Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3285688D86C6C08B0B02D340984A906142369815.cer
File:                     3285688D86C6C08B0B02D340984A906142369815.cer (raw, json)
Hash identifier:          rrPugI0ySCkqWqyNSj7WbhsrAz8OIMhZo6qVSYkXtEI=
Subject key identifier:   32:85:68:8D:86:C6:C0:8B:0B:02:D3:40:98:4A:90:61:42:36:98:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BF45284D5B9DBA3F48800CC8F3C9FFEC63169DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/3285688D86C6C08B0B02D340984A906142369815.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 14:31:59 +0000
Certificate not after:    Wed 28 May 2025 14:36:59 +0000
Subordinate resources:    AS: 265470
                          IP: 168.196.204.0/22
                          IP: 2804:34a4::/32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 12:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:52:84:d5:b9:db:a3:f4:88:00:cc:8f:3c:9f:fe:c6:31:69:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 14:31:59 2024 GMT
            Not After : May 28 14:36:59 2025 GMT
        Subject: CN=3285688D86C6C08B0B02D340984A906142369815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:56:ad:c4:36:f6:e9:27:59:16:42:6f:2a:
                    06:94:96:b0:85:bc:8d:83:27:fd:f7:8e:28:9e:37:
                    e0:87:8d:45:20:d7:6d:14:00:ca:7f:14:1f:84:cd:
                    15:cb:28:47:25:d4:50:6f:9f:0f:d2:29:a2:f9:af:
                    d0:8d:54:3b:42:58:71:b8:43:6b:b9:1a:50:8e:95:
                    c5:70:34:53:90:39:44:1b:6d:f4:5f:20:24:94:4a:
                    7e:98:e1:5a:eb:1f:b2:7b:35:6a:d8:71:a8:53:14:
                    dd:a5:46:b3:8a:ad:f0:49:31:3d:0b:fe:68:a9:04:
                    9f:1f:7e:2b:64:6d:96:d4:62:32:06:cc:e8:d8:35:
                    35:f0:26:2c:2f:dc:66:09:96:cc:7b:92:c0:f5:54:
                    99:d4:c7:d3:9c:83:9c:fd:c8:45:36:f4:81:fb:4f:
                    47:1f:d6:7b:f2:e9:72:ee:9b:5b:d3:50:72:5a:0f:
                    08:be:5c:d5:80:fd:76:5f:d6:f2:ef:13:0c:48:93:
                    9f:85:31:f8:e8:e1:df:1c:c7:da:14:c7:61:1c:d7:
                    78:9f:f8:de:d0:46:fd:34:a6:e4:0b:fe:68:a9:93:
                    36:aa:29:15:33:d2:93:a2:e6:70:57:c8:96:2d:46:
                    f2:87:f7:bb:78:60:cf:18:91:9a:a1:18:40:76:df:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:85:68:8D:86:C6:C0:8B:0B:02:D3:40:98:4A:90:61:42:36:98:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/3285688D86C6C08B0B02D340984A906142369815.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/22
                IPv6:
                  2804:34a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265470

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:13:d9:e5:0e:95:36:10:5f:4c:e3:74:0b:4d:14:03:78:
         17:ca:0d:e0:c9:34:a3:2c:46:dd:aa:6a:e9:f9:10:b8:c8:d1:
         71:bb:31:7d:ce:64:1b:9e:ae:86:8e:31:3b:db:ce:8e:ca:4a:
         1c:04:9a:b1:43:13:82:48:b8:63:49:8c:fa:8c:a6:b7:f3:0d:
         71:98:39:30:a6:bb:a2:f1:7d:77:3c:88:f7:e3:15:cd:df:9f:
         58:6a:52:51:ef:0c:dc:38:8d:ab:76:61:14:7b:08:d4:1b:6e:
         c4:5c:2c:16:b6:22:e7:9d:7b:7d:88:2a:4b:f5:d1:2f:76:da:
         bd:3c:63:25:da:f7:80:16:28:6e:05:03:1d:35:22:e8:fe:5f:
         84:1f:c8:eb:c9:65:7b:a7:e5:90:5a:8f:88:4e:47:ee:67:e4:
         58:0b:5f:bf:8c:73:4d:e8:6e:02:13:3f:5e:b3:f0:eb:b7:34:
         f4:2a:78:e3:93:1d:2c:b3:97:1e:f4:e1:e9:49:8a:8c:48:cd:
         f7:09:28:fc:82:23:10:e7:af:53:74:fe:7f:02:75:30:d5:97:
         95:25:df:b9:d2:7d:4d:c7:cf:48:80:4b:75:90:5f:70:c2:02:
         9e:3b:c2:ce:b4:27:4d:c8:a5:76:55:f5:7f:5e:96:19:71:25:
         4b:c1:e6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org