Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.cer
File:                     31E1F1616E7FDE1677AA01660480B3498990ECA4.cer (raw, json)
Hash identifier:          lyXR3xsDjsBi7xmFXrW0VJ46F0WNhecwk8npnIn5wbs=
Subject key identifier:   31:E1:F1:61:6E:7F:DE:16:77:AA:01:66:04:80:B3:49:89:90:EC:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5511B26C0714B9961294513677336D338A2273D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:49:53 +0000
Certificate not after:    Thu 03 Apr 2025 17:54:53 +0000
Subordinate resources:    AS: 28145
                          IP: 186.192.224.0/20
                          IP: 187.49.128.0/20
                          IP: 2804:d0::/32

Validation:               Failed, certificate revoked on Thu 30 May 2024 23:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:b2:6c:07:14:b9:96:12:94:51:36:77:33:6d:33:8a:22:73:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:49:53 2024 GMT
            Not After : Apr  3 17:54:53 2025 GMT
        Subject: CN=31E1F1616E7FDE1677AA01660480B3498990ECA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:fe:73:4a:f3:57:06:54:f2:7e:81:6a:9b:
                    7a:ac:4a:79:f8:c9:55:6a:a2:dc:6c:db:8e:7e:a4:
                    4c:fd:81:45:6e:23:fb:fd:a0:3e:7c:05:ff:42:cc:
                    87:00:71:54:49:d8:2f:d0:fb:25:2d:07:49:3a:21:
                    b4:26:65:3d:f0:37:6a:d2:dc:9e:c4:ba:28:4f:d2:
                    0a:92:8a:f6:33:60:ea:c2:32:21:fe:d4:b0:38:d3:
                    5c:6d:b1:e1:67:1f:04:f8:d3:21:19:a3:3e:17:c2:
                    d9:66:55:ea:2d:f5:45:57:a4:7e:0a:e3:cf:45:9b:
                    7a:69:3c:c4:57:24:a3:62:e2:c6:3b:ba:5e:c9:f3:
                    e1:e4:9e:60:85:cf:0a:8b:f8:38:b7:87:66:97:4c:
                    a7:90:23:a6:0c:34:ef:89:9a:8b:37:90:9d:2e:06:
                    45:4d:a5:9b:48:8c:dc:58:23:82:b1:94:a9:54:7c:
                    4b:86:c6:43:d5:f0:4f:63:45:3e:80:4c:d0:e1:2f:
                    cb:42:13:7e:82:b6:b3:ed:80:ea:cf:9e:3d:db:7d:
                    bb:95:c9:9e:41:07:3f:77:da:0e:47:be:0f:1e:de:
                    99:7d:ef:6d:f7:d1:ee:6e:9c:31:8f:5a:b8:0f:75:
                    fa:fa:4e:c5:0b:3b:e0:fd:eb:e7:bd:45:8f:f7:43:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:E1:F1:61:6E:7F:DE:16:77:AA:01:66:04:80:B3:49:89:90:EC:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.224.0/20
                  187.49.128.0/20
                IPv6:
                  2804:d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28145

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:bb:61:2a:6b:b4:5a:9a:2b:46:73:1a:01:66:fd:35:27:
         ac:40:8a:69:89:e5:13:1d:eb:ee:74:a4:7b:ee:34:91:22:c6:
         af:29:50:f3:d7:46:7f:d9:94:d6:9c:31:05:a1:f0:a5:5f:d4:
         32:23:a3:fb:35:0d:26:ce:87:0e:bb:76:3e:c5:da:4d:cb:a7:
         1b:79:ed:00:97:04:5a:9f:9f:8c:4c:0b:8a:d1:82:ed:37:6c:
         ea:04:ed:73:6a:66:93:46:d2:67:e6:7d:40:47:db:b2:1b:dc:
         70:1b:54:f6:3b:2b:66:7a:34:ba:a6:58:99:5f:33:f1:b3:00:
         b3:6b:01:2f:73:ee:41:aa:cc:96:ba:7e:8f:05:3f:c1:a3:f6:
         27:8a:bd:91:b2:0f:31:b0:73:ce:73:ce:d8:2f:f8:92:61:9b:
         02:93:50:c4:f0:ed:a6:c8:ab:77:59:ad:91:23:02:d9:70:30:
         24:c9:70:b8:0b:f4:84:19:e5:f4:f0:a7:0f:f4:d2:e6:85:87:
         29:1f:b9:8d:fe:77:a5:df:bf:08:58:16:c1:a3:78:7f:91:e3:
         f8:11:5b:e5:d6:89:2e:1c:66:9e:95:5d:18:ba:19:23:f3:84:
         24:53:c5:f2:ee:34:fe:f9:22:9d:c9:e6:bc:33:69:9b:76:5a:
         c3:83:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org