Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31213D3AE3530B02A09BE83FB7791DC8890DE725.cer
File:                     31213D3AE3530B02A09BE83FB7791DC8890DE725.cer (raw, json)
Hash identifier:          SMw2AjMxh9d0655nj+ckKHKaSoYORp3IOZF1CpEH+zU=
Subject key identifier:   31:21:3D:3A:E3:53:0B:02:A0:9B:E8:3F:B7:79:1D:C8:89:0D:E7:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3CF2F1C3A2F0E2E15B5F88DA0D87370843DD8991
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/31213D3AE3530B02A09BE83FB7791DC8890DE725.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 23:05:34 +0000
Certificate not after:    Fri 30 May 2025 23:10:34 +0000
Subordinate resources:    AS: 268216
                          IP: 45.235.248.0/22
                          IP: 2804:4dbc::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 01:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f2:f1:c3:a2:f0:e2:e1:5b:5f:88:da:0d:87:37:08:43:dd:89:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 23:05:34 2024 GMT
            Not After : May 30 23:10:34 2025 GMT
        Subject: CN=31213D3AE3530B02A09BE83FB7791DC8890DE725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c1:dc:2e:90:47:0b:8b:dd:d8:6a:9b:23:2d:
                    9d:64:44:6f:12:35:cd:47:0e:a4:2a:ee:a6:23:a9:
                    82:50:dc:61:e0:f5:eb:83:36:71:02:96:1b:e9:27:
                    4d:fe:63:c7:d6:a3:68:e5:63:48:b3:79:86:b3:ea:
                    12:cd:9c:b5:56:f6:2d:2e:f1:e0:2b:2f:e7:74:fe:
                    e3:ed:f6:eb:44:e8:4d:6a:aa:20:b7:c1:15:d0:3a:
                    8b:69:ab:b5:d7:cd:87:0b:c8:d0:4c:fe:ce:30:61:
                    99:17:5b:e2:c8:c7:42:85:4a:dd:18:b0:f7:86:62:
                    59:94:38:3c:2b:11:46:66:ef:8a:4b:fb:6f:4a:32:
                    fd:42:6f:61:08:01:f3:53:6f:34:5a:07:fe:d1:c7:
                    64:55:24:fc:b2:c8:15:0f:54:32:b0:24:05:20:c2:
                    74:2a:f7:ec:c7:98:f2:45:f9:fa:1f:a3:aa:ce:b4:
                    bb:44:64:30:2d:4e:45:a6:6e:6b:45:08:12:20:0b:
                    c1:81:d2:4f:38:47:d1:7e:b1:61:bd:85:a2:99:2c:
                    51:77:2e:21:f2:39:62:98:b3:15:3d:cc:60:27:4a:
                    b4:f2:f3:f6:4c:8a:e9:41:a5:ef:e7:43:51:05:f5:
                    16:2e:34:c8:ee:c7:08:b5:1a:bb:c3:42:82:c3:a7:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:21:3D:3A:E3:53:0B:02:A0:9B:E8:3F:B7:79:1D:C8:89:0D:E7:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/31213D3AE3530B02A09BE83FB7791DC8890DE725.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/22
                IPv6:
                  2804:4dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268216

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:26:21:54:83:0a:42:f2:ae:c2:c8:5e:aa:2c:79:f9:9b:
         a1:1f:02:83:b9:4a:49:8f:82:6b:92:d7:3c:a0:29:04:a2:b2:
         cf:9e:73:2e:ee:ff:ef:bf:fa:6a:16:88:76:9c:54:87:f8:1a:
         ee:c4:8c:6d:06:49:2d:da:e4:31:78:7b:4a:c2:66:6d:cf:65:
         bc:d2:d4:05:94:57:0c:fe:c7:18:a7:27:00:ac:32:ff:cc:3a:
         f3:dd:8d:4b:98:37:a3:44:06:71:24:f4:a3:33:5b:57:65:da:
         23:71:7c:84:c2:69:db:75:64:1a:f7:70:63:af:cc:aa:9f:2e:
         f3:8d:e2:da:3b:82:c3:ae:6d:86:55:2f:24:d9:17:d5:d1:c0:
         7b:e4:fe:f2:71:ed:1a:e6:8e:e5:21:3b:af:eb:e3:9b:8a:18:
         f4:c6:66:ea:c3:ca:eb:d6:71:08:3f:46:ad:ec:5b:0e:ea:37:
         8e:0b:86:63:79:ac:94:cd:83:8d:4f:08:98:b9:1d:df:b4:e3:
         37:31:03:fe:14:08:d0:9f:9f:8b:8b:18:fe:f4:a6:d8:b8:25:
         2a:bc:0b:a2:3b:b2:8f:ab:06:e8:3e:89:8a:41:55:f3:8a:ed:
         e7:8e:8a:4c:32:c3:83:d6:79:b1:8d:a5:3c:48:68:18:06:3f:
         ae:ce:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:07:02 2024 by rpki-client on console-fra.rpki-client.org