Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1843102067FB23FBAB8B22D1C13BCAE19F8B321.cer
File:                     C1843102067FB23FBAB8B22D1C13BCAE19F8B321.cer (raw, json)
Hash identifier:          gkDAzCnJuTQgY0oXxhrQLQ7fHtzHV0f9HcidbEtS+s0=
Subject key identifier:   C1:84:31:02:06:7F:B2:3F:BA:B8:B2:2D:1C:13:BC:AE:19:F8:B3:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       110A7F7445898B133B57D858429172AFC243DA5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/C1843102067FB23FBAB8B22D1C13BCAE19F8B321.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Sep 2024 15:04:53 +0000
Certificate not after:    Tue 23 Sep 2025 15:09:53 +0000
Subordinate resources:    AS: 269292
                          IP: 45.183.212.0/22
                          IP: 2804:625c::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 15:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0a:7f:74:45:89:8b:13:3b:57:d8:58:42:91:72:af:c2:43:da:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 15:04:53 2024 GMT
            Not After : Sep 23 15:09:53 2025 GMT
        Subject: CN=C1843102067FB23FBAB8B22D1C13BCAE19F8B321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:1d:84:79:fa:77:42:6f:4e:5c:c0:9c:31:
                    21:1d:55:45:d1:29:45:6e:06:74:1b:1c:a1:0d:9c:
                    f4:e6:40:39:b8:f6:39:a1:cb:54:66:1a:37:6b:a9:
                    06:e7:88:64:2b:94:ec:62:fe:c4:26:37:5a:07:52:
                    1d:ca:70:e2:dc:58:48:18:5d:df:ec:69:c0:c8:b2:
                    47:a1:21:82:16:74:89:1a:3a:a3:f8:89:e1:b4:1a:
                    72:80:1f:8e:e5:d8:ae:c0:bb:9c:e0:54:23:f8:90:
                    3b:23:97:0e:d4:3d:6e:20:a4:d9:9c:f2:3b:51:e9:
                    85:7d:bd:c8:97:87:86:c0:89:5a:48:fe:04:6a:5f:
                    a9:a0:95:3d:ee:5c:2a:55:73:32:51:a0:c3:6f:85:
                    95:05:f3:a2:d1:c1:d6:5c:d4:88:08:6e:0c:79:74:
                    d9:56:15:b7:74:9e:ce:3b:cb:57:21:da:90:0c:a2:
                    75:2b:32:e5:e9:70:7e:65:c6:bb:32:91:19:24:28:
                    5a:c9:eb:b6:16:31:02:cc:f1:ee:5a:56:08:bd:48:
                    77:cd:0d:b7:ba:ec:65:d7:fb:0d:e2:67:6b:a3:71:
                    25:61:7a:84:9f:9b:d3:8a:0b:03:86:2a:5b:c8:f3:
                    7d:04:62:1b:dd:c0:dd:44:63:1c:e0:e2:d3:92:75:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:84:31:02:06:7F:B2:3F:BA:B8:B2:2D:1C:13:BC:AE:19:F8:B3:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/C1843102067FB23FBAB8B22D1C13BCAE19F8B321.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.212.0/22
                IPv6:
                  2804:625c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269292

    Signature Algorithm: sha256WithRSAEncryption
         59:af:e1:d8:e5:ad:67:08:9c:57:b0:a1:47:75:7f:0e:4f:9d:
         d8:fe:ba:b4:ca:62:dd:53:58:30:17:43:ca:64:5f:d1:37:9e:
         2c:fc:cc:9a:f1:1e:24:ee:64:be:51:f9:5d:10:eb:64:dc:5a:
         17:63:be:b7:67:56:0d:f0:82:df:ba:ba:a5:17:4f:38:54:74:
         45:49:07:c1:67:cd:f2:3f:3e:6d:90:33:6a:1f:85:91:4a:03:
         0e:e5:5f:f0:c5:62:38:28:51:c8:10:3e:97:2f:b1:a9:a5:f8:
         73:ff:64:fe:49:d0:2f:e6:fc:f8:a2:ce:82:b1:76:22:1a:f0:
         d4:a2:29:0f:4f:ab:0a:18:be:77:8f:25:a7:19:1b:54:c6:34:
         67:34:bb:fc:f3:e1:b5:5d:cf:dd:d9:5b:f6:9f:fd:2e:d3:33:
         0f:d9:30:45:36:04:f4:f8:94:13:20:83:95:5b:6c:71:21:a7:
         b7:37:b7:bc:cc:56:60:10:74:4b:bd:1d:9d:93:3a:8f:d2:d8:
         9f:b5:c7:4e:ce:5a:97:9c:11:6d:36:99:ff:08:cb:cf:68:48:
         ac:7d:ac:2d:d8:65:de:a7:3d:32:a1:f4:6f:b4:0a:fd:62:0f:
         bf:f5:e7:9a:77:56:c8:78:f3:7e:f5:d9:59:10:ae:7c:e4:57:
         60:2e:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 20:37:44 2024 by rpki-client on console-fra.rpki-client.org