Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer
File:                     AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer (raw, json)
Hash identifier:          zfgG8GOYFjX+ChnX35ewZ9hiUZhYaX4qz2jC15cV+cI=
Subject key identifier:   AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       065CA1896B2760952312726B556D34DF75C3B88A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/AA7F3B6BBB93519197F744AAD322DACA6D94222A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 13:38:50 +0000
Certificate not after:    Mon 08 Sep 2025 13:43:50 +0000
Subordinate resources:    AS: 53019
                          IP: 177.70.160.0/20
                          IP: 2804:5dc::/32

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 16:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:a1:89:6b:27:60:95:23:12:72:6b:55:6d:34:df:75:c3:b8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 13:38:50 2024 GMT
            Not After : Sep  8 13:43:50 2025 GMT
        Subject: CN=AA7F3B6BBB93519197F744AAD322DACA6D94222A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:66:7f:0c:1e:86:e5:ad:1c:74:87:3d:1f:
                    ac:39:5a:f5:ad:2c:db:0e:ef:8d:1a:eb:3a:a8:f8:
                    79:b9:75:ed:d5:db:e2:90:7e:bc:85:39:8f:a5:d4:
                    41:6a:88:bc:6d:cb:e2:d3:ae:dd:d2:b3:6e:1d:17:
                    f4:9a:4d:af:7a:7b:0a:d6:dc:48:8f:30:c6:0a:de:
                    ff:aa:97:b9:e3:81:df:7b:be:5d:a8:05:bb:24:75:
                    2a:3f:02:70:97:be:51:6e:0d:5c:8c:25:b2:3d:ee:
                    01:92:a7:55:41:d3:2d:70:c8:2b:e8:e8:32:d4:3f:
                    fe:95:50:df:08:0e:80:29:82:ab:9f:68:08:41:52:
                    33:5e:eb:1e:d4:b1:80:30:57:a9:a2:24:ab:ba:d5:
                    b9:81:20:ab:ed:02:c0:c4:45:8b:75:d8:14:f5:03:
                    60:2a:63:4d:07:32:8b:64:82:82:43:02:4b:e5:ef:
                    56:0a:86:a5:97:ed:1f:ff:0e:bb:2b:f4:53:05:d4:
                    f3:82:ed:4f:0a:6b:cd:00:7d:b7:42:d1:31:d4:b7:
                    ac:71:fd:2f:f8:d1:7d:89:1d:08:68:23:83:74:a2:
                    ae:1f:8d:82:0f:79:b2:fd:24:5c:a0:9f:1c:ca:b8:
                    74:a8:de:68:0f:05:68:87:95:df:a1:4c:ad:c7:e4:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/AA7F3B6BBB93519197F744AAD322DACA6D94222A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20
                IPv6:
                  2804:5dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53019

    Signature Algorithm: sha256WithRSAEncryption
         bf:70:d6:8d:50:77:68:13:0e:ee:7f:23:9d:00:2d:49:8d:d1:
         8f:fc:0c:ff:04:91:aa:f1:67:19:c7:8c:2c:6f:bd:f1:2a:37:
         87:c2:0a:6e:83:cd:12:06:bf:ad:8c:0f:00:e8:85:66:f3:d3:
         a4:9d:57:0b:fd:34:e7:84:12:e1:96:a3:24:ce:3e:9e:3b:83:
         06:a0:f5:50:79:09:d4:20:d5:71:3b:ef:49:ba:ca:8d:e4:07:
         ac:94:31:1c:c3:af:b2:51:d4:f3:95:d3:83:00:f8:3b:bb:b9:
         15:c6:44:59:1c:09:f3:4f:c2:31:d6:61:6e:77:e0:95:fd:a3:
         39:17:46:76:ad:c9:3c:dd:78:5c:26:ff:8f:cd:22:eb:b5:63:
         e1:48:7f:ac:7f:82:58:d4:cb:31:fd:0d:3f:e1:d0:bc:fd:b1:
         2c:c3:08:44:77:4a:c0:19:00:e2:af:93:ee:8b:99:0c:35:a3:
         77:0c:8e:15:08:ff:2c:3e:8b:28:3d:0d:33:c3:f8:7e:fe:48:
         d9:80:a1:0a:7d:0a:9d:9e:36:f2:58:97:49:71:09:e9:f0:6a:
         62:88:ec:5b:14:e8:79:89:6c:5d:97:fa:e7:16:59:84:4f:dc:
         dd:50:d2:ef:5d:db:88:28:7c:62:4a:1e:b6:71:21:76:aa:48:
         b3:67:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 18:21:07 2024 by rpki-client on console-fra.rpki-client.org