Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/12313C794512B9199775646D0C40B3FA064905B3.cer
File:                     12313C794512B9199775646D0C40B3FA064905B3.cer (raw, json)
Hash identifier:          d7/4BQxNnusFEQ6u3O4Od+shpMgnCICEoNd0ntsPsSc=
Subject key identifier:   12:31:3C:79:45:12:B9:19:97:75:64:6D:0C:40:B3:FA:06:49:05:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BA25C5FA25F50C8417F4E7E494F1EFFEF3396CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/12313C794512B9199775646D0C40B3FA064905B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Aug 2024 12:09:51 +0000
Certificate not after:    Thu 07 Aug 2025 12:14:51 +0000
Subordinate resources:    AS: 264119
                          IP: 138.59.216.0/22
                          IP: 2804:22bc::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 19:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a2:5c:5f:a2:5f:50:c8:41:7f:4e:7e:49:4f:1e:ff:ef:33:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  8 12:09:51 2024 GMT
            Not After : Aug  7 12:14:51 2025 GMT
        Subject: CN=12313C794512B9199775646D0C40B3FA064905B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:63:82:c9:b4:f7:b7:9b:15:1f:3a:fb:87:
                    61:0f:35:ac:59:80:be:c2:d5:72:dc:0b:c4:10:4a:
                    27:ad:6d:a4:fc:49:9b:08:1a:f3:90:34:1d:ba:f9:
                    4d:48:6f:15:85:1e:73:82:c9:55:8b:d7:e5:71:f9:
                    e9:23:39:6f:ea:52:43:c4:3f:fb:ac:fb:17:fd:f6:
                    5e:b9:5d:b3:0d:85:90:99:14:9a:43:e5:4a:95:93:
                    fe:86:44:55:f9:cc:3e:47:e0:e6:21:99:3f:5e:fa:
                    0c:1e:ac:f8:bf:d8:62:66:b6:f9:eb:d2:2f:e3:1a:
                    3c:be:22:f4:66:f7:a3:9c:21:24:25:e8:78:aa:0a:
                    7b:89:5c:87:4b:3e:3b:b5:42:ce:5f:d4:8f:1b:c5:
                    a6:ec:9c:6d:c0:00:1e:c9:da:bb:ad:91:a4:b5:06:
                    70:6e:07:29:aa:90:0d:0d:d9:50:47:95:25:fc:e1:
                    4f:9c:39:7a:ff:68:3c:ef:ee:f4:ef:bc:83:01:fa:
                    eb:b7:72:be:67:eb:fb:d5:5e:35:0a:8b:73:82:d0:
                    d3:3e:7f:2f:cc:0f:c1:17:99:1e:2a:ff:7b:df:a8:
                    9d:04:6e:18:68:e2:49:36:e0:8d:98:2f:3a:16:88:
                    66:0f:81:1d:41:fa:66:15:84:6b:0c:b3:d9:7a:72:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:31:3C:79:45:12:B9:19:97:75:64:6D:0C:40:B3:FA:06:49:05:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/12313C794512B9199775646D0C40B3FA064905B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.216.0/22
                IPv6:
                  2804:22bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264119

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:44:81:51:c2:a7:e6:c4:df:53:80:ad:b7:d1:23:7f:00:
         2e:d1:2d:5d:ca:32:f1:63:65:54:0c:de:3f:2b:7b:0b:e0:df:
         57:d8:f9:bd:d6:b0:49:10:b6:f5:d4:06:85:ec:b0:9d:4b:24:
         d5:47:24:b3:76:5e:5e:6d:8e:07:10:c5:9f:a0:6e:da:8b:90:
         91:b6:37:5d:1f:0a:bf:d4:d3:8c:20:8c:15:6e:9e:1b:f1:92:
         5a:4c:9b:3b:b2:f3:1a:a1:37:23:ea:88:90:89:e0:55:e9:a1:
         ea:19:8b:f2:1a:31:d6:57:60:85:bf:a8:e4:e7:24:79:fe:35:
         81:50:69:05:69:0f:13:c7:9f:44:72:bc:26:23:4c:d3:42:ae:
         69:5d:e0:2d:d0:4a:53:54:99:c8:a6:1e:fe:6f:c6:50:8b:4e:
         58:f0:a6:17:41:9a:b1:61:9a:67:ff:a7:e1:33:88:89:88:d2:
         8f:1f:46:a3:43:70:cb:9e:05:95:b7:a7:a6:e4:7c:60:62:0a:
         9d:19:23:2e:69:09:20:50:ab:77:d9:47:d7:8c:85:da:43:a8:
         6a:69:c2:ea:e1:d0:f4:41:64:ce:71:3f:4d:b4:62:c3:89:73:
         54:5b:39:f1:af:e7:f7:36:c2:c7:14:30:08:c8:35:4a:2e:fc:
         5c:c4:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 00:43:15 2024 by rpki-client on console-fra.rpki-client.org