Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4688EDCC90A54C31B0BA2248191C62F92B3EB281.cer
File:                     4688EDCC90A54C31B0BA2248191C62F92B3EB281.cer (raw, json)
Hash identifier:          JKL3fhaBGKcrYc6mQWvoWtluSthQOngBsLC7g82cGUU=
Subject key identifier:   46:88:ED:CC:90:A5:4C:31:B0:BA:22:48:19:1C:62:F9:2B:3E:B2:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F2B55084571098A60B33510B96FA11B2FA6FBA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/4688EDCC90A54C31B0BA2248191C62F92B3EB281.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jul 2024 13:11:47 +0000
Certificate not after:    Wed 23 Jul 2025 13:16:47 +0000
Subordinate resources:    AS: 266577
                          IP: 160.238.236.0/22
                          IP: 2804:3e28::/32
Validation:               Failed, certificate revoked on Wed 24 Jul 2024 13:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2b:55:08:45:71:09:8a:60:b3:35:10:b9:6f:a1:1b:2f:a6:fb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 13:11:47 2024 GMT
            Not After : Jul 23 13:16:47 2025 GMT
        Subject: CN=4688EDCC90A54C31B0BA2248191C62F92B3EB281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:58:39:69:88:44:96:9d:b3:0f:ec:cc:cf:
                    fb:66:2d:f5:50:d6:05:d2:b4:f2:48:97:25:a0:f2:
                    65:52:ce:e9:14:50:3a:ff:6e:91:a6:ab:12:23:40:
                    5f:32:b7:94:70:21:5f:61:9d:ec:9d:22:eb:01:7f:
                    a8:78:40:3f:7f:39:9c:31:ab:0d:b0:8c:7e:aa:1e:
                    b7:41:08:69:96:f4:2e:63:36:e5:15:ee:c6:12:d5:
                    9c:80:eb:a2:36:0d:db:fe:29:b0:cd:79:47:32:10:
                    53:ba:e7:62:a8:7b:64:22:b7:9a:5f:94:d9:df:ff:
                    c2:4e:db:6a:bf:bf:41:b7:0d:ee:ae:de:67:fa:f9:
                    ca:39:90:ab:de:d9:02:94:73:68:57:11:6c:8c:03:
                    61:ef:40:97:16:47:36:1a:d6:cb:c3:8d:de:9e:ee:
                    e3:3c:21:f4:db:29:0f:9c:f8:ba:fe:9d:67:a9:3c:
                    dd:d7:44:d3:fd:bb:bc:a8:58:47:72:d3:9d:cd:64:
                    ee:7c:2a:97:5b:99:60:ff:be:d7:7c:fc:b9:35:47:
                    78:39:02:7d:c9:ad:71:94:9f:aa:66:d3:8b:42:7a:
                    81:b7:7e:d8:70:bd:2c:40:58:ad:6f:b7:65:34:ed:
                    61:56:76:e1:6a:d4:47:77:7f:02:6d:a8:a4:35:38:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:88:ED:CC:90:A5:4C:31:B0:BA:22:48:19:1C:62:F9:2B:3E:B2:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/4688EDCC90A54C31B0BA2248191C62F92B3EB281.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.236.0/22
                IPv6:
                  2804:3e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266577

    Signature Algorithm: sha256WithRSAEncryption
         87:05:5b:3a:c6:bf:bc:89:f2:6c:24:a4:e8:19:b1:1d:0e:b6:
         ac:b4:0c:78:28:8f:a2:ae:85:8e:31:71:90:49:a1:2f:09:4c:
         54:94:52:8b:77:03:f9:41:72:00:bc:a1:c8:48:72:52:c1:7b:
         c1:c0:94:bd:f2:a0:21:85:ea:73:8d:b5:33:dc:22:7a:d7:97:
         89:43:a9:a0:ec:e5:0b:43:c6:2c:89:c3:40:56:76:7f:ce:3e:
         75:47:a2:16:5c:32:ac:08:27:16:6b:bd:aa:0a:a2:8d:6a:b0:
         70:a6:e6:83:aa:49:b5:7a:5c:5e:05:da:e1:79:bf:44:ac:ff:
         bd:c2:da:53:00:e8:5d:6f:66:cf:ce:c3:01:ec:e7:18:bd:51:
         b2:fb:85:ec:bc:4a:6c:11:64:cd:13:e0:64:54:26:84:c4:12:
         9f:6d:35:ed:44:05:cd:4c:f6:de:79:cd:4c:be:11:a5:5e:2c:
         20:ea:55:f3:37:10:87:75:cd:b0:e7:89:2d:a5:37:83:e8:7a:
         5b:53:74:02:b8:ee:47:16:8b:3f:92:8e:b1:f5:a9:51:6d:93:
         84:78:f4:e1:ff:a7:88:6f:52:20:6f:ff:5c:7c:d7:5c:b4:f8:
         ce:30:c1:25:35:c9:3e:e8:6a:e1:a7:32:c3:63:b2:f8:f1:44:
         1b:20:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:08:01 2025 by rpki-client