Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.cer
File:                     A42CBFC9E49E475B3D40986F62135FE9DE8D3830.cer (raw, json)
Hash identifier:          iXjIcjtUaZfVLSB8ruJ9fnfc7fGwR+accf77Am05p88=
Subject key identifier:   A4:2C:BF:C9:E4:9E:47:5B:3D:40:98:6F:62:13:5F:E9:DE:8D:38:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72C72347104D103ECF6589D14DE2029B7E18A545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Oct 2024 16:18:22 +0000
Certificate not after:    Mon 27 Oct 2025 16:23:22 +0000
Subordinate resources:    AS: 273557
                          IP: 2804:9084::/32
Validation:               Failed, certificate revoked on Sat 11 Jan 2025 06:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c7:23:47:10:4d:10:3e:cf:65:89:d1:4d:e2:02:9b:7e:18:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 16:18:22 2024 GMT
            Not After : Oct 27 16:23:22 2025 GMT
        Subject: CN=A42CBFC9E49E475B3D40986F62135FE9DE8D3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:8a:74:cb:53:c2:6d:10:9e:5f:3b:fb:8f:
                    2a:c2:4a:80:b3:0d:81:43:96:56:b5:e5:ba:8e:ad:
                    aa:04:10:3f:a9:4f:69:80:22:3a:0f:93:99:cf:8a:
                    83:8f:6e:a8:39:05:c9:95:bd:2c:e9:c2:3f:52:a5:
                    f8:53:93:cf:15:a7:39:9f:7b:42:e3:7d:4f:a4:2a:
                    56:9e:64:a5:57:de:4d:01:a0:44:4b:13:2e:c2:84:
                    a8:8d:6a:1d:e2:c5:68:1b:d8:54:c1:1f:68:2a:c7:
                    b0:66:c4:95:e3:d3:a7:6d:10:0a:ca:56:72:e9:c9:
                    59:58:27:96:9c:60:74:45:5d:c1:54:45:38:0b:d6:
                    f8:86:bc:38:31:5f:52:66:82:9f:f4:54:42:13:32:
                    6c:3b:d5:f5:ac:15:d6:7b:e1:51:32:91:c4:f6:76:
                    5f:f4:dc:d7:fa:42:61:15:bf:33:2f:da:fa:b8:53:
                    28:8b:f6:6d:5f:9f:23:38:a3:a3:73:40:53:ed:04:
                    d0:bf:af:2d:e3:8e:e5:37:01:a4:a2:dc:33:4e:fe:
                    4b:ea:82:2c:43:99:a6:95:31:1b:c6:7e:4a:57:b8:
                    28:8b:0b:50:63:1a:38:9b:2c:df:d9:f3:99:43:0c:
                    0e:e2:eb:0d:91:69:2f:18:ec:d1:49:54:55:b5:61:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:2C:BF:C9:E4:9E:47:5B:3D:40:98:6F:62:13:5F:E9:DE:8D:38:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGN2z2ZDbtWUvD1o29rA1dad7cjcoEtdPGbMgjXjgsd7/0/A42CBFC9E49E475B3D40986F62135FE9DE8D3830.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9084::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273557

    Signature Algorithm: sha256WithRSAEncryption
         91:20:e6:d2:1b:c5:85:b0:0b:58:e1:26:74:f9:83:4e:c2:60:
         66:ca:ab:9e:76:19:cc:95:4e:1a:17:c4:68:b8:3a:ea:ea:dd:
         35:a9:95:80:02:14:99:14:5f:fb:3e:e7:8e:cd:ae:19:33:eb:
         c4:ff:10:f9:82:6d:96:fe:c6:ca:a8:fc:80:86:74:f4:dd:19:
         cc:6c:8e:a3:58:60:54:55:4f:81:00:db:0c:4e:e4:e2:18:94:
         b4:a8:f7:15:45:cd:fc:5e:33:56:39:53:37:7c:d4:f9:45:cf:
         60:94:33:c6:82:14:67:ee:8c:cf:fc:18:d5:8b:3b:a6:d7:b9:
         05:9f:51:7f:71:92:ff:09:27:a0:fb:47:de:16:53:bf:a6:ff:
         33:78:b2:db:f2:3e:27:b2:41:d8:62:aa:6d:a7:ff:c9:36:7a:
         79:f7:7e:72:bb:92:ed:96:ec:57:92:b3:13:91:1f:60:67:c1:
         17:34:2a:3c:00:38:c0:f0:84:08:fa:ea:dc:6a:7d:8d:d9:f4:
         5f:f6:72:f9:bd:0b:13:e4:f4:26:87:55:a4:f0:d5:20:cb:ed:
         5e:76:d0:61:db:1f:02:c0:ed:cd:37:ae:78:22:26:3c:26:44:
         13:e9:4b:64:dc:4c:4e:37:2f:23:cd:ce:cc:70:15:a2:b9:c4:
         94:4e:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:32 2025 by rpki-client