Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02612BBC8B4E880838B87780489F1AD35000DD0C.cer
File:                     02612BBC8B4E880838B87780489F1AD35000DD0C.cer (raw, json)
Hash identifier:          XZj8NTONsNlxvLZPzlIb8wdf6Cy0Bj1SVbwQcW1SxIg=
Subject key identifier:   02:61:2B:BC:8B:4E:88:08:38:B8:77:80:48:9F:1A:D3:50:00:DD:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04B5554CA9D926E497095A7BB2B1F5CFC0EAE3A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/02612BBC8B4E880838B87780489F1AD35000DD0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Sep 2024 19:19:48 +0000
Certificate not after:    Fri 19 Sep 2025 19:24:48 +0000
Subordinate resources:    AS: 262494
                          IP: 45.179.112.0/22
                          IP: 45.226.88.0/22
                          IP: 138.185.188.0/22
                          IP: 168.205.240.0/22
                          IP: 170.82.124.0/22
                          IP: 177.66.112.0/21
                          IP: 177.124.168.0/22
                          IP: 177.129.60.0/22
                          IP: 179.125.124.0/22
                          IP: 179.191.56.0/21
                          IP: 2804:ad8::/32
                          IP: 2804:1510::/32
                          IP: 2804:4678::/32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 19:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:55:4c:a9:d9:26:e4:97:09:5a:7b:b2:b1:f5:cf:c0:ea:e3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 20 19:19:48 2024 GMT
            Not After : Sep 19 19:24:48 2025 GMT
        Subject: CN=02612BBC8B4E880838B87780489F1AD35000DD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:0e:6d:0f:c4:fb:31:37:53:5c:93:86:92:
                    18:a0:39:0b:a9:4c:d7:8b:dc:16:7e:ab:ae:0f:7f:
                    a6:de:6f:ba:f0:62:0a:8e:d0:da:c9:1a:e8:96:7a:
                    c1:18:8a:20:1c:79:94:07:48:c7:a9:99:f3:d5:fd:
                    4e:09:fd:e1:17:c0:2d:ff:43:f5:23:86:e9:b5:56:
                    39:09:dc:f4:04:f3:36:96:1e:49:0a:f5:86:0f:13:
                    cf:1d:6f:fd:64:c7:dd:ef:ae:b5:2e:96:4a:3e:ae:
                    57:44:19:db:22:e1:77:ef:6b:19:0b:74:6b:9b:f7:
                    b5:af:58:4f:ad:ac:8f:f9:0d:7b:3c:12:63:d6:96:
                    3e:6b:af:ac:1f:41:a8:74:e0:58:d0:40:85:c4:05:
                    cd:7f:3f:5d:d5:08:ab:df:ca:76:1d:49:02:a0:0a:
                    66:1e:3c:37:ea:c1:7f:24:1b:d3:dc:d8:1d:a6:f4:
                    f8:3b:f8:00:81:5d:84:81:c8:0c:6a:5f:ac:dd:7c:
                    3e:0e:d9:7f:90:de:fd:f9:6f:d7:f7:1f:10:80:0a:
                    9d:51:41:3e:8d:7a:7e:47:fa:14:10:6e:3f:c7:9d:
                    ce:03:fa:14:85:79:14:4f:16:55:ed:0c:c7:1d:49:
                    2f:32:c3:5b:ec:13:8c:ae:01:52:c6:35:66:41:a4:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:61:2B:BC:8B:4E:88:08:38:B8:77:80:48:9F:1A:D3:50:00:DD:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/02612BBC8B4E880838B87780489F1AD35000DD0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22
                  45.226.88.0/22
                  138.185.188.0/22
                  168.205.240.0/22
                  170.82.124.0/22
                  177.66.112.0/21
                  177.124.168.0/22
                  177.129.60.0/22
                  179.125.124.0/22
                  179.191.56.0/21
                IPv6:
                  2804:ad8::/32
                  2804:1510::/32
                  2804:4678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262494

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:c0:16:15:cb:de:21:de:4b:4e:8f:ab:b0:bc:e6:dc:fc:
         52:34:99:a1:93:cc:18:01:8a:ce:a5:92:7a:cd:fc:38:21:1a:
         04:ab:68:88:85:ec:a8:2b:12:c6:c2:c8:99:70:d7:e9:f6:80:
         eb:7a:32:ca:fe:1b:d0:80:f6:b8:94:14:13:47:88:1b:8a:a8:
         0b:8e:84:7b:48:b8:97:9e:1f:f2:50:66:a8:9a:a6:d1:e6:e2:
         e0:0b:41:68:68:1c:be:53:b2:aa:a3:f3:cc:d1:6d:83:7a:df:
         8b:22:86:f7:74:64:f0:ac:f5:da:58:c3:13:e3:23:11:7f:fb:
         94:77:9a:fb:7a:d2:f7:c2:1e:59:22:b6:f9:30:28:65:b1:e4:
         89:66:de:66:60:cd:9b:5c:a8:ce:3e:54:0f:10:c6:51:6b:5c:
         0a:00:b4:fe:65:69:0f:a2:bc:71:27:5b:8c:9e:a2:ac:9c:08:
         65:5d:e0:12:48:df:4c:56:84:52:82:c7:e2:0b:a9:7d:eb:3d:
         c1:1b:58:fb:a8:51:45:18:5a:fd:60:4d:b9:5c:e9:92:c6:e8:
         55:9d:0e:4b:62:49:40:d3:f2:db:33:ce:23:2e:d3:43:ec:5b:
         da:2f:5f:cb:d8:3e:d9:7a:7d:e1:7d:70:59:f9:15:bf:2e:e2:
         4e:8f:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 22:37:48 2024 by rpki-client on console.sobornost.net