Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
File:                     D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer (raw, json)
Hash identifier:          i5V26D/E2VFXKnE0MbyYG550MthAMKiW5PIOEOFqhMI=
Subject key identifier:   D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51862675CB01E90A2353083F129464770E71B438
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:22:38 +0000
Certificate not after:    Wed 02 Apr 2025 22:27:38 +0000
Subordinate resources:    AS: 269423
                          IP: 45.186.120.0/22
                          IP: 2804:645c::/32

Validation:               Failed, certificate revoked on Thu 02 May 2024 05:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:86:26:75:cb:01:e9:0a:23:53:08:3f:12:94:64:77:0e:71:b4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:22:38 2024 GMT
            Not After : Apr  2 22:27:38 2025 GMT
        Subject: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:a0:58:3c:07:65:2f:e0:60:af:00:98:3b:
                    99:b5:d6:e1:cf:69:a6:16:c0:99:b5:f5:57:32:e5:
                    05:db:65:23:5a:cf:c5:3d:75:f4:26:b6:1b:10:3d:
                    20:6b:d4:36:ee:ed:7e:6b:88:f2:d9:3f:a2:9d:96:
                    b9:1d:a7:b4:c3:00:b8:cf:f5:01:35:9c:07:cf:39:
                    84:51:32:b7:10:39:e7:36:ca:20:27:f5:9a:7c:33:
                    81:bd:d2:c5:44:a4:f6:7e:79:d3:ae:b1:3c:8b:f3:
                    2a:0b:9b:38:d3:1f:7c:7c:b2:7b:36:2b:7d:2d:9b:
                    16:0e:6f:1c:6e:59:45:09:fb:06:4a:46:4e:87:13:
                    fd:aa:dd:be:c9:83:63:33:23:da:52:b6:5d:5a:b2:
                    49:8d:0c:8e:6c:ac:61:df:10:c5:eb:de:65:c0:9a:
                    b0:8d:6e:19:2d:eb:e8:a8:36:87:43:13:9b:3b:16:
                    b0:49:3a:85:78:6f:3f:65:ca:eb:4c:6b:3b:41:c7:
                    e5:28:12:c4:a5:d0:27:32:81:66:df:0f:2e:97:e3:
                    33:2a:29:49:a4:ad:75:27:9f:42:a2:d9:e6:84:49:
                    c8:26:8d:c3:99:f6:8f:f5:15:a4:35:e5:81:9f:cc:
                    5a:1d:c6:a0:d0:8e:cd:2d:36:4e:13:c8:f2:3c:16:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/22
                IPv6:
                  2804:645c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269423

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:01:a2:0c:8a:3c:9e:29:03:06:d7:d2:e7:5e:b2:3c:0b:
         5c:19:a6:12:70:39:7e:83:4e:2f:f1:47:8d:85:6c:71:27:a3:
         b9:56:67:2b:e5:5f:f2:1e:6f:eb:76:d8:31:c6:36:d2:76:18:
         fc:0e:ae:de:79:08:b7:08:e9:78:b9:2f:a8:16:df:1e:e5:f5:
         87:10:e3:cc:98:5b:f0:8b:55:95:9e:77:78:02:4b:5e:ab:35:
         dd:b2:10:b9:1a:f2:d7:e0:58:56:fb:af:fd:8c:9c:ef:96:a8:
         b8:d1:b6:c3:52:2a:90:9a:49:82:ec:2a:e6:8a:17:0b:90:6e:
         00:6e:5e:a8:80:4c:d9:df:ce:33:6c:e6:35:32:07:94:d0:c2:
         e9:1e:09:b5:86:1c:59:65:eb:e3:1d:cd:57:9f:11:64:52:45:
         c5:c6:19:11:3b:2a:a8:a3:0f:a0:53:79:4c:82:fb:bc:82:37:
         88:2b:01:d9:e9:35:7a:aa:e3:64:5b:8d:5e:06:1b:86:a6:0d:
         02:ff:08:ea:07:26:a8:10:29:63:8d:e3:24:15:59:d2:89:32:
         47:dc:da:72:24:c1:c8:45:2b:fb:ca:e9:43:fa:da:ff:c9:2f:
         65:63:d8:6b:b0:88:25:b2:30:0b:7f:01:6a:dc:8f:a0:69:f1:
         8a:7d:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org