Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer
File:                     3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer (raw, json)
Hash identifier:          iriV7yPHwzE/kDSGaxwGr0zDDObLrZkD87yKQT7GamM=
Subject key identifier:   3A:81:CD:2D:56:EA:80:8D:67:DD:15:6F:E3:D9:3A:5D:88:6A:DD:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76A5B700860FEF74677DA816AFECD4109D7D1F6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:00:37 +0000
Certificate not after:    Wed 02 Apr 2025 22:05:37 +0000
Subordinate resources:    AS: 269648
                          IP: 45.189.0.0/22
                          IP: 2804:67c0::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 18:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:b7:00:86:0f:ef:74:67:7d:a8:16:af:ec:d4:10:9d:7d:1f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:00:37 2024 GMT
            Not After : Apr  2 22:05:37 2025 GMT
        Subject: CN=3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:61:fd:05:c9:eb:be:31:8e:24:ab:69:6a:
                    8d:c4:64:16:0d:f0:76:d2:eb:1e:7d:11:81:3d:49:
                    da:45:02:06:fc:85:e4:88:02:0b:00:2c:e7:e6:a1:
                    d0:2c:29:cb:7a:ef:e6:fb:b6:f7:44:00:15:b9:c5:
                    db:a3:c5:e9:f9:cd:b5:25:a8:bd:d3:ea:7e:c4:6d:
                    e9:e1:47:27:76:ad:7e:73:e7:4a:97:12:cd:85:29:
                    b9:85:86:a5:66:01:26:2c:1f:d2:57:ce:bb:cb:4f:
                    d8:57:22:8d:2a:e2:9a:0d:3a:07:2a:cc:65:4b:0e:
                    ae:5a:8b:6e:cb:b4:60:67:92:dd:15:7e:db:03:e4:
                    a3:cc:02:83:32:41:9a:43:11:2b:8a:be:fc:da:7e:
                    c3:09:49:cf:41:79:e1:87:cb:86:98:91:23:22:cb:
                    ad:fd:c1:ff:83:af:d4:b3:e1:d6:d0:ee:70:c5:8b:
                    71:51:fa:fd:d3:af:3e:1d:6f:95:8e:b1:44:de:f3:
                    61:55:16:fc:53:c2:3a:fb:cc:1a:8c:d3:5e:27:fd:
                    74:e6:94:32:35:46:fc:23:85:de:b5:4e:ba:1c:03:
                    15:52:14:00:a2:d9:ce:36:cc:45:6a:43:ac:f8:f8:
                    01:aa:bf:fe:15:ca:6b:95:2e:4c:b4:ed:c1:ba:8f:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:81:CD:2D:56:EA:80:8D:67:DD:15:6F:E3:D9:3A:5D:88:6A:DD:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.0.0/22
                IPv6:
                  2804:67c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269648

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:62:73:0d:1b:09:a0:c3:fd:25:59:a1:48:07:6d:5a:ba:
         d5:5c:cd:e2:71:4e:a7:70:8f:c3:4a:e6:fa:7b:92:1f:46:37:
         d1:59:23:04:f5:6f:d5:c1:9c:79:51:5a:1b:b9:87:d6:fd:16:
         96:7a:21:9a:71:51:9b:57:8e:dd:01:0a:13:c1:b5:bd:ea:09:
         b4:cd:69:f8:aa:a7:b8:fd:fa:a6:e4:ff:89:7a:7c:40:a7:a0:
         de:fd:1c:3b:2a:a7:52:f0:78:e8:20:b7:d2:bc:98:f3:4c:12:
         3a:56:63:e9:c1:4c:2e:ff:95:4c:21:03:2f:39:f0:0b:9e:98:
         21:73:6d:9c:dd:ae:1c:8d:c9:6d:05:46:b0:7a:7d:e3:d3:14:
         31:03:97:20:38:70:d5:4c:e7:85:e5:34:29:60:7a:b1:44:0d:
         11:54:f6:9e:02:23:1a:41:1f:10:49:a2:7e:8e:aa:12:49:aa:
         21:cf:91:6e:2f:39:cf:b2:aa:59:af:23:dd:34:26:02:7e:74:
         74:80:f0:b5:91:04:8c:3f:7a:a4:2a:cc:be:fd:50:4f:a7:67:
         1e:3d:21:49:38:78:76:62:0b:0f:42:38:c5:68:4e:8d:96:0d:
         17:98:35:55:0d:04:95:70:f6:dd:3a:1d:b0:fd:dd:71:4c:5d:
         a4:af:47:7b
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUdqW3AIYP73RnfagWr+zUEJ19H2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMjAwMzdaFw0yNTA0MDIyMjA1MzdaMDMxMTAvBgNV
BAMTKDNBODFDRDJENTZFQTgwOEQ2N0REMTU2RkUzRDkzQTVEODg2QURERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlWH9BcnrvjGOJKtpao3EZBYN
8HbS6x59EYE9SdpFAgb8heSIAgsALOfmodAsKct67+b7tvdEABW5xdujxen5zbUl
qL3T6n7EbenhRyd2rX5z50qXEs2FKbmFhqVmASYsH9JXzrvLT9hXIo0q4poNOgcq
zGVLDq5ai27LtGBnkt0VftsD5KPMAoMyQZpDESuKvvzafsMJSc9BeeGHy4aYkSMi
y639wf+Dr9Sz4dbQ7nDFi3FR+v3Trz4db5WOsUTe82FVFvxTwjr7zBqM014n/XTm
lDI1Rvwjhd61TrocAxVSFACi2c42zEVqQ6z4+AGqv/4VymuVLky07cG6jz2hAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6gc0tVuqAjWfd
FW/j2TpdiGrd8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR05u
NWI3V1lZQm1Kd1lhMnBEbU5iQXhxR2hzWjVoQjRaU1d0MjVkbzIzRGcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR05u
NWI3V1lZQm1Kd1lhMnBEbU5iQXhxR2hzWjVoQjRaU1d0MjVkbzIzRGcvMS8zQTgx
Q0QyRDU2RUE4MDhENjdERDE1NkZFM0Q5M0E1RDg4NkFEREYyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItvQAwDQQCAAIwBwMFACgEZ8AwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBB1QMA0GCSqGSIb3DQEBCwUAA4IBAQCy7mJzDRsJoMP9JVmh
SAdtWrrVXM3icU6ncI/DSub6e5IfRjfRWSME9W/VwZx5UVobuYfW/RaWeiGacVGb
V47dAQoTwbW96gm0zWn4qqe4/fqm5P+JenxAp6De/Rw7KqdS8HjoILfSvJjzTBI6
VmPpwUwu/5VMIQMvOfALnpghc22c3a4cjcltBUawen3j0xQxA5cgOHDVTOeF5TQp
YHqxRA0RVPaeAiMaQR8QSaJ+jqoSSaohz5FuLznPsqpZryPdNCYCfnR0gPC1kQSM
P3qkKsy+/VBPp2cePSFJOHh2YgsPQjjFaE6Nlg0XmDVVDQSVcPbdOh2w/d1xTF2k
r0d7
-----END CERTIFICATE-----
Generated at Fri Nov 8 22:21:21 2024 by rpki-client on console-fra.rpki-client.org