Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.cer
File:                     0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.cer (raw, json)
Hash identifier:          Opo6K6o5TbYjBPXsMO3s96a8EspBxNmt4B14HrhXxSY=
Subject key identifier:   03:06:DD:90:02:F6:DF:CE:DE:0A:16:C9:1D:0E:5F:53:7A:01:17:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C80A6AEFFE4D4D4F428BD340B74737FBD7D0195
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 23:19:22 +0000
Certificate not after:    Thu 17 Apr 2025 23:24:22 +0000
Subordinate resources:    AS: 268195
                          IP: 45.235.100.0/22
                          IP: 2804:4d6c::/32

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 19:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:80:a6:ae:ff:e4:d4:d4:f4:28:bd:34:0b:74:73:7f:bd:7d:01:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 23:19:22 2024 GMT
            Not After : Apr 17 23:24:22 2025 GMT
        Subject: CN=0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:a3:f3:58:52:a6:cd:a7:91:c6:32:be:85:
                    fd:88:d5:a2:be:0a:f4:4b:b6:4d:15:5e:1a:fb:3c:
                    fa:90:26:ba:94:00:60:f2:bf:4b:ad:b3:34:16:64:
                    ad:4e:cf:ab:d3:79:60:ef:5c:b0:5f:8e:65:1f:89:
                    51:85:f6:eb:d9:09:e6:31:67:75:e3:21:aa:45:e3:
                    91:b0:00:3d:1d:4e:37:24:1b:61:48:ad:ee:2b:d3:
                    b1:1a:b8:ef:ad:58:e3:3b:d4:8e:c5:43:71:92:68:
                    ac:41:6d:33:a5:16:ac:cb:5f:33:7c:57:0e:b0:06:
                    13:5a:86:71:20:6b:53:c2:55:ae:27:8f:c4:1a:57:
                    88:6f:91:f8:55:4e:14:43:30:3f:53:5a:ba:4c:c4:
                    f3:da:02:29:ac:e6:da:20:ff:0b:0f:ed:66:b8:f8:
                    40:28:a9:f5:6c:99:71:bc:db:4f:8f:07:ac:65:f2:
                    6e:b1:6f:17:f2:ed:87:13:b8:fe:c4:ec:12:30:bc:
                    40:55:b3:5d:9e:55:ad:64:68:06:4c:38:30:aa:bd:
                    55:fa:b6:41:b3:cb:8f:6e:8c:cd:13:8c:07:8e:88:
                    a8:a7:94:db:7c:7d:3b:b8:66:55:c0:17:ec:28:3b:
                    86:3d:4f:15:8e:d6:e7:0e:79:3b:32:c7:5a:19:40:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:06:DD:90:02:F6:DF:CE:DE:0A:16:C9:1D:0E:5F:53:7A:01:17:BA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.100.0/22
                IPv6:
                  2804:4d6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268195

    Signature Algorithm: sha256WithRSAEncryption
         c4:f3:97:ad:73:59:11:2e:f9:fe:bf:9e:05:5e:65:d6:0e:7f:
         b1:ae:37:03:8d:e3:aa:02:64:55:0c:09:2c:c5:1c:ac:a5:43:
         8e:94:68:f4:f2:92:a8:8a:ff:a5:8a:3f:74:3f:8d:7d:b3:57:
         58:03:0f:b4:8f:d3:9e:8e:6f:bd:95:10:15:fe:32:81:9e:17:
         8a:60:46:1f:2c:60:48:8e:de:57:28:45:56:3c:cc:e6:1f:02:
         7f:ae:17:aa:3c:4d:bf:1e:0b:4e:44:71:2e:7a:78:97:f5:24:
         af:ad:c2:14:58:6c:8b:69:ee:dc:18:90:7c:31:6e:2d:72:19:
         68:ea:b9:54:34:ea:84:0e:13:97:81:fa:a5:16:aa:8e:e6:bd:
         03:f7:1f:65:91:f0:fa:1b:3b:f6:aa:b3:05:6a:a5:58:4f:60:
         cf:16:b2:5a:9e:23:ea:2e:c1:f6:6a:de:e6:2c:86:16:6d:88:
         c9:da:ff:ea:36:27:4a:dc:6b:1e:be:23:12:78:13:d9:8f:fe:
         ec:d5:aa:45:26:46:6b:f3:59:86:47:98:aa:6b:28:b4:7b:77:
         04:56:e8:a3:29:59:df:ef:a1:3b:3c:01:9e:d9:c2:95:09:1b:
         cc:40:e9:9a:70:32:3b:99:94:a7:d2:d2:d1:17:d8:9d:11:70:
         78:4c:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 22:28:01 2024 by rpki-client on console-ams.rpki-client.org