Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer
File:                     E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer (raw, json)
Hash identifier:          LHkEzBo2pa2zEw+WFnqdwHcL6hYAWdAioSg4ZwkYjUA=
Subject key identifier:   E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75C1406F1ABDB72053CF78E182D1A5FC1D60228B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Sep 2024 14:06:56 +0000
Certificate not after:    Fri 05 Sep 2025 14:11:56 +0000
Subordinate resources:    AS: 266232
                          IP: 45.6.180.0/22
                          IP: 2804:3cc0::/32

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 21:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:40:6f:1a:bd:b7:20:53:cf:78:e1:82:d1:a5:fc:1d:60:22:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  6 14:06:56 2024 GMT
            Not After : Sep  5 14:11:56 2025 GMT
        Subject: CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:44:1c:cf:23:f3:11:47:d7:2e:d7:55:a1:94:
                    5e:d0:73:6e:d6:f6:1f:2b:5b:20:27:62:d9:a1:50:
                    aa:76:50:93:b3:b5:06:63:43:21:40:45:05:1a:9c:
                    1d:2b:fe:28:28:39:e6:ac:c0:ff:bb:ef:56:cf:0d:
                    88:cf:1e:ec:c0:9b:35:3a:ef:22:ee:e0:21:ef:db:
                    28:2e:38:bb:6d:3f:fe:03:f0:00:05:84:71:f1:41:
                    f3:95:12:d4:ad:dc:1d:18:ba:bf:af:c8:2d:62:60:
                    8f:e5:da:65:a2:e8:f9:c5:5f:4c:32:aa:12:e2:f9:
                    2f:a3:e9:f8:41:76:02:51:96:4d:eb:14:17:07:1b:
                    44:f6:f7:92:73:8b:ca:b2:7c:a6:ad:1c:b9:b8:6f:
                    96:e3:39:fd:ff:3a:d1:b8:5a:1f:bf:98:46:b4:63:
                    74:94:0f:0a:e5:a1:f7:52:9c:8e:ed:f2:f2:66:63:
                    be:5c:ad:0f:3d:1c:1b:20:66:89:70:47:01:c1:02:
                    92:60:da:a1:49:c3:5d:a7:f4:ab:93:be:6b:69:a0:
                    31:a7:78:7e:51:bf:cf:fe:4b:41:f1:0b:86:67:02:
                    72:1a:db:d5:13:79:4a:46:08:f3:a9:cf:b2:53:54:
                    1c:5a:12:4e:2c:20:8f:e4:3e:8e:01:65:fb:56:e4:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/22
                IPv6:
                  2804:3cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266232

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:6a:f7:75:09:50:36:c1:c9:ab:75:99:2a:f4:72:fa:cf:
         0c:31:39:8f:63:cd:18:97:9f:a3:a2:33:a3:02:55:2a:86:eb:
         71:4f:99:ec:ef:de:a7:a7:2b:f2:e8:17:18:12:f3:3b:70:6b:
         4c:8d:a7:be:c3:d4:cc:e8:31:69:88:bc:eb:d8:6d:73:7b:1f:
         ad:cd:f0:5f:04:92:4a:d4:6b:1c:ab:b9:e2:89:71:8d:60:cb:
         a5:7d:69:54:a1:6e:38:40:a8:2d:fa:db:5f:2b:4e:58:5c:d3:
         59:fb:fd:52:c8:b8:13:31:67:d6:4b:93:d9:cb:f7:e6:45:33:
         65:a9:8e:d9:b3:80:76:7c:e2:e7:b3:ee:e0:68:7a:61:7d:6f:
         9c:f8:6a:cc:bf:00:45:6b:8d:12:a6:7b:be:35:08:a6:7a:27:
         6f:1a:7e:c7:05:83:51:27:e4:b1:78:77:34:f0:ae:40:a8:d1:
         50:e1:72:07:87:0b:ca:01:16:71:bf:6c:f5:0c:2c:0f:f0:cc:
         15:51:62:bb:3f:16:24:1f:2b:63:9c:93:d1:8c:56:af:82:8e:
         06:6d:8b:63:81:7b:3d:78:ba:b0:14:3a:91:af:38:3e:fb:12:
         be:20:5f:03:4e:c7:06:44:f6:b4:ed:1a:c6:74:ed:4e:1c:53:
         43:9a:ee:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 00:34:42 2024 by rpki-client on console-ams.rpki-client.org