Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.cer
File:                     DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.cer (raw, json)
Hash identifier:          XKyswW6TO7LY1Livm0Xp7cOaVcxz+4rhI16UzWFTt5c=
Subject key identifier:   DA:F1:A7:EA:4B:52:F9:00:2A:0F:4A:BB:BF:F6:79:FA:8C:85:96:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53CBF40AB6B6F5EF657CF2AF6B5019EC15B6853B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 13:36:05 +0000
Certificate not after:    Mon 30 Jun 2025 13:41:05 +0000
Subordinate resources:    AS: 263841
                          IP: 138.185.192.0/22
                          IP: 2804:2698::/32

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 09:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cb:f4:0a:b6:b6:f5:ef:65:7c:f2:af:6b:50:19:ec:15:b6:85:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 13:36:05 2024 GMT
            Not After : Jun 30 13:41:05 2025 GMT
        Subject: CN=DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:6b:70:13:11:60:9a:cf:03:da:f3:72:1f:
                    30:a1:66:7b:e8:ac:33:62:d3:e6:27:77:31:34:8b:
                    1a:af:f6:a5:42:a3:2d:9f:ae:88:30:14:2f:47:82:
                    4f:4f:08:ff:f9:cb:cc:3c:eb:22:b8:fe:cd:46:bd:
                    23:d7:32:0a:f9:38:61:f8:ee:5e:e5:9f:1a:01:61:
                    a0:e0:57:2b:ba:03:7a:ed:d9:da:8c:27:bd:70:a0:
                    ec:75:cd:4f:83:f4:c4:90:53:05:c8:50:c7:30:6b:
                    96:07:2d:b7:24:05:dc:a1:79:6d:90:ae:28:31:09:
                    f4:62:02:ef:76:22:54:90:d2:5d:61:42:b0:73:5f:
                    bf:63:ff:93:82:e3:23:d6:f3:c3:fe:7f:3c:58:00:
                    7c:50:55:f2:ea:af:b8:b3:29:5c:e9:a7:ef:03:f9:
                    11:3e:16:e2:77:ab:77:72:ed:ad:3a:12:d0:25:30:
                    d2:e0:c8:98:5a:ff:19:89:2b:28:33:71:5b:1b:3e:
                    f6:e7:ae:82:53:cc:21:db:6d:d2:bd:0f:bc:4d:a6:
                    0b:5c:6b:b4:ed:13:49:19:11:57:7c:b3:71:8c:f5:
                    93:35:08:c5:81:6b:e1:73:c3:6e:0b:6f:13:f7:00:
                    43:ca:a5:e3:71:c5:49:6e:38:62:bc:07:12:b7:9b:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:F1:A7:EA:4B:52:F9:00:2A:0F:4A:BB:BF:F6:79:FA:8C:85:96:22
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.192.0/22
                IPv6:
                  2804:2698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263841

    Signature Algorithm: sha256WithRSAEncryption
         d8:be:ef:a1:6c:d3:1d:1e:ab:da:fb:7f:c0:e4:95:f7:77:e5:
         30:6d:09:24:5c:19:8a:06:39:e3:ba:56:5d:6f:84:9d:c4:f5:
         8d:19:af:c0:46:71:9a:84:7a:bb:01:e2:de:00:01:c3:d5:64:
         a4:b0:e6:bc:66:84:77:a7:4b:58:21:62:63:df:b9:39:48:27:
         f7:cd:12:75:b1:69:a6:98:e9:a8:28:76:6b:31:e5:bb:0b:7a:
         49:a6:26:1e:9d:56:30:7b:01:20:be:32:8c:c5:f3:c3:2f:ac:
         8b:70:69:28:28:8d:a6:91:e8:bf:17:7f:31:af:38:36:ca:26:
         b9:e7:7c:3b:b1:3e:97:4d:41:81:c6:c9:99:19:1c:01:08:ec:
         cc:cd:9c:ee:a1:58:4a:34:12:e1:bc:5e:41:1d:74:26:d6:90:
         5c:38:ff:9b:e8:41:64:7b:d2:0a:21:9e:c7:fd:c7:a1:d9:d0:
         ae:de:01:55:f6:bd:13:3e:cb:0c:68:3c:43:3e:e1:57:08:b0:
         10:91:6d:36:c5:7a:53:4f:79:9f:b3:85:3e:a2:af:ee:5a:1a:
         c7:7c:a7:66:ff:89:0a:c4:a2:ab:50:84:f2:c8:b2:75:72:80:
         16:24:61:0d:e5:c2:99:bf:20:87:92:c2:c6:8b:ee:e1:15:cc:
         dc:d9:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 11:22:37 2024 by rpki-client on console-ams.rpki-client.org