Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer
File:                     F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer (raw, json)
Hash identifier:          JbjUbyhvwsNqd71zqpnKDDQKU+ifdztHInXGMrSDxcw=
Subject key identifier:   F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19617D1096F593A52066759B3D606D18E7E2B9A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 07:08:46 +0000
Certificate not after:    Wed 11 Mar 2026 07:13:46 +0000
Subordinate resources:    AS: 273663
                          IP: 177.8.71.0/24
                          IP: 200.124.78.0/23
                          IP: 2804:8a58::/32

Validation:               Failed, certificate revoked on Fri 21 Mar 2025 18:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:61:7d:10:96:f5:93:a5:20:66:75:9b:3d:60:6d:18:e7:e2:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 07:08:46 2025 GMT
            Not After : Mar 11 07:13:46 2026 GMT
        Subject: CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:f4:b7:d7:31:b7:8e:44:0c:e2:5f:6c:71:
                    b8:5e:5a:0d:01:6c:53:40:0b:41:f3:51:c3:99:d0:
                    4f:dc:67:9c:99:30:5c:9f:31:98:2c:a8:c6:4b:57:
                    d2:31:2b:82:ff:8a:7c:af:bb:6a:e3:49:10:d8:66:
                    7e:75:7b:a0:b4:0e:b1:1f:8a:e3:74:14:ad:9f:b3:
                    5e:27:7d:ba:8a:47:38:eb:d0:21:a8:6f:f2:b6:13:
                    bb:1a:0b:5e:ca:89:c5:8a:28:93:b9:68:fb:b0:f4:
                    4e:4a:f9:52:fe:76:76:a8:f3:00:72:0b:6e:db:54:
                    64:63:10:36:40:95:ac:5c:82:57:5d:54:aa:92:b3:
                    c5:02:11:49:ec:91:8c:db:61:18:96:84:e8:e8:e6:
                    9c:63:13:0f:13:ad:5f:d8:3b:81:80:4c:38:0d:00:
                    c9:45:0c:b7:83:b9:49:06:ab:f3:e4:0e:15:db:5e:
                    91:54:7a:d1:22:e3:e4:ad:4d:dd:9f:96:b4:74:f9:
                    c5:5c:6e:7c:2d:65:14:b1:d4:a7:c0:21:4d:08:77:
                    26:ab:86:b3:e8:a1:2d:29:ad:0f:14:a6:78:c5:cb:
                    10:ad:b1:9b:5b:59:5c:6d:36:d8:08:39:d3:db:dc:
                    9b:16:04:19:c8:e4:63:07:6e:c6:e3:db:09:ad:13:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.71.0/24
                  200.124.78.0/23
                IPv6:
                  2804:8a58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273663

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:bd:3d:c5:41:8a:ef:f7:c4:95:89:9d:77:07:2c:97:8a:
         b7:e4:0f:74:be:2f:39:db:7f:c1:1d:61:35:37:dd:20:0e:15:
         fd:f4:0b:8e:ad:0a:74:d2:e5:41:b4:24:ee:73:02:60:83:23:
         40:18:42:f9:37:d7:9f:3e:68:19:66:09:be:8d:ab:4c:ae:f5:
         b1:da:3a:d5:dd:d3:c8:c5:44:91:8f:f5:64:f2:e3:0e:3b:c6:
         d5:39:4e:f7:c1:b2:96:62:59:32:90:b1:27:da:93:ff:26:fb:
         c4:e4:87:9c:a3:8c:05:ac:f8:60:7f:7f:10:95:93:d0:37:98:
         35:79:47:62:11:bb:12:7f:08:b7:ee:62:35:db:63:db:2d:fb:
         50:81:04:a6:4c:58:c7:1f:c0:ae:52:3d:d2:00:a5:f3:85:0c:
         e2:a5:a6:68:c8:45:9f:21:8d:a5:e0:f1:53:99:5c:db:a7:89:
         a5:09:26:65:91:6e:41:e6:c7:d1:87:a3:a0:32:0d:24:60:2a:
         08:58:98:2d:3f:ad:43:fd:e8:98:6f:2d:25:81:8b:92:44:a2:
         87:a8:17:55:7e:4a:2b:e3:67:c2:d3:f6:fb:10:71:ff:54:9b:
         94:fd:d1:0b:f9:81:74:38:5f:e7:6a:aa:61:f0:1f:98:bc:c4:
         fe:2d:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 21 22:03:21 2025 by rpki-client on console.sobornost.net