Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer
File:                     F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer (raw, json)
Hash identifier:          rp82thb14Aymfk+TZP6Eoy4O4LVzQmcmrFeJsKebyBI=
Subject key identifier:   F3:2E:3E:7C:A4:FB:14:20:8F:BA:D4:D9:1D:24:DA:67:9A:98:0F:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       713F6E718C7C3A2195446DA367F49FF1F406726A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:58:28 +0000
Certificate not after:    Thu 03 Apr 2025 15:03:28 +0000
Subordinate resources:    AS: 271609
                          IP: 45.183.176.0/23
                          IP: 2804:7e34::/32

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 23:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3f:6e:71:8c:7c:3a:21:95:44:6d:a3:67:f4:9f:f1:f4:06:72:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:58:28 2024 GMT
            Not After : Apr  3 15:03:28 2025 GMT
        Subject: CN=F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:7a:7a:3e:ea:17:bf:9f:ba:74:9f:ea:41:
                    58:9d:7c:f6:d9:bf:91:ce:e8:01:dc:f1:66:b5:73:
                    2f:ab:5e:91:a0:5e:0e:2e:17:02:0c:93:fc:75:d9:
                    48:c7:82:b5:d6:1b:9e:ca:49:2e:d3:c7:72:fc:f8:
                    82:83:55:18:4c:d7:77:3f:0c:38:97:3f:d8:7c:aa:
                    cd:5f:88:66:0d:04:19:d0:a8:ed:4b:43:89:8e:23:
                    00:f9:a9:3a:f1:25:69:83:a3:57:f6:60:7b:5a:2a:
                    0d:13:e8:51:55:e5:8c:fe:40:b0:0c:83:63:aa:8e:
                    c5:33:12:bd:d3:5c:13:12:c3:5c:3e:e1:6a:b5:ad:
                    4e:7c:e7:a4:38:2a:ca:05:84:a7:96:56:8c:d6:d6:
                    5d:e7:12:10:93:be:fa:56:ff:c3:d8:f1:ab:7e:42:
                    77:4b:6e:f5:e0:ee:06:0a:8d:41:6f:21:3e:64:58:
                    84:20:ad:fb:f6:0c:bc:ef:a6:46:df:df:5f:07:f7:
                    5b:2f:22:b0:77:f4:7d:8e:45:f2:a4:4d:4c:7e:b0:
                    3c:3b:32:0a:c2:c5:b5:3d:d0:15:04:6a:b6:21:48:
                    33:6f:03:c9:98:56:86:69:13:ce:79:83:69:68:ac:
                    8d:b2:1f:1a:52:32:4d:27:a1:fc:1b:d0:7c:cc:34:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:2E:3E:7C:A4:FB:14:20:8F:BA:D4:D9:1D:24:DA:67:9A:98:0F:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/23
                IPv6:
                  2804:7e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271609

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:42:75:b5:7d:e2:f4:84:0c:b1:93:f5:62:72:77:3f:38:
         52:72:1e:98:68:51:90:1a:79:ab:ba:b2:3c:12:f9:ea:7a:2c:
         fb:5b:83:95:be:54:e9:5e:f2:00:d2:20:c1:3e:bf:47:c0:de:
         27:b4:c0:87:e1:98:10:cd:3b:d3:31:30:10:fe:ee:c3:cd:17:
         07:65:7d:6c:0d:4a:1c:b4:85:15:f4:61:a4:d8:df:1b:9a:c1:
         f3:ee:3a:06:8c:5d:4a:93:da:a5:b8:08:94:f6:4e:b6:88:ad:
         cb:90:61:d8:e5:28:66:74:ca:df:c9:14:71:c7:d5:8c:98:73:
         ff:b2:81:f2:69:1d:d2:f0:1b:41:12:f6:3f:b9:b2:49:60:cd:
         bb:78:3a:a8:3f:59:91:81:30:46:b6:5a:10:e2:0d:6e:46:2b:
         1a:85:90:2a:a3:2f:50:b4:04:da:f0:11:a9:fc:8e:7d:80:cd:
         ae:49:01:a1:6d:f0:f6:86:b6:a0:7f:34:9f:28:d9:fb:50:06:
         04:0c:28:7e:aa:8f:c6:f7:7c:1a:45:5a:32:b2:08:38:e0:17:
         ee:18:3f:33:bc:c0:b7:3c:ed:4d:2d:ce:fd:8c:a5:e6:10:67:
         c1:ab:b6:f3:14:f8:41:c6:3b:e6:b6:b1:fd:02:7e:ab:9b:fb:
         a8:21:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 01:41:56 2024 by rpki-client on console-ams.rpki-client.org