Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer
File:                     F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer (raw, json)
Hash identifier:          lWxzupMjGk6ID96v4EdboxGKFli9wQTTvuBggNqTzKo=
Subject key identifier:   F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       543E930E4D322A91D31BE6E067C4F82537E4E8B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 09 Jun 2024 15:11:26 +0000
Certificate not after:    Sun 08 Jun 2025 15:16:26 +0000
Subordinate resources:    AS: 262312
                          IP: 177.124.16.0/22
                          IP: 2804:3700::/32

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 15:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3e:93:0e:4d:32:2a:91:d3:1b:e6:e0:67:c4:f8:25:37:e4:e8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  9 15:11:26 2024 GMT
            Not After : Jun  8 15:16:26 2025 GMT
        Subject: CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:4f:84:db:df:13:58:6b:81:33:11:3d:23:
                    53:44:58:bb:98:f9:4d:97:5f:76:1d:f0:1b:17:b2:
                    eb:63:e8:26:4b:68:36:39:f3:a8:75:6b:c8:80:b5:
                    28:53:06:73:64:ae:51:e2:74:f6:b4:fa:e8:e2:dd:
                    22:f3:b6:12:1a:e2:90:27:65:81:a6:0b:16:9d:2f:
                    72:c5:9b:67:0e:76:68:48:09:df:dd:d2:c7:28:eb:
                    2b:16:71:7c:3a:e0:08:dd:61:09:c5:24:15:86:94:
                    7c:d5:ff:51:a3:5f:6c:5b:49:05:2a:ec:70:e7:0d:
                    ad:c8:f0:66:1a:b3:e1:d6:24:60:c7:ee:77:20:b7:
                    30:bc:ac:56:18:77:f7:5a:c6:ab:61:7b:fa:78:2d:
                    da:f5:ec:53:4f:0f:21:39:9d:ab:18:5c:2d:f7:f7:
                    a2:ad:55:2a:52:a7:ed:4c:53:59:53:8e:16:a1:b5:
                    eb:5e:76:ad:94:a0:8c:b7:2b:bc:ab:c1:87:9c:bd:
                    25:f0:c4:72:70:3e:7e:44:77:e5:29:32:cc:a3:cb:
                    36:f9:c5:c1:63:76:69:d7:25:c8:13:29:9b:e6:21:
                    ac:9f:6b:e5:0f:ab:c0:44:61:b0:24:e1:81:92:bd:
                    9e:0d:99:b0:f8:98:7a:e3:85:fa:89:a9:3a:66:b0:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.16.0/22
                IPv6:
                  2804:3700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262312

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:91:99:78:89:c2:37:a5:8c:0e:43:cb:89:7c:d0:89:ad:
         09:d3:88:fd:7c:c6:50:de:02:16:39:d2:3b:e8:5c:c1:52:14:
         4c:b1:9b:57:90:37:99:bf:c8:7c:5c:53:92:c0:1d:86:d8:cd:
         5c:9d:41:32:c3:80:27:31:2c:bc:f6:93:d6:8a:40:dd:50:b9:
         87:a3:43:af:ab:68:fa:41:38:9d:d1:34:be:38:f1:9a:69:bd:
         99:9f:f1:e9:78:cd:1f:72:25:66:29:15:c3:27:e9:6e:25:8c:
         20:c0:9a:8f:a6:df:df:bf:a5:55:75:1b:22:1f:1f:aa:f8:40:
         e7:ec:bb:49:1e:96:7d:e2:82:1a:25:63:12:40:b2:82:a3:4b:
         b2:c1:70:66:ff:a0:f9:c8:3b:ed:68:80:8b:77:e3:bc:63:2a:
         a6:cd:a3:e0:0b:8f:7b:db:6e:ce:a6:e8:7a:b4:74:24:3a:4d:
         92:9d:97:38:d6:56:5d:3d:2d:ef:dd:70:da:00:e6:6e:35:56:
         31:74:65:f9:15:76:4f:b2:3f:41:29:9a:f7:00:f6:d3:10:54:
         9c:30:53:28:98:f7:18:72:1b:0f:15:9c:d1:8c:05:72:6e:82:
         7f:31:22:d2:3a:23:a1:79:0b:bf:1f:ca:fd:09:d2:4b:68:33:
         e3:c3:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 22:00:07 2024 by rpki-client on console-ams.rpki-client.org