Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F997305314F0C91FCB67BA5D5D5A800086047FBB.cer
File:                     F997305314F0C91FCB67BA5D5D5A800086047FBB.cer (raw, json)
Hash identifier:          UIIcNT99hQOhk4ZKG1bcQfZNaXinWaHuQN3cidk46SQ=
Subject key identifier:   F9:97:30:53:14:F0:C9:1F:CB:67:BA:5D:5D:5A:80:00:86:04:7F:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25826289386D8BF5A82014CE99491F49E13778D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/F997305314F0C91FCB67BA5D5D5A800086047FBB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 20:21:52 +0000
Certificate not after:    Fri 07 Nov 2025 20:26:52 +0000
Subordinate resources:    AS: 264119
                          IP: 138.59.216.0/22
                          IP: 2804:22bc::/32

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 11:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:82:62:89:38:6d:8b:f5:a8:20:14:ce:99:49:1f:49:e1:37:78:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 20:21:52 2024 GMT
            Not After : Nov  7 20:26:52 2025 GMT
        Subject: CN=F997305314F0C91FCB67BA5D5D5A800086047FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:00:77:cd:10:b8:04:1d:5a:fd:3f:32:f0:0f:
                    e9:36:49:e6:b2:bb:75:46:da:2c:bd:14:0c:6b:e2:
                    f7:17:f9:68:1d:5f:74:fe:2a:14:30:35:83:51:31:
                    26:0f:7e:fd:31:94:81:28:53:fe:74:83:f0:62:0b:
                    76:c6:a6:3a:36:81:d4:bf:99:72:a5:2e:8d:32:e1:
                    0c:ae:a5:7a:e5:a0:a2:79:56:ac:2d:22:7a:e4:f0:
                    ad:c1:07:12:9d:0b:4b:39:ea:34:f5:3d:65:0b:32:
                    46:bf:89:ce:37:72:13:33:6d:80:5c:4a:8e:38:5e:
                    fe:56:73:92:64:dd:f8:69:f7:31:da:44:fc:e8:65:
                    16:81:7e:40:6b:ab:ff:0a:b2:e9:77:f1:c8:7c:0b:
                    37:77:02:db:f9:ca:8d:81:c1:35:46:97:8a:dc:46:
                    74:88:a5:fc:0f:a3:23:c0:34:e8:27:62:58:d6:cc:
                    ef:bb:0f:38:8e:c1:26:cd:5a:a2:ac:51:f8:34:92:
                    ff:a7:9e:6e:4b:15:4c:55:3b:fe:26:80:bf:98:65:
                    97:b1:81:85:c2:da:50:eb:7d:a5:ba:5e:21:7a:a7:
                    c0:86:53:b3:72:83:ca:0a:bf:f8:54:c0:64:8a:13:
                    e2:98:7f:d3:44:77:56:cd:b3:25:10:cc:04:2e:99:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:97:30:53:14:F0:C9:1F:CB:67:BA:5D:5D:5A:80:00:86:04:7F:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/F997305314F0C91FCB67BA5D5D5A800086047FBB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.216.0/22
                IPv6:
                  2804:22bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264119

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:87:11:d8:aa:90:76:72:73:de:a5:23:22:5d:0f:61:fb:
         c2:2e:67:b2:82:01:13:1d:57:14:80:19:44:fc:60:63:2a:17:
         45:0b:a6:28:33:88:05:78:e9:b2:e2:79:a4:c9:33:f2:22:cf:
         74:e8:59:05:c1:1b:5f:fd:de:83:21:94:d6:ff:98:a3:1d:c3:
         c8:a9:07:07:ac:bf:2e:fc:bd:d8:44:ca:03:00:23:96:db:59:
         bd:b7:81:df:3e:64:d3:ef:f2:ec:a4:92:1d:75:f9:4b:cc:b5:
         c0:51:c0:f3:0d:cf:5f:53:77:e0:eb:37:9f:01:4c:85:b9:aa:
         18:ea:62:96:a9:97:7c:2b:af:f6:ca:6b:76:d8:e6:66:a8:eb:
         f2:6a:38:3b:63:b0:05:32:ef:71:34:86:58:2d:41:11:5a:27:
         55:25:78:9e:d9:37:56:3b:51:e1:c4:70:f7:7e:b6:02:0e:01:
         2d:4c:94:87:50:2a:2d:a5:b7:1a:cd:ef:28:22:ff:cb:e0:06:
         07:88:65:01:32:91:52:aa:fd:07:19:6a:e1:c0:ab:6b:14:f3:
         65:13:7c:e2:a0:99:c7:aa:31:9d:3d:f8:bf:e0:12:b1:c8:5e:
         15:c1:d5:70:81:72:65:2e:3a:48:91:5f:4b:42:f5:cb:e5:4a:
         d4:47:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:11 2024 by rpki-client on console-ams.rpki-client.org