Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
File:                     3361B78662C4F4994A60931D16B5383E3AB4E319.cer (raw, json)
Hash identifier:          XLxROW49/Uu4Z6C8AsnHb8lwdm+6cilLJJg3yciXxoY=
Subject key identifier:   33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5147475B93315AA371BAA0CE49C5856D47133E46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Oct 2024 16:02:33 +0000
Certificate not after:    Tue 14 Oct 2025 16:07:33 +0000
Subordinate resources:    AS: 269457
                          IP: 45.187.60.0/22
                          IP: 2804:64e8::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 16:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:47:47:5b:93:31:5a:a3:71:ba:a0:ce:49:c5:85:6d:47:13:3e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 15 16:02:33 2024 GMT
            Not After : Oct 14 16:07:33 2025 GMT
        Subject: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:f4:3f:1d:3e:d4:fc:bd:38:49:8e:52:af:
                    4e:7d:60:81:97:4b:a4:23:28:84:da:2c:9a:4a:47:
                    0d:1c:d0:42:c5:46:de:07:44:ae:a3:4b:bd:92:af:
                    45:4c:b8:f7:2a:8d:1b:91:92:03:21:94:3b:25:8a:
                    3a:25:40:f5:ef:43:79:3e:5d:f4:46:28:ed:67:e6:
                    ad:00:e0:18:59:69:44:2e:57:9e:24:d3:8c:e8:9d:
                    cb:32:91:97:22:07:66:6c:60:17:82:29:2e:57:73:
                    03:ec:f7:b5:6a:ea:47:bd:ce:fb:98:f9:a6:e5:fe:
                    7c:f4:bd:a1:e0:e3:cd:e3:38:94:20:f1:3b:21:95:
                    6a:f5:17:28:8d:d7:0d:97:7f:07:61:20:67:ce:a4:
                    9c:36:79:fb:99:39:a7:e3:44:b0:ee:f4:b0:cc:64:
                    20:b2:48:52:7c:ea:60:3a:ba:1a:69:e7:2c:a6:e1:
                    65:d3:bb:d5:5c:fc:72:c4:1c:08:d3:e4:19:79:50:
                    af:41:73:e7:29:f6:58:81:ae:d2:47:e0:28:3f:14:
                    ae:6a:76:ad:18:35:3c:38:d2:18:0b:b8:17:79:9c:
                    8b:d7:31:8a:80:6e:7c:26:4c:c8:d2:ea:1e:96:89:
                    bd:d3:ff:e5:09:6b:05:2c:a6:5c:0b:3f:18:83:f4:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22
                IPv6:
                  2804:64e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269457

    Signature Algorithm: sha256WithRSAEncryption
         d4:45:49:4a:0f:6e:49:53:05:0d:8b:e2:90:99:2c:86:61:16:
         4c:70:59:d7:72:10:33:73:53:76:47:36:ac:93:39:47:fb:10:
         85:2c:9e:2c:ca:db:9e:71:2e:4a:74:e1:5b:84:21:f1:cd:6e:
         fe:74:90:d7:1f:e6:2b:80:c4:97:f7:c6:7b:2f:b4:87:18:2f:
         ef:3e:54:fa:3c:ab:c3:57:0e:f8:ae:f9:d3:e4:ef:84:47:aa:
         1e:81:d8:0d:d7:0d:9c:b2:19:a0:da:d3:d0:00:04:c3:ca:d2:
         4d:01:a2:8a:a7:1c:97:6e:69:5f:72:08:de:29:b6:0a:cd:34:
         ad:aa:bc:a7:f9:15:47:62:cf:0c:6a:7c:47:04:1a:48:11:f5:
         7a:76:65:3a:f7:86:d9:e3:bf:ea:6b:a2:8b:1e:40:c3:14:e1:
         29:2c:4e:75:6b:c9:25:10:30:4e:7c:1f:03:58:27:1f:62:52:
         7a:65:ef:89:b9:30:1c:c1:ef:07:f8:8b:ca:39:79:3e:15:2c:
         60:3a:91:e0:dd:4b:20:18:5f:54:01:2f:0d:72:63:23:48:e1:
         0b:2f:da:cc:c5:d6:e9:a1:70:5e:8d:f5:34:d1:f3:96:8f:d7:
         15:fb:0f:0d:3c:5a:8f:20:55:44:d4:78:2d:f1:7a:d4:fa:ad:
         11:29:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:47:47 2024 by rpki-client on console-fra.rpki-client.org