Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C660581C9F3C51608829A53B19CA073278E713E3.cer
File:                     C660581C9F3C51608829A53B19CA073278E713E3.cer (raw, json)
Hash identifier:          WcIoaGMp5C/FBCZTo8Y9X3Hwg96YanoRdqAa9Sdg9gM=
Subject key identifier:   C6:60:58:1C:9F:3C:51:60:88:29:A5:3B:19:CA:07:32:78:E7:13:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14754F6D3C23A4A40DF1A366FCC2F83E28984C67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/C660581C9F3C51608829A53B19CA073278E713E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2024 20:11:42 +0000
Certificate not after:    Wed 05 Nov 2025 20:16:42 +0000
Subordinate resources:    AS: 264257
                          IP: 138.118.108.0/22
                          IP: 2804:2510::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 14:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:75:4f:6d:3c:23:a4:a4:0d:f1:a3:66:fc:c2:f8:3e:28:98:4c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 20:11:42 2024 GMT
            Not After : Nov  5 20:16:42 2025 GMT
        Subject: CN=C660581C9F3C51608829A53B19CA073278E713E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:0a:f1:78:1e:ab:41:a6:83:92:f2:e0:c6:
                    31:8a:50:ab:f3:bb:e2:a4:a1:a8:42:3c:6d:6c:e8:
                    3b:45:27:bd:70:0e:bc:0c:df:28:8c:b5:92:37:0e:
                    1d:99:ef:f7:ff:44:dc:54:83:0b:3f:9c:c4:5c:89:
                    18:28:e0:9f:68:fe:f6:4e:95:f8:0f:2a:f1:8b:c2:
                    3c:89:36:dd:1c:8c:53:84:1e:28:4b:7c:3b:26:dc:
                    26:aa:b8:ff:f2:92:30:3f:dd:b0:31:25:ad:ab:0f:
                    b0:24:e5:48:0f:e1:84:bb:e9:c7:72:96:7a:a2:42:
                    ac:a5:ba:6b:22:0e:c4:05:b7:99:69:d0:68:82:20:
                    66:5d:06:36:2a:32:53:55:cb:02:f9:66:34:83:93:
                    f2:d0:26:c5:08:11:0f:bc:b3:35:64:f2:ec:a0:09:
                    fd:df:5a:4c:20:27:cd:bc:61:a2:dc:18:ed:ec:62:
                    db:43:2c:2a:91:80:3d:0c:ae:7e:6b:51:b2:08:35:
                    cf:5c:dd:db:c9:e7:0b:bc:33:e5:39:00:1c:d6:8a:
                    e6:4d:79:da:e6:bc:e8:18:86:43:61:a3:2d:1b:ca:
                    e2:48:88:25:3a:9c:33:8d:c7:54:6b:a8:94:f3:99:
                    39:ee:07:11:6f:61:46:5a:c6:5d:3c:ab:46:bb:c7:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:60:58:1C:9F:3C:51:60:88:29:A5:3B:19:CA:07:32:78:E7:13:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/C660581C9F3C51608829A53B19CA073278E713E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.108.0/22
                IPv6:
                  2804:2510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264257

    Signature Algorithm: sha256WithRSAEncryption
         ce:63:21:ae:df:6e:17:e3:ec:4e:7f:4e:95:4e:c2:58:a8:c4:
         20:ea:65:f9:41:1f:5e:c3:55:c5:91:ff:98:9b:28:c8:f4:93:
         fd:9c:34:d6:48:bc:1d:a1:59:3e:53:13:98:15:e0:8c:b0:03:
         07:fe:ab:b9:c0:b1:fc:fb:ea:7b:5d:7b:89:71:80:99:90:01:
         6a:b6:bd:63:eb:81:6c:a4:d1:ee:1c:fb:46:60:ac:2a:c4:5f:
         03:df:cc:46:a3:0a:44:ad:01:27:85:c4:57:c3:10:04:f0:be:
         13:7e:e7:11:05:71:00:77:e9:32:9b:a5:ae:7c:b0:ad:80:ee:
         df:97:f4:6f:52:52:89:91:92:c1:5c:23:71:81:7b:ea:2d:7a:
         41:ed:c4:e6:90:6e:6d:51:77:27:36:50:50:11:4d:2a:a3:49:
         a9:7c:0d:6f:e4:aa:1c:b2:de:c0:38:60:3d:73:f2:80:1b:9b:
         44:f6:47:44:b8:39:bc:5d:5d:8f:d3:7a:6e:b0:a7:1d:4a:e1:
         ae:ef:f0:55:b4:12:43:6d:e2:b6:04:2a:14:b3:b5:bf:d7:33:
         68:79:cb:fb:48:0d:49:23:f8:d1:3c:e3:19:78:0b:13:0a:66:
         58:50:23:1b:66:53:8c:48:30:f1:de:7e:13:67:a3:68:6c:cc:
         31:3d:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 18:18:42 2024 by rpki-client on console-fra.rpki-client.org