Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
File:                     E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer (raw, json)
Hash identifier:          iBX3IK/b3fvEoqqBI1sQCoM3qZWjVwSmYfNhocXcop0=
Subject key identifier:   E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A074433E8524D954F4CF0BBFAEE7C8E6D28FF6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Sep 2024 12:12:16 +0000
Certificate not after:    Wed 17 Sep 2025 12:17:16 +0000
Subordinate resources:    AS: 267575
                          IP: 45.70.160.0/22
                          IP: 167.249.160.0/22
                          IP: 177.74.104.0/22
                          IP: 2804:4384::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 23:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:07:44:33:e8:52:4d:95:4f:4c:f0:bb:fa:ee:7c:8e:6d:28:ff:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 18 12:12:16 2024 GMT
            Not After : Sep 17 12:17:16 2025 GMT
        Subject: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:33:e4:3c:8c:95:a6:e6:c1:7a:36:56:14:
                    4d:68:79:b4:81:6f:7e:4c:14:da:7d:7b:d9:3d:76:
                    82:43:d6:9d:05:37:b4:a1:dd:dd:f8:22:12:46:e4:
                    02:dc:1c:9f:41:5a:76:46:e0:17:ba:f0:a9:17:04:
                    1b:02:54:5f:7f:71:a9:21:0e:c2:f6:ed:05:af:5b:
                    82:13:f5:ae:12:a4:dc:34:b6:49:f7:86:81:ed:da:
                    39:1e:11:e0:a4:f8:92:11:f2:75:05:e1:4e:d8:a6:
                    73:55:26:c0:8d:34:9d:5e:48:94:cb:1e:f9:a6:d6:
                    bb:49:da:34:17:17:5a:ea:8e:a4:6b:aa:c2:2a:9d:
                    e0:29:6b:dd:3e:36:da:ab:45:f2:41:d5:a8:91:88:
                    fc:4a:84:26:2e:c9:9a:09:a1:9c:03:60:e5:9d:9a:
                    b1:69:1a:96:16:14:a6:82:f8:28:8b:d9:f6:4a:e8:
                    ae:3d:1f:82:5f:77:30:6e:c8:07:8d:af:28:11:bd:
                    02:3e:2a:0d:22:79:4e:0c:e9:7a:d6:ea:ff:ec:a7:
                    24:91:47:84:05:9a:d8:ce:b3:d7:f3:63:75:00:c6:
                    8d:da:1f:5f:78:d7:b7:4d:af:ac:cf:bd:50:11:df:
                    04:99:b4:ba:9a:92:5c:31:20:fc:74:52:65:81:35:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.160.0/22
                  167.249.160.0/22
                  177.74.104.0/22
                IPv6:
                  2804:4384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267575

    Signature Algorithm: sha256WithRSAEncryption
         b7:01:a1:86:4d:c8:b0:07:50:d8:96:15:47:07:f1:65:b6:dd:
         d0:df:6b:44:77:a2:09:a4:72:fa:0c:8a:d8:0e:b8:a9:4f:46:
         47:c6:62:dc:d2:65:c2:db:74:ec:b6:7b:e5:17:26:21:39:ef:
         88:e6:38:0f:4a:a2:66:3c:7b:74:1f:89:fd:11:52:e4:5d:1d:
         89:b9:8a:c5:ce:d3:2a:91:18:a5:aa:72:0d:61:91:8e:ab:4f:
         76:f5:e7:cb:1e:2a:15:cf:a4:74:c3:7f:c0:fb:f0:39:08:6f:
         30:be:92:03:32:8f:de:e5:7b:89:cf:28:cb:89:bf:33:b3:3d:
         53:8d:bc:77:bd:0a:75:2d:20:c9:1a:f2:92:c1:6a:c2:3c:ca:
         9e:a0:35:e7:df:90:f6:1e:68:38:33:c3:d9:19:12:07:4e:19:
         82:f4:0e:93:77:40:16:58:71:78:cf:bf:a5:b9:76:41:b3:39:
         13:e0:07:ec:c5:4c:35:55:be:ab:71:4c:53:52:f6:6e:32:8e:
         d9:5f:8d:1e:d5:a5:37:1b:1e:88:d2:2f:49:9a:54:47:2e:24:
         c9:b2:37:86:40:a2:ed:36:b7:22:d0:17:a5:7a:75:fc:00:a1:
         bb:72:2d:51:ce:2a:a0:73:6c:fe:7a:15:68:a5:4d:70:77:12:
         8e:33:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 00:34:39 2024 by rpki-client on console-ams.rpki-client.org