:f7:14:89:ef:f8:5d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 14:53:40 2024 GMT
            Not After : Jun 26 14:58:40 2025 GMT
        Subject: CN=A2DB358EECC299F730CA1AD94A43EB94156141AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:68:38:e1:33:6a:76:08:04:d4:b9:a3:4b:
                    a9:4c:48:5a:da:a3:d1:3e:4e:05:0e:82:fe:63:4f:
                    9c:8a:10:a2:ef:66:25:b7:a2:07:74:64:5a:19:ec:
                    fe:27:e4:11:2f:44:ef:f8:61:35:76:70:88:d4:e0:
                    fa:dd:89:dd:80:98:27:da:cf:f2:d2:03:bd:02:10:
                    e1:a9:1a:b1:91:eb:3f:b3:75:16:79:f5:68:d1:94:
                    08:c2:4c:17:8d:63:8e:14:2d:b4:b9:dd:8d:66:53:
                    e3:38:b0:d6:b4:01:2b:c2:1e:36:aa:14:82:0f:4e:
                    0b:fb:f7:96:66:2e:c7:06:f9:c0:4c:80:20:b1:53:
                    8f:f6:50:04:5e:32:27:d0:53:9f:7b:e8:15:e1:f1:
                    03:dd:cd:61:17:88:46:52:a4:95:0c:26:65:5d:b0:
                    b3:1e:c0:d6:f2:52:72:86:b2:24:f4:5d:ed:17:e6:
                    66:57:e6:8e:b0:67:ad:dd:23:00:c1:a8:14:af:d9:
                    d3:86:93:e0:c2:d3:d2:77:6d:24:85:95:17:96:99:
                    44:68:bb:c3:1a:00:e5:c4:20:60:9a:5b:a0:d8:98:
                    a2:39:6e:76:51:0c:dd:0a:4f:d7:af:4c:42:cc:49:
                    d1:2c:e5:f8:8e:6e:ab:11:0d:66:15:c6:70:ca:0c:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:DB:35:8E:EC:C2:99:F7:30:CA:1A:D9:4A:43:EB:94:15:61:41:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/A2DB358EECC299F730CA1AD94A43EB94156141AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22
                IPv6:
                  2804:7d54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271554

    Signature Algorithm: sha256WithRSAEncryption
         61:78:a7:b2:34:56:1f:46:6c:fd:4c:22:24:9c:d6:27:ec:58:
         63:14:4d:46:13:5c:15:31:f1:ec:a7:e5:1d:9d:08:69:5f:54:
         86:f7:b3:cc:e7:79:59:04:15:4e:0b:66:fb:ef:09:ed:a2:e4:
         92:ba:1b:57:63:ea:81:b8:bc:ac:e2:71:ca:10:85:8b:a2:9a:
         bd:6e:7d:05:87:64:d4:f2:61:b5:be:36:32:39:25:3b:b3:db:
         f6:0e:71:9a:68:42:4e:57:55:5e:99:d0:7e:08:35:9c:df:d0:
         31:d2:42:d5:d6:79:08:9d:1a:b6:8d:66:79:f5:56:7c:7d:f2:
         c4:d0:21:80:1d:1b:7f:c2:48:7b:b5:32:02:e8:e5:56:da:94:
         b6:ff:a5:90:0a:e6:8d:49:da:fe:f1:00:0f:47:81:b7:89:37:
         22:76:59:70:bc:18:eb:eb:c0:e6:24:3c:b4:e9:59:c2:0b:02:
         5a:cf:ee:65:42:fc:d8:a9:6f:60:f1:1c:03:3a:d8:05:60:1a:
         36:ad:aa:de:6c:c9:15:5c:ed:d4:74:e9:1c:a6:64:8c:92:20:
         21:a8:13:9d:e7:1e:ec:27:23:d6:22:e1:34:e0:f9:ad:13:df:
         4a:82:b5:39:73:f1:52:c2:5b:2a:d6:11:c6:5e:e4:9f:4f:20:
         b7:b8:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 04:18:51 2024 by rpki-client on console-fra.rpki-client.org