Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3CBCF716408270BE7527F9C317406A94A698891.cer
File:                     D3CBCF716408270BE7527F9C317406A94A698891.cer (raw, json)
Hash identifier:          iX3AWKcZWyHIx2wFN1n00hSGi1w93yHBNCmpjQo9dN0=
Subject key identifier:   D3:CB:CF:71:64:08:27:0B:E7:52:7F:9C:31:74:06:A9:4A:69:88:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       020F575D8C50F69A2618AAC426E97A6680F8689E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/1/D3CBCF716408270BE7527F9C317406A94A698891.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Nov 2024 21:04:18 +0000
Certificate not after:    Sat 22 Nov 2025 21:09:18 +0000
Subordinate resources:    AS: 61680
                          IP: 131.108.64.0/22
                          IP: 2804:1ce0::/32
Validation:               Failed, certificate revoked on Sat 23 Nov 2024 21:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:57:5d:8c:50:f6:9a:26:18:aa:c4:26:e9:7a:66:80:f8:68:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 21:04:18 2024 GMT
            Not After : Nov 22 21:09:18 2025 GMT
        Subject: CN=D3CBCF716408270BE7527F9C317406A94A698891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:52:d9:e2:b1:2c:9c:24:9a:01:c6:d1:c4:
                    60:cc:23:66:4b:5d:16:9d:6d:e4:34:ba:49:4b:1b:
                    ba:4c:38:99:44:01:5f:5b:5d:0a:4f:99:91:ad:7e:
                    c9:51:c3:a6:9c:04:43:a3:95:dc:64:35:7f:a5:10:
                    a0:1a:67:ce:d7:b0:52:be:65:f2:5e:f4:85:ad:bc:
                    50:3a:1c:f2:c8:5c:dd:1f:cd:4a:ff:28:f1:e7:a5:
                    0d:14:4b:64:59:e6:6f:4e:89:1a:94:93:03:bd:20:
                    b9:5e:43:81:f4:25:a2:7e:be:87:d6:cf:37:10:20:
                    4a:6a:4c:9b:12:e2:15:04:88:0e:0e:00:01:0d:a0:
                    62:eb:6c:93:22:17:38:fc:f7:fa:1a:2c:1c:bf:66:
                    50:ac:a4:ab:41:c0:ba:00:23:6c:6d:79:a1:ca:87:
                    dd:7a:3f:be:14:a6:83:af:56:89:af:9c:a4:9a:f5:
                    79:ff:a8:dd:d7:70:c3:4c:24:0b:e9:db:8f:2e:0c:
                    a5:0f:1d:26:3c:92:16:2e:7d:92:61:ea:5b:9f:74:
                    58:d6:1f:c8:5e:e4:21:e4:20:c1:8b:06:38:c4:93:
                    35:c6:3c:2c:86:04:e9:ff:78:7a:aa:ee:d9:c8:8d:
                    59:e3:0b:8b:bc:26:b3:cb:61:1b:da:9a:44:8a:c7:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:CB:CF:71:64:08:27:0B:E7:52:7F:9C:31:74:06:A9:4A:69:88:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/1/D3CBCF716408270BE7527F9C317406A94A698891.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22
                IPv6:
                  2804:1ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61680

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:ff:72:c7:a6:b5:cb:05:72:24:c9:1d:b9:5e:5b:43:aa:
         a3:4b:7b:1d:d8:a7:a0:77:7f:ac:c1:e2:13:5d:b7:8e:4c:0e:
         22:c0:1a:d6:cf:1f:c8:51:a8:14:3d:02:4b:c8:5f:df:6b:8b:
         57:ea:cb:46:0f:03:a9:a7:00:f9:ba:28:86:a6:04:c3:89:30:
         f9:01:e5:88:34:53:90:e9:b6:92:44:12:ca:61:9e:3d:d9:8a:
         2b:ab:03:24:77:45:05:c6:36:82:2c:5b:da:95:bc:e2:cf:1a:
         0a:7c:de:26:80:21:af:20:79:46:94:16:07:d3:77:77:59:7f:
         50:fa:5a:02:09:e7:90:1f:9d:ae:61:4b:c9:4e:bb:a6:5c:44:
         ac:9c:ed:ab:25:7c:d3:ae:dc:bd:b2:df:51:dc:1d:67:fb:45:
         f8:2b:ed:10:0e:a4:86:fe:c5:d8:d1:95:08:37:be:34:21:f9:
         16:9d:43:69:bc:60:6a:f7:dd:be:a7:29:5f:60:ca:55:a0:13:
         c0:db:76:9c:1d:99:24:18:31:a7:02:0f:56:a0:cf:0b:16:50:
         19:87:c2:90:6d:d5:07:ae:7e:d3:33:31:81:11:47:34:e3:ce:
         79:a2:b4:fb:6d:7a:3b:37:27:92:74:2f:e9:c5:50:6f:37:92:
         55:90:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:54 2025 by rpki-client