Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
File:                     F9FB33583132547FA2AA2454BAD750E527E58EAD.cer (raw, json)
Hash identifier:          DaE5pIEWIhLohjTYoTwHTVZnqPJLw0kPvvHSRWrlrGs=
Subject key identifier:   F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BCBB50158D3973E4FB4AA75F779C52C9C1B56D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Apr 2024 18:09:40 +0000
Certificate not after:    Wed 16 Apr 2025 18:14:40 +0000
Subordinate resources:    AS: 262669
                          IP: 138.94.224.0/22
                          IP: 143.202.148.0/22
                          IP: 170.78.68.0/22
                          IP: 177.22.224.0/20
                          IP: 187.73.240.0/20
                          IP: 189.39.192.0/20
                          IP: 2804:13d8::/32

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 05:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cb:b5:01:58:d3:97:3e:4f:b4:aa:75:f7:79:c5:2c:9c:1b:56:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 18:09:40 2024 GMT
            Not After : Apr 16 18:14:40 2025 GMT
        Subject: CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:66:88:f2:9f:6b:e4:21:83:6d:cf:6e:89:
                    79:7f:60:6c:dc:e0:31:05:9d:ba:0b:94:6e:57:05:
                    2c:1e:88:e2:39:d7:cf:99:91:69:82:c3:0c:a3:9e:
                    1f:96:4e:27:c2:ea:95:33:1a:ff:d7:5e:e1:f9:51:
                    c4:01:58:a4:c8:61:ac:b9:a8:0e:67:83:aa:74:97:
                    5f:ae:bc:b9:03:85:bd:f0:8c:7f:b5:39:0f:7c:12:
                    46:84:e4:8b:99:3d:aa:93:8e:3a:73:a1:81:d0:9b:
                    2a:29:ab:11:46:66:04:8d:c8:91:fd:53:7d:3c:99:
                    b3:a3:d8:05:78:67:b5:45:0d:64:fc:9a:4c:ef:81:
                    bb:87:89:a6:02:8e:7c:ec:52:60:f4:f8:0b:23:9f:
                    95:c8:f1:48:93:e9:24:9a:ab:0c:bb:9a:87:87:89:
                    c0:97:3d:0e:81:a0:a8:e0:e2:cb:5d:4b:5a:07:d6:
                    5c:c2:0f:9f:8d:1a:cc:44:4e:a2:ba:54:dd:2b:c5:
                    ab:73:19:f6:1a:95:61:0a:0b:dd:fc:48:4d:1a:52:
                    33:ca:65:7b:b8:97:17:bc:94:1e:7a:79:16:f8:e9:
                    ed:c7:ab:20:10:01:23:11:f7:f9:1c:38:97:11:7c:
                    99:06:76:8a:57:28:8d:73:6d:4d:d0:79:06:91:3c:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.224.0/22
                  143.202.148.0/22
                  170.78.68.0/22
                  177.22.224.0/20
                  187.73.240.0/20
                  189.39.192.0/20
                IPv6:
                  2804:13d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262669

    Signature Algorithm: sha256WithRSAEncryption
         2a:15:60:8b:42:a8:9b:70:ec:2a:5c:9f:15:57:d6:6a:37:c8:
         14:09:57:be:39:98:19:92:1f:bd:b3:7c:16:0c:37:a7:b4:63:
         3b:07:aa:0e:57:c1:2c:c6:c0:17:0a:f3:fb:3f:13:87:bf:d2:
         3e:82:20:ea:16:93:26:e1:60:d9:51:1f:90:2b:85:29:9d:42:
         9b:27:81:73:f9:2e:a5:2c:4c:47:09:e9:60:29:f5:4c:28:18:
         65:ba:68:e1:96:e4:54:f3:fb:59:ad:6e:78:03:15:e6:b2:8d:
         5e:bc:f3:ba:25:6d:1e:a2:a3:85:63:78:c6:58:74:75:92:99:
         dc:d3:8a:43:df:9c:1d:44:5e:a1:1a:ec:b6:1a:04:3b:40:31:
         c3:a0:8f:52:0e:dc:27:75:57:6c:b5:f5:ec:5e:00:e3:fc:cd:
         c8:7b:1e:17:34:4b:20:05:da:3a:97:68:ef:3c:77:d3:67:7f:
         6b:c5:98:e0:d6:19:88:52:f4:89:a2:c4:98:bd:a6:38:92:0d:
         3c:47:b1:5d:38:59:3d:1d:7e:9d:0c:75:b0:7c:78:47:2e:fc:
         92:5e:c1:5c:08:b9:d1:a7:88:0e:8e:36:2e:a6:e3:16:3f:2f:
         a7:43:e1:be:db:a8:ff:47:4f:8c:94:98:21:54:69:40:bd:6a:
         8d:91:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 07:07:39 2024 by rpki-client on console-fra.rpki-client.org