Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer
File:                     3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer (raw, json)
Hash identifier:          gBXpJ/qiBONxZtFNO3xLQmUqyOB0NE7xVwVRDJ6XpzE=
Subject key identifier:   37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       194F73AC8DA4A723376B3E8004B6A9D015170D57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 17:13:06 +0000
Certificate not after:    Tue 16 Dec 2025 17:18:06 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32
Validation:               Failed, certificate revoked on Thu 19 Dec 2024 15:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4f:73:ac:8d:a4:a7:23:37:6b:3e:80:04:b6:a9:d0:15:17:0d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 17:13:06 2024 GMT
            Not After : Dec 16 17:18:06 2025 GMT
        Subject: CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:2d:6a:8a:03:ec:bb:24:f6:c7:cd:90:d4:
                    46:79:de:cb:19:e5:82:74:23:26:9f:76:d7:d7:33:
                    8a:98:43:11:54:8a:6b:9e:03:1d:11:51:77:70:24:
                    89:ac:ee:a6:bc:cc:ea:72:c4:bc:b9:cb:9d:ea:fd:
                    8d:ed:fc:8e:11:11:67:4d:c5:dc:9a:fa:70:6f:72:
                    75:c2:b6:64:13:a4:51:f2:74:e9:97:09:86:dc:11:
                    8f:04:e0:93:04:b9:6a:3b:fc:af:2d:3a:12:86:f6:
                    41:0f:4f:57:d9:d4:84:82:48:12:f1:57:eb:8a:38:
                    16:0c:b1:d6:ba:a2:7d:86:ee:64:c8:54:cd:3b:4a:
                    ec:e3:23:59:2b:f4:6f:f4:57:e5:e5:af:48:ca:fd:
                    1d:6d:7d:5d:28:31:fb:4f:d3:84:97:a4:e0:30:fe:
                    8b:1b:60:64:7c:db:76:69:87:23:c7:72:b5:28:d0:
                    f7:d5:7e:0e:6c:54:2c:97:64:dd:05:c1:ca:c4:45:
                    35:18:93:bc:0a:12:a3:0b:37:97:77:84:b7:70:1b:
                    71:42:d2:8e:58:d9:22:0b:3e:ca:10:ba:50:e1:db:
                    68:6a:47:75:d4:c9:9b:1b:aa:f9:5a:45:a2:05:db:
                    1b:d2:53:4a:df:8e:06:07:f0:85:e3:51:cd:37:58:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         12:71:0a:82:57:e3:d7:6d:e4:9d:07:39:4e:9f:be:cc:e1:41:
         a8:85:35:ee:52:10:4c:77:1f:a5:cf:cf:bf:73:0e:93:e1:88:
         d9:86:a1:ec:a6:9a:0c:25:9b:ea:23:d8:b8:a9:d1:01:ba:98:
         f9:89:aa:0a:d1:ae:a3:3f:13:21:00:3a:4f:5a:d2:47:d7:21:
         8a:a6:75:2d:5b:11:1b:2d:a4:ad:6a:6e:95:5c:90:ff:53:65:
         e2:d2:27:b6:02:9e:96:ac:4b:ee:81:e0:e6:7c:a1:66:b2:68:
         18:a4:57:2c:31:36:7b:e3:15:b3:dd:ad:13:a0:fe:36:ed:cc:
         4f:5e:55:10:28:b8:a8:50:2a:e7:dc:e2:e7:98:88:78:6e:da:
         03:38:47:96:ea:0f:01:50:c5:6f:03:d2:b3:98:7c:6c:5d:60:
         d9:8c:96:2f:9b:65:8a:b7:5b:8f:6d:41:8d:18:c2:bd:44:14:
         34:21:26:23:a3:61:38:cd:af:77:c0:0a:f3:d8:ec:df:3f:98:
         c7:b1:62:86:e9:f5:61:f5:28:3b:83:aa:62:54:de:cc:03:3d:
         cd:49:b7:f9:8a:a3:ab:39:bd:49:46:c1:aa:f7:a9:3f:78:5e:
         3c:c5:18:63:b6:85:73:c3:7e:d7:ac:94:b6:e6:5d:c2:78:27:
         41:df:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 18:06:18 2025 by rpki-client