Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
File:                     B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer (raw, json)
Hash identifier:          I+zy391G3jiuHBp0+natRxj9q8p8MOo45L0S7LnzZTs=
Subject key identifier:   B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       016079A675A23A4EFA2795C2F523E8933B6073D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Oct 2024 12:40:49 +0000
Certificate not after:    Mon 27 Oct 2025 12:45:49 +0000
Subordinate resources:    AS: 273444
                          IP: 2804:8eb8::/32
Validation:               Failed, certificate revoked on Sun 26 Jan 2025 18:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:60:79:a6:75:a2:3a:4e:fa:27:95:c2:f5:23:e8:93:3b:60:73:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 12:40:49 2024 GMT
            Not After : Oct 27 12:45:49 2025 GMT
        Subject: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:45:a0:82:93:2f:44:e0:45:b6:26:96:39:
                    f0:73:01:6d:21:8f:61:aa:b1:34:4a:32:c0:67:19:
                    08:a0:f8:25:90:86:78:ab:7d:f7:8a:26:55:52:7b:
                    cf:68:61:c5:eb:2a:10:c2:a0:e2:88:77:64:8e:d7:
                    28:82:40:97:26:77:44:69:1b:ba:c2:3a:4e:c9:16:
                    65:46:35:26:5c:59:f0:c6:fa:b3:d4:da:9a:63:4f:
                    88:54:e6:7c:89:5f:83:11:57:26:66:56:b7:d1:e0:
                    fe:8b:9a:75:f7:40:86:1e:26:bd:c2:9d:f7:7c:a6:
                    c8:52:37:b4:16:ea:fc:22:e8:5c:bd:1e:d3:5c:10:
                    d8:d1:df:48:fc:a5:ef:8e:63:95:f7:74:1b:ba:b5:
                    d1:96:15:22:7a:3a:bc:ff:c1:dd:48:69:3d:5f:b3:
                    52:e3:99:18:29:f4:62:7b:33:d0:34:6a:fd:5b:5c:
                    81:21:b2:2b:34:50:4d:ab:d0:c5:27:4b:e4:9d:ef:
                    42:dd:af:dd:1c:98:be:14:c6:d1:62:5d:7b:09:4b:
                    6b:cf:9d:22:14:0d:2c:a7:1c:f5:41:cf:b9:12:08:
                    91:11:07:3d:a7:b2:d0:14:97:14:68:6a:0d:fa:f3:
                    97:5d:64:96:79:98:33:e4:18:80:3e:3e:32:a3:4b:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273444

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:19:d2:9f:27:53:ab:35:0d:71:57:c6:83:01:9a:22:a1:
         6d:12:20:73:96:1a:01:ab:c4:a4:3a:90:6f:54:6b:a8:62:19:
         61:09:02:9a:53:6b:a3:fc:5f:2b:3e:90:9a:05:87:41:aa:17:
         f7:dc:e1:a1:2f:53:9d:5e:c3:56:0e:15:f7:d8:e0:b4:37:fc:
         a4:b5:3c:08:72:96:c7:a6:8a:3c:4c:0a:ef:62:2f:2c:bb:0f:
         f0:76:9a:99:84:11:bc:36:8c:0a:6d:64:2d:a7:00:34:4f:eb:
         e4:58:8a:7b:39:9b:fc:c9:9f:2f:52:38:30:26:87:0f:9a:57:
         19:91:09:95:04:43:9f:51:8d:71:ab:84:e2:3f:12:f9:0d:6e:
         16:3d:e7:96:c1:36:9a:b2:75:ee:c7:39:a7:43:d8:ce:f2:ec:
         ae:cc:3a:66:d5:47:f0:1d:2b:44:a1:c5:67:c1:2b:86:1f:a7:
         e9:8a:bb:c9:8d:72:b2:94:58:5e:38:5d:78:35:2f:20:68:24:
         b4:05:cf:7c:df:b7:ac:42:ae:c2:fc:01:f6:28:20:04:f2:31:
         7d:98:7d:57:ca:fe:b4:f3:97:f4:82:64:64:b0:2a:fa:1b:3a:
         7c:6a:b0:82:1c:06:81:57:e1:32:68:bf:25:38:5f:3d:20:37:
         4d:56:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:20 2025 by rpki-client