Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer
File:                     DB78049BFAA2384D5A158AA82F18399C706E6157.cer (raw, json)
Hash identifier:          fuTP+iCCQUjj7GapJ+RBoxqNcZX9HSnE9Hyo2Z30fU4=
Subject key identifier:   DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32D6EA25B67DCF5738FF1371C876A93E069DB369
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/DB78049BFAA2384D5A158AA82F18399C706E6157.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:58:37 +0000
Certificate not after:    Wed 02 Apr 2025 23:03:37 +0000
Subordinate resources:    AS: 266303
                          IP: 170.79.172.0/22
                          IP: 2804:35bc::/32

Validation:               Failed, certificate revoked on Sat 11 May 2024 02:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d6:ea:25:b6:7d:cf:57:38:ff:13:71:c8:76:a9:3e:06:9d:b3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:58:37 2024 GMT
            Not After : Apr  2 23:03:37 2025 GMT
        Subject: CN=DB78049BFAA2384D5A158AA82F18399C706E6157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:e7:52:55:e6:34:f5:84:5a:6d:60:cb:07:
                    5a:32:94:5a:04:d2:14:87:aa:3b:02:18:d6:85:2e:
                    67:91:35:78:3e:16:c1:5e:34:14:51:ab:7c:01:ce:
                    96:5f:b8:b3:2e:7e:99:bf:d3:5e:d7:6b:47:a7:e2:
                    b1:13:3a:8d:76:df:81:84:98:73:ec:2d:f7:b9:2b:
                    95:0e:8b:e1:ed:05:a4:8c:16:ad:63:1f:d0:be:fa:
                    f1:c0:05:53:3f:4d:99:53:ff:71:79:38:65:09:7c:
                    6a:3e:35:eb:d9:ee:18:9a:a0:e4:17:5a:e2:00:5a:
                    fe:3c:62:5d:9b:73:03:3a:2f:d8:32:13:93:cc:45:
                    24:5e:e2:e6:5c:18:ec:e6:9b:7d:32:c0:b2:a4:3a:
                    90:26:f8:c6:85:f0:37:30:4f:c4:41:d3:f3:1f:c2:
                    c6:ee:f6:dc:1c:be:f4:ec:e0:a1:46:23:a8:f4:3d:
                    9d:db:4d:fa:53:88:8c:d0:c1:3f:a8:b4:2b:c9:9a:
                    65:b5:3a:10:c7:b6:b6:39:dd:ae:8e:bc:46:45:7f:
                    7d:2a:96:1d:9d:db:24:ca:e8:c5:1f:e2:1b:a1:f2:
                    f4:86:75:52:7a:7b:f9:5b:2f:1b:2d:de:93:8c:47:
                    67:f4:0a:67:9a:3b:25:f6:c7:b1:f9:e7:3e:aa:60:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/DB78049BFAA2384D5A158AA82F18399C706E6157.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/22
                IPv6:
                  2804:35bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266303

    Signature Algorithm: sha256WithRSAEncryption
         d8:2d:65:d2:ef:5e:b5:d4:9d:66:65:b3:a6:47:82:c0:93:a8:
         fd:42:99:96:71:ec:f9:6f:5e:3c:b4:70:6a:f4:c3:90:20:b7:
         71:ae:62:2c:82:ba:d4:b0:0e:7e:20:40:1c:c1:e5:48:22:88:
         31:06:2d:c8:bd:9c:3b:f9:a9:0e:94:ee:da:c9:8d:1d:f8:94:
         e3:74:a4:d5:fc:a7:08:8c:c0:aa:e4:51:8c:e6:38:f2:68:84:
         a2:b9:7d:56:f6:4e:7f:42:48:88:cf:e6:30:69:50:36:2e:74:
         cb:61:5b:99:bb:04:aa:f1:18:89:ad:6a:17:45:2d:e6:eb:85:
         e7:d4:f6:7c:72:36:61:ee:e2:eb:a1:c5:18:71:11:5a:1a:32:
         25:3c:be:c2:ea:ad:49:21:de:63:74:6c:3e:75:73:ef:50:72:
         c5:37:09:9c:57:ec:0e:e4:4d:ed:69:f2:bc:11:95:00:1b:97:
         d9:ce:7e:48:22:e8:68:db:c0:43:81:fd:a7:7f:bf:ac:cc:ff:
         55:be:83:50:08:aa:eb:50:2a:15:67:c4:72:81:0b:dd:fb:c1:
         b9:9d:6d:e7:67:0a:30:d1:07:6d:47:32:68:90:7c:25:50:1e:
         1a:41:c0:07:60:56:ee:5e:9c:98:d4:cf:2e:8c:22:31:44:f7:
         8c:e7:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org