Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.cer
File:                     7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.cer (raw, json)
Hash identifier:          kRAZasq0Ag/AxcVm9YjLZgyOWp6+yaUyOGprGcGuAEU=
Subject key identifier:   7D:C5:BF:F6:98:8E:9D:9A:24:F0:67:92:B0:B7:1C:BD:B5:36:85:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79419156DE537E3AA287017480150835F764DF66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Sep 2024 18:21:27 +0000
Certificate not after:    Mon 01 Sep 2025 18:26:27 +0000
Subordinate resources:    AS: 262458
                          IP: 177.53.48.0/21
                          IP: 200.9.220.0/22
                          IP: 2804:4ac::/32

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 18:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:41:91:56:de:53:7e:3a:a2:87:01:74:80:15:08:35:f7:64:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  2 18:21:27 2024 GMT
            Not After : Sep  1 18:26:27 2025 GMT
        Subject: CN=7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:2e:fa:32:fd:b6:b0:64:5c:9e:a7:b9:f7:
                    59:42:06:67:fd:5b:61:40:75:b9:ba:cc:b2:1a:9e:
                    af:7c:a1:a8:50:58:4c:50:5f:4f:00:a4:b8:e5:6b:
                    b1:9f:9b:d0:92:85:d0:07:52:dd:62:32:bf:7f:f3:
                    98:e0:a7:cb:e5:65:17:31:37:df:86:4c:45:5b:cb:
                    e7:0d:48:8e:d9:ff:2a:9f:58:75:9b:1a:55:a4:d0:
                    9a:d9:ba:82:31:ee:af:f9:86:11:98:62:f8:22:51:
                    b4:49:86:e2:21:2c:98:79:0f:a4:d6:de:80:2c:4f:
                    ac:58:94:c7:ee:09:48:ec:1a:a4:e2:a9:2e:5e:a5:
                    42:27:42:32:83:f4:56:5b:f2:3d:3f:65:61:67:55:
                    dc:e8:34:0d:db:5e:60:70:6f:b0:bf:04:46:2b:0c:
                    24:fd:1a:57:17:da:a0:fe:17:b2:6d:93:15:18:93:
                    06:88:72:31:e7:38:aa:d5:09:2f:3a:6b:93:67:a0:
                    7e:66:02:fd:86:3f:ba:99:1f:c2:75:1e:4a:2c:cc:
                    0c:af:0b:b8:c2:a8:70:9d:60:3b:64:53:ab:75:63:
                    19:51:1f:be:0c:bf:0b:d0:a8:5f:e6:a6:d2:18:75:
                    43:9b:89:2d:82:9f:63:58:82:3d:d0:b9:10:e9:7c:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:C5:BF:F6:98:8E:9D:9A:24:F0:67:92:B0:B7:1C:BD:B5:36:85:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.48.0/21
                  200.9.220.0/22
                IPv6:
                  2804:4ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262458

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:b6:17:87:b0:db:9e:f7:24:03:f5:df:32:a0:0d:e7:8b:
         be:66:4c:2f:65:18:ae:e8:ba:42:f6:5e:c9:2f:4f:03:12:aa:
         1f:57:ef:d9:f6:f4:0e:8b:c5:c9:c9:f5:00:d4:20:73:9f:c2:
         21:5b:8e:f2:e5:0f:2f:88:6f:d0:bf:4a:40:99:45:a2:e3:e3:
         5f:ac:c6:32:93:8b:57:71:0c:f4:72:d6:5f:ec:90:e6:d5:af:
         a3:8f:4f:92:1f:e8:be:e2:86:73:10:5f:5b:3d:e3:78:35:71:
         0e:a1:01:5d:5d:99:65:11:73:d2:59:0a:e3:2a:59:ec:d6:b0:
         cf:b1:09:4c:3c:36:c0:e2:d3:66:ce:85:02:5c:35:d2:fd:1f:
         56:46:ff:a9:d5:03:b1:b4:51:1c:71:fc:4c:77:d8:d5:93:67:
         c5:f5:a2:06:56:c3:81:b3:ae:93:9a:3b:f1:ec:5b:d2:b0:29:
         c1:f4:34:21:5c:19:95:b6:1c:17:c2:3c:86:82:d6:c8:0a:fe:
         69:69:8e:67:b8:35:d9:89:46:73:fd:3f:57:ad:76:67:b6:c2:
         26:60:00:f2:b5:79:ed:55:68:eb:8c:4a:6e:5b:83:7a:70:45:
         27:6b:39:7c:de:a9:3c:f0:48:ac:62:3a:df:2a:cd:86:b8:46:
         a6:fc:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:41:36 2024 by rpki-client on console.sobornost.net