Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer
File:                     D90441ECB74943D30081300B753529BADC36D40B.cer (raw, json)
Hash identifier:          Cnc751WZSAxghe2jLixwRXbe2cUW/2ro0VzJ0JA/zQk=
Subject key identifier:   D9:04:41:EC:B7:49:43:D3:00:81:30:0B:75:35:29:BA:DC:36:D4:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FE0004F10E326B782CD5C06A615A27F85DFFB9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 22:12:26 +0000
Certificate not after:    Sun 06 Apr 2025 22:17:26 +0000
Subordinate resources:    AS: 263164
                          IP: 191.6.164.0/22
                          IP: 2804:17ac::/32

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 17:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e0:00:4f:10:e3:26:b7:82:cd:5c:06:a6:15:a2:7f:85:df:fb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  7 22:12:26 2024 GMT
            Not After : Apr  6 22:17:26 2025 GMT
        Subject: CN=D90441ECB74943D30081300B753529BADC36D40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:e3:00:47:87:63:35:dc:f2:55:c0:5e:4d:
                    59:9d:4b:37:26:df:5c:03:19:13:ed:1d:62:56:38:
                    f6:04:80:75:cb:2b:ed:ff:f6:e6:fb:ad:ad:b6:85:
                    95:47:87:6c:b3:df:79:0a:2f:9a:f9:5f:7d:ae:73:
                    3d:ef:ea:c3:17:dd:9a:59:e8:2e:75:12:0a:f5:c9:
                    a7:35:f7:32:d7:22:d8:01:29:fd:90:46:84:70:85:
                    8a:7e:d1:32:34:fb:b6:45:79:ef:25:b2:68:93:95:
                    61:19:51:b0:6a:71:f0:63:21:e7:a8:17:45:a4:0d:
                    10:92:db:70:ca:78:a4:e2:14:9e:fb:c2:40:6b:a3:
                    20:b7:00:e1:6b:12:f0:7e:96:2c:cf:c8:93:05:c6:
                    e8:8f:7a:c6:51:fc:d9:f9:61:e7:89:5a:13:3f:32:
                    db:ed:e2:2b:cd:73:fe:fc:57:d4:63:d7:5f:7c:fd:
                    09:e8:74:cf:fa:bd:35:65:b2:c0:ae:9a:3e:50:02:
                    fd:e8:aa:06:0e:0d:f1:68:71:b8:bc:c5:dc:43:a3:
                    3b:65:da:d5:14:7a:c5:46:ac:8f:27:00:3f:ba:49:
                    cc:8b:c7:e3:7e:01:17:83:b6:bd:03:6f:bb:ce:51:
                    11:20:d8:48:1e:eb:f9:6e:ac:a4:51:97:8a:20:b1:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:04:41:EC:B7:49:43:D3:00:81:30:0B:75:35:29:BA:DC:36:D4:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/22
                IPv6:
                  2804:17ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263164

    Signature Algorithm: sha256WithRSAEncryption
         c8:b0:c4:6e:7b:d3:47:6c:f9:be:2a:62:dd:2b:a8:bb:fa:55:
         a8:87:70:25:8d:84:2f:6d:01:67:17:39:9c:00:a4:3c:dd:67:
         32:90:30:28:73:bc:ac:8f:fc:6b:30:8b:9e:21:f3:d9:b9:f3:
         8b:b6:40:69:e6:76:4b:5e:e0:7f:55:d1:fc:a2:d7:2a:fd:27:
         81:42:68:8c:ea:f6:89:f9:55:7b:16:70:25:3b:5a:7d:a8:ee:
         92:a9:fc:3f:fc:a7:e3:5b:cc:d3:c7:95:9e:a5:65:c0:0f:70:
         12:3a:05:19:5b:b4:bc:24:4c:c3:69:45:c6:4e:15:51:74:f8:
         0f:eb:35:93:0f:a5:05:c6:36:6b:69:f5:7b:f9:fb:0b:b9:a6:
         c0:b2:27:f7:a2:6e:18:ce:46:87:bb:7e:f3:8d:9f:fc:ef:f8:
         ff:b0:f8:bd:be:61:f0:9d:fc:5a:84:bd:7e:df:35:3b:8e:60:
         13:d4:d5:99:3e:05:ae:b4:75:8d:7c:83:04:5f:b9:95:90:fc:
         47:18:dd:a5:e2:be:4f:04:41:7b:52:31:7d:9a:d8:16:56:d6:
         2d:ae:01:b0:ee:58:b0:e5:b6:19:4a:c8:b8:0a:a1:a3:1e:e1:
         58:c0:78:7f:1c:48:02:7a:85:9d:c9:53:a6:8f:8f:38:da:52:
         a4:e8:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:04 2024 by rpki-client on console-fra.rpki-client.org