Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.cer
File:                     37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.cer (raw, json)
Hash identifier:          OWGwtyph9qriqDGB2CgUlOoXDIKeOizAKdP9V4qbZpE=
Subject key identifier:   37:EF:BC:17:B6:3C:1B:7A:0C:6D:73:F7:F2:E1:D4:28:63:0B:49:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A6C083F3B941E327B481AFBDF142194225354CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2024 18:58:24 +0000
Certificate not after:    Fri 03 Oct 2025 19:03:24 +0000
Subordinate resources:    AS: 271552
                          IP: 181.232.216.0/22
                          IP: 2804:7d4c::/32

Validation:               Failed, certificate revoked on Sun 27 Oct 2024 20:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:08:3f:3b:94:1e:32:7b:48:1a:fb:df:14:21:94:22:53:54:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  4 18:58:24 2024 GMT
            Not After : Oct  3 19:03:24 2025 GMT
        Subject: CN=37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:93:60:f6:6e:95:86:51:73:8a:3a:64:0d:
                    50:6b:ea:5e:63:a1:58:20:42:bf:43:9b:88:41:af:
                    60:ea:7f:c6:6a:a4:78:23:3e:d1:41:83:7f:31:60:
                    cb:c9:a7:a1:9f:2a:92:05:fe:0c:a1:65:bc:0b:4c:
                    77:a8:78:07:c7:18:68:62:f1:aa:40:c0:73:2d:9f:
                    05:e2:d8:2f:35:ef:9e:a0:3d:21:eb:ff:58:fc:02:
                    d0:96:74:35:93:ae:66:a5:f3:1e:bb:5a:ee:4d:20:
                    ed:ea:d9:94:6e:2c:4b:3f:f6:09:2d:a8:10:ee:0c:
                    cd:a2:c2:4d:c7:84:56:0d:e6:c8:dc:85:13:64:91:
                    fb:1d:c8:20:b9:77:fc:4e:98:b4:c1:e7:2e:01:d9:
                    a4:81:c9:97:04:02:a5:46:a8:a0:8e:57:0f:a4:e8:
                    da:83:be:3a:2d:74:70:fb:a9:a7:6c:10:9f:e1:6b:
                    16:b2:92:79:2a:dc:db:89:03:ee:d9:08:bb:2c:33:
                    73:30:d0:9e:c3:0f:a9:61:40:b9:dc:29:b7:78:96:
                    66:f8:54:7e:ad:0a:67:e3:fd:be:dc:c3:52:e4:23:
                    e5:d0:90:8d:95:0d:ff:20:d6:17:0a:69:2d:6f:32:
                    c4:1f:7f:42:48:28:31:4a:58:a3:4e:3a:36:a8:28:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:EF:BC:17:B6:3C:1B:7A:0C:6D:73:F7:F2:E1:D4:28:63:0B:49:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.216.0/22
                IPv6:
                  2804:7d4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271552

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:ac:a5:0d:e2:21:2a:75:6a:9d:d7:e4:cc:9d:98:01:7b:
         b0:05:0e:7e:5e:fa:9b:8a:62:ba:62:82:c4:58:9e:b9:f1:5f:
         74:c0:26:3a:2b:cc:59:d0:84:14:0f:ce:ad:49:22:4f:8c:f4:
         d9:6b:60:cd:a8:a7:44:9d:0f:47:62:a7:01:fb:6a:a5:d7:ac:
         1d:7f:fe:d2:17:26:ee:c2:b6:0c:66:57:25:48:04:8f:9c:ca:
         a7:1a:17:9f:ff:26:57:2e:e5:04:87:c1:7b:46:9b:22:84:02:
         5e:03:b8:9e:e4:a1:67:3b:4f:7a:55:2b:3c:dd:b7:16:fd:68:
         46:eb:3f:f9:a8:4d:fc:ec:56:23:4f:15:8a:7c:60:f1:cd:ac:
         18:71:aa:4b:95:f0:ad:ee:0d:da:54:c2:f1:2e:f5:f1:ad:86:
         4d:17:22:2b:71:50:ee:21:2f:79:ff:f0:a6:0a:18:d2:dd:eb:
         20:9f:c6:47:e7:5c:e0:b5:ae:99:79:ef:1c:10:6e:de:4d:2f:
         fc:af:70:32:f6:dc:e9:1a:5d:9e:77:a6:19:4b:f7:25:7a:93:
         70:8f:87:e0:bf:6e:eb:34:3f:eb:26:12:b0:d7:f3:b4:77:7e:
         ae:d1:0b:91:bc:c1:f3:02:e7:7d:85:c3:26:ce:84:36:23:b2:
         52:86:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 22:46:13 2024 by rpki-client on console-fra.rpki-client.org