Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3504F7375A940F7C2F39F0724E0156581D0F249C.cer
File:                     3504F7375A940F7C2F39F0724E0156581D0F249C.cer (raw, json)
Hash identifier:          lZ9TD4tIDxLtB7VgiGdThYZeAvP7H+qEMTWcTbqgjkM=
Subject key identifier:   35:04:F7:37:5A:94:0F:7C:2F:39:F0:72:4E:01:56:58:1D:0F:24:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7418423C6F86963CC635ABD38D7EA9F1202B0099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/3504F7375A940F7C2F39F0724E0156581D0F249C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 17:27:30 +0000
Certificate not after:    Mon 02 Jun 2025 17:32:30 +0000
Subordinate resources:    AS: 272283
                          IP: 2804:84d8::/32

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 00:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:18:42:3c:6f:86:96:3c:c6:35:ab:d3:8d:7e:a9:f1:20:2b:00:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 17:27:30 2024 GMT
            Not After : Jun  2 17:32:30 2025 GMT
        Subject: CN=3504F7375A940F7C2F39F0724E0156581D0F249C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:fd:ad:14:48:fa:f3:a8:c8:93:04:1f:2d:
                    a4:bf:2b:15:a8:e2:7c:6f:53:12:19:73:03:e5:f3:
                    c8:1c:49:b5:73:38:7a:42:a7:d3:cb:f5:f4:c4:8a:
                    b2:c1:ab:ce:80:be:53:fa:64:6c:17:1a:30:91:6f:
                    ff:49:cf:20:54:af:c6:c4:16:f9:f0:02:25:b4:55:
                    76:43:c8:1c:5b:3f:83:b0:6a:e8:f6:49:37:51:45:
                    17:16:5f:de:79:4d:4c:d2:f7:ef:09:4f:1f:b9:3b:
                    b5:7a:c5:25:96:80:43:56:72:54:f0:2f:d3:be:a1:
                    c3:35:22:9b:c9:70:3e:dd:d5:de:e8:74:9b:6e:18:
                    0f:18:94:cf:13:c9:bd:35:4e:f2:ad:1e:01:6f:a3:
                    1c:cd:e9:33:16:52:04:10:94:f6:7a:15:71:10:f1:
                    64:d4:8f:51:73:0d:6b:cf:7d:15:44:3a:23:b3:6a:
                    13:c3:c4:ea:d6:d9:22:c1:a2:87:b0:16:f0:d0:36:
                    33:c6:3a:03:e7:a8:53:10:60:75:99:cf:83:11:88:
                    c1:7b:9f:e6:dd:7b:52:4d:16:27:ef:bf:48:70:44:
                    ff:59:4d:5e:aa:e2:ef:22:18:21:8a:ff:b6:86:9f:
                    df:7c:03:28:58:94:a2:1a:67:2b:c7:5f:44:ec:69:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:04:F7:37:5A:94:0F:7C:2F:39:F0:72:4E:01:56:58:1D:0F:24:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/3504F7375A940F7C2F39F0724E0156581D0F249C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272283

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:e1:d1:96:e2:43:cd:d7:d9:6f:81:85:bc:fd:af:b2:7b:
         e1:98:d9:9b:27:97:db:bf:00:06:1e:a6:1d:da:1c:c0:a3:f2:
         b1:52:01:e3:79:71:f1:23:3f:86:fe:e2:40:6f:bd:6f:2f:10:
         9a:da:28:8c:73:0f:04:53:34:4a:3b:33:32:57:8e:3e:a8:ab:
         b1:21:61:8a:46:46:e1:4e:bf:05:cd:a4:27:34:16:59:28:e7:
         f3:2e:3c:10:fb:d8:b4:94:74:58:29:ed:e5:d2:e4:5f:61:03:
         b5:86:2e:f7:69:c6:a9:12:60:3b:40:59:10:e9:d8:9b:00:85:
         e0:fd:04:7d:14:96:db:4a:e3:99:72:fb:95:ed:43:14:27:ba:
         e6:78:77:af:bb:ff:4c:84:ba:0e:02:82:69:27:e4:4b:68:15:
         cb:89:31:cd:c7:55:4e:a4:53:1e:25:d2:60:69:d8:97:8e:f3:
         29:c6:19:b8:bf:b2:5f:79:aa:ec:3d:7f:ac:73:6a:ec:3c:0b:
         67:11:53:d2:91:57:d0:e2:67:cf:be:b9:8a:e4:20:bf:4c:e8:
         2e:50:45:40:d1:fa:89:4c:e1:ae:c7:f3:bd:f7:57:39:99:73:
         25:d4:5c:fa:13:cf:1e:6e:15:d3:4e:e6:c8:ff:98:3c:1c:66:
         67:97:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 02:16:02 2024 by rpki-client on console-fra.rpki-client.org