Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
File:                     FF8022FCD112C507FDC1D72A4931605EF74BC817.cer (raw, json)
Hash identifier:          +a4E5ZySmkL7uky6xgpc49fZVULVJgi1Q7WBSq0XwJM=
Subject key identifier:   FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3807E0F7035CAB4A8CB167A3EEE2D2435CD28116
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:42:43 +0000
Certificate not after:    Thu 03 Apr 2025 11:47:43 +0000
Subordinate resources:    AS: 53062
                          IP: 45.7.128.0/22
                          IP: 168.90.168.0/22
                          IP: 170.150.236.0/22
                          IP: 177.36.176.0/20
                          IP: 177.75.160.0/20
                          IP: 177.155.128.0/20
                          IP: 186.211.96.0/20
                          IP: 187.85.144.0/20
                          IP: 2804:3b0::/32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 00:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:07:e0:f7:03:5c:ab:4a:8c:b1:67:a3:ee:e2:d2:43:5c:d2:81:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:42:43 2024 GMT
            Not After : Apr  3 11:47:43 2025 GMT
        Subject: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:fb:95:df:28:8b:48:26:bd:71:c4:6f:8c:
                    43:f8:3e:20:65:3a:ab:0f:5b:6f:f9:32:6b:60:d7:
                    74:03:24:01:92:d5:2d:cd:0f:5f:86:54:cd:2d:f1:
                    e2:f7:b3:09:45:18:07:87:79:a3:50:93:43:74:99:
                    d3:4c:ec:4c:13:96:6f:9b:99:22:29:b2:dd:a5:09:
                    56:d4:4c:20:92:40:0a:2f:c2:74:bc:d9:4e:16:2d:
                    e4:1d:28:7d:2c:8d:04:b6:8e:54:16:eb:d8:db:f0:
                    7a:73:6a:9f:ea:af:8c:a3:f0:09:e1:1b:99:fa:5d:
                    01:5d:d2:52:46:f8:34:92:01:a9:bb:a4:c5:08:46:
                    a8:6e:1a:3c:42:b6:4f:4c:b0:6b:42:8e:b6:ee:59:
                    c3:f5:29:0e:8c:0d:1d:d2:fb:ef:38:7c:fe:f0:1c:
                    d9:a4:be:59:6f:57:b5:09:c8:62:31:a9:24:6e:d1:
                    84:28:b7:a4:13:2a:da:30:59:fa:67:b6:ec:2a:86:
                    23:f6:9a:0c:1f:33:64:36:97:51:2d:34:65:53:55:
                    9f:40:95:ee:be:1d:7a:99:12:5a:18:a1:2f:09:78:
                    a8:7c:0a:95:7f:48:b7:aa:7f:b9:4a:88:ed:a4:3b:
                    ae:b2:d7:86:31:bd:1d:79:8b:0c:96:d6:ff:4c:10:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.128.0/22
                  168.90.168.0/22
                  170.150.236.0/22
                  177.36.176.0/20
                  177.75.160.0/20
                  177.155.128.0/20
                  186.211.96.0/20
                  187.85.144.0/20
                IPv6:
                  2804:3b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53062

    Signature Algorithm: sha256WithRSAEncryption
         98:1b:74:f5:09:bd:f9:3f:5a:a5:f1:e4:db:ca:dc:90:79:ca:
         44:c9:e9:1d:3b:66:b2:17:1d:d7:90:1b:d5:19:40:71:6d:41:
         47:f5:df:a7:d7:d2:36:66:a9:68:9d:35:71:f7:ce:a9:a2:2b:
         4c:00:a2:5f:bf:09:7e:32:9e:fa:8b:4c:72:6a:0e:2f:30:94:
         99:c5:d8:71:23:cc:3e:d7:cd:4a:f1:fd:a4:c6:3a:68:ef:9b:
         ea:e5:1f:1a:6d:ec:25:7a:9e:6e:55:9c:61:c6:d1:df:3b:c4:
         e9:c4:eb:8c:18:70:25:d6:6a:03:ec:8c:f2:26:46:5c:bc:9b:
         24:33:62:c7:02:c8:4b:df:e0:50:d3:b8:af:b7:6b:e7:b4:c5:
         f7:2f:87:ef:0d:66:04:bc:80:73:51:aa:00:3a:ca:8b:a8:b5:
         9e:9d:5b:61:23:67:ff:76:ea:e7:3a:97:08:52:cf:1e:b1:72:
         2e:31:21:66:eb:05:bb:ea:4f:80:a1:81:8b:c7:c4:ec:5a:a0:
         6f:0f:8f:48:22:47:0e:fb:b6:cd:6a:2a:21:89:c1:47:24:d1:
         5a:8c:f7:9a:1d:c9:66:6e:9f:47:50:48:11:51:05:f2:8b:c3:
         06:66:e7:4e:92:af:c4:6f:6f:be:27:42:45:1f:0a:28:4a:68:
         86:a0:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 02:00:11 2024 by rpki-client on console-fra.rpki-client.org