Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D3B5422BBB6706DA23C08C6C42D39BF8A3DA972.cer
File:                     1D3B5422BBB6706DA23C08C6C42D39BF8A3DA972.cer (raw, json)
Hash identifier:          6xDgEhsqlG6vU3d9ylk8nOBaD7rlZ/5YMiypVab3kAU=
Subject key identifier:   1D:3B:54:22:BB:B6:70:6D:A2:3C:08:C6:C4:2D:39:BF:8A:3D:A9:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F45F580858BF4D9F1CF2A3C4AAD26B8495771CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/1D3B5422BBB6706DA23C08C6C42D39BF8A3DA972.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 14:03:08 +0000
Certificate not after:    Wed 07 May 2025 14:08:08 +0000
Subordinate resources:    AS: 273400
                          IP: 45.172.174.0/23
                          IP: 2804:8e10::/32

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 02:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:45:f5:80:85:8b:f4:d9:f1:cf:2a:3c:4a:ad:26:b8:49:57:71:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 14:03:08 2024 GMT
            Not After : May  7 14:08:08 2025 GMT
        Subject: CN=1D3B5422BBB6706DA23C08C6C42D39BF8A3DA972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:63:7f:44:ac:75:42:41:a6:6b:4d:0a:70:
                    34:bf:10:73:5a:c9:52:fa:63:1e:98:fc:2f:23:30:
                    ec:83:df:d5:54:49:b1:c4:46:ae:08:26:ba:02:ab:
                    cf:7d:a3:4b:98:3b:12:e4:75:4a:3a:26:c5:cf:08:
                    0b:99:ee:f3:a2:ad:91:3a:e3:e1:d8:7e:84:05:8d:
                    26:35:b9:fb:39:f7:4d:79:09:c8:7d:2b:a4:e2:af:
                    43:56:79:c4:a6:29:f4:cd:6c:f3:3d:11:76:30:29:
                    4e:2b:6c:2b:d2:8e:d5:65:8d:6c:1b:6e:0f:0e:2f:
                    60:d3:e3:93:e0:8e:bd:62:21:29:df:e4:39:99:8f:
                    24:9d:89:93:8f:33:6c:a9:60:b9:49:db:c0:d3:06:
                    c2:03:97:81:bc:f4:38:14:c1:09:65:6e:56:6c:55:
                    73:04:0b:32:b2:ef:13:d2:f9:8d:8f:c8:4c:5f:6e:
                    16:19:1e:b9:28:df:06:d2:59:b8:22:dc:9d:b0:28:
                    a8:ad:17:e1:16:90:7e:ac:f5:27:4e:33:b3:84:dd:
                    9b:73:73:3e:26:09:46:46:4b:4b:81:bf:b5:49:87:
                    36:e7:e5:42:a5:f0:97:a6:5b:06:03:6a:66:f6:64:
                    10:e4:5b:fd:cc:75:88:d8:14:76:2b:e4:6b:bf:20:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:3B:54:22:BB:B6:70:6D:A2:3C:08:C6:C4:2D:39:BF:8A:3D:A9:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/1D3B5422BBB6706DA23C08C6C42D39BF8A3DA972.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.174.0/23
                IPv6:
                  2804:8e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273400

    Signature Algorithm: sha256WithRSAEncryption
         29:25:d6:8f:af:86:64:4e:cf:e4:e0:e4:fa:2f:4a:26:0f:d7:
         7e:d0:1b:53:2d:ea:4f:5b:7a:6a:c3:c7:b0:4d:ab:22:98:bb:
         ba:52:48:47:2f:ca:69:89:ec:af:b6:a6:1e:95:59:60:09:97:
         84:70:94:e2:3c:57:13:ec:18:7c:2b:5a:7c:52:5a:26:5f:63:
         3b:9b:3e:6b:d5:a7:a4:d1:dc:b5:75:5e:42:df:63:03:e9:0c:
         8e:6d:2f:74:12:8a:a4:74:c4:ed:81:55:c1:23:27:96:45:1b:
         1a:96:57:5e:da:d3:91:13:0c:a5:18:8a:a5:13:01:d2:cd:8c:
         af:f3:62:21:77:bf:ca:30:2a:0d:14:29:59:a9:84:77:29:f9:
         23:5a:67:af:37:b0:60:bd:dc:31:74:7e:c0:08:30:b4:a4:f2:
         67:86:0c:33:32:7d:48:a9:56:86:a1:8b:fd:81:35:7b:eb:a5:
         46:19:f3:d1:d3:92:18:db:b8:8e:ab:0b:1f:49:d2:29:8b:21:
         c4:b7:b1:2a:8a:57:48:24:6d:bf:0e:b7:15:f4:c0:91:fa:c5:
         53:e7:cd:3f:ed:3a:67:74:d0:5d:d2:05:ea:ed:db:54:92:86:
         d6:f4:be:14:9c:98:6f:d6:99:6a:eb:20:6e:0f:cf:e1:c7:67:
         80:25:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:21:31 2024 by rpki-client on console-fra.rpki-client.org