Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF631A9497B10C5479069BEFBD9857EE6C411292.cer
File:                     FF631A9497B10C5479069BEFBD9857EE6C411292.cer (raw, json)
Hash identifier:          XvfqZP0ZQLO4CtvnJ1MJe7KfFbO9HZRpwbC8WC1yqFo=
Subject key identifier:   FF:63:1A:94:97:B1:0C:54:79:06:9B:EF:BD:98:57:EE:6C:41:12:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D09C1B356207D577EE37238C87F4678F0D94E19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/FF631A9497B10C5479069BEFBD9857EE6C411292.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Aug 2024 13:44:10 +0000
Certificate not after:    Sat 09 Aug 2025 13:49:10 +0000
Subordinate resources:    AS: 273333
                          IP: 2804:8d14::/32

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 13:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:c1:b3:56:20:7d:57:7e:e3:72:38:c8:7f:46:78:f0:d9:4e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 10 13:44:10 2024 GMT
            Not After : Aug  9 13:49:10 2025 GMT
        Subject: CN=FF631A9497B10C5479069BEFBD9857EE6C411292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:76:fd:9f:04:4e:7e:c0:3b:50:13:57:e3:
                    8f:f9:ae:25:f9:b1:99:03:82:5b:ff:a9:b7:0f:3b:
                    b3:37:cd:05:53:47:57:aa:b6:cb:8d:f3:9a:8b:b5:
                    4f:50:5c:07:90:5a:54:3d:1b:66:cb:d0:14:ab:70:
                    e4:81:59:90:11:52:ca:0f:f1:a3:b1:08:32:fb:64:
                    d8:e7:cd:bd:b8:e4:55:ff:2c:6b:4a:95:91:23:12:
                    36:68:a0:74:3f:2b:df:dd:73:52:54:62:9a:78:1e:
                    1d:21:5b:4a:55:68:38:d8:c9:97:c8:0d:bc:69:41:
                    dd:57:1f:68:13:a2:f7:84:d2:90:ac:65:8f:d6:74:
                    bd:44:31:bd:41:c2:f5:60:c7:8c:6c:75:71:37:76:
                    79:83:f4:87:0e:64:b7:1d:4e:03:64:3a:0f:b3:81:
                    d1:7d:aa:30:fd:04:a1:4f:12:d4:50:32:15:ef:06:
                    bf:a3:b2:76:97:b8:c6:33:62:b8:e6:09:8b:1b:73:
                    42:22:36:4b:eb:cd:ea:93:ea:08:f0:1d:3b:34:52:
                    32:da:1c:77:7d:f0:48:80:b3:86:b3:c5:a8:33:ed:
                    a1:5e:b1:8d:cb:9a:ee:89:b9:15:d2:0d:25:81:b9:
                    6e:a2:c9:e6:59:0d:13:a7:dc:16:61:9b:5d:d2:e8:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:63:1A:94:97:B1:0C:54:79:06:9B:EF:BD:98:57:EE:6C:41:12:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/FF631A9497B10C5479069BEFBD9857EE6C411292.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273333

    Signature Algorithm: sha256WithRSAEncryption
         d8:69:10:9d:a1:84:dc:fa:96:92:94:b4:9f:46:72:3b:bb:a6:
         33:8d:f7:7e:03:61:1c:3c:4c:ff:2b:47:27:24:3a:a0:6e:83:
         e2:cc:d3:7b:74:e2:6d:0e:34:1c:e5:6c:8b:75:59:1e:89:3d:
         10:9b:24:56:7c:1b:34:28:07:0f:50:9b:d9:c2:8a:8d:f4:d1:
         08:fb:a2:3e:3a:d0:05:6c:75:07:18:fb:d9:8c:e0:95:c3:b9:
         92:ab:d6:f0:e9:44:10:65:b9:c8:9e:47:91:10:e6:7b:56:48:
         e6:c2:af:68:79:12:1e:e3:bc:21:8d:e0:b3:e0:89:9c:49:75:
         8b:93:6b:1c:6d:dc:06:ef:32:80:41:ba:b7:94:8d:95:88:b6:
         36:fa:5a:6a:c9:b7:35:e7:66:ce:b0:b1:97:71:5a:f0:07:26:
         9e:cc:15:72:76:f9:43:47:7a:5e:5d:05:66:e3:4f:0a:d9:a4:
         ca:ec:b4:20:f7:50:bb:d9:b1:e9:1c:b3:f5:f8:6d:91:26:b7:
         b6:f3:10:a3:33:fa:05:06:ad:86:d8:58:d1:ee:5f:ed:9b:e7:
         93:c9:3d:74:d0:13:26:cc:de:89:79:79:2c:33:60:7f:1c:3c:
         be:45:02:25:b9:3e:d5:34:fd:78:80:32:9f:8d:2c:68:b6:ba:
         b4:3c:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:25:50 2024 by rpki-client on console-fra.rpki-client.org