Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.cer
File:                     3B1DCB1E2F97CA111572D90416CD86C22F0C9283.cer (raw, json)
Hash identifier:          RiU32DU+023Z/Y6UnRCBc1r1SyzsEoJLB/SnB3muDCo=
Subject key identifier:   3B:1D:CB:1E:2F:97:CA:11:15:72:D9:04:16:CD:86:C2:2F:0C:92:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04D01350CD06DAF4A3DFF1AF55A74BF7FAACAE64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 21:56:46 +0000
Certificate not after:    Wed 23 Apr 2025 22:01:46 +0000
Subordinate resources:    AS: 266519
                          IP: 170.245.8.0/22
                          IP: 2804:3908::/32

Validation:               Failed, certificate revoked on Thu 16 May 2024 05:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:13:50:cd:06:da:f4:a3:df:f1:af:55:a7:4b:f7:fa:ac:ae:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 21:56:46 2024 GMT
            Not After : Apr 23 22:01:46 2025 GMT
        Subject: CN=3B1DCB1E2F97CA111572D90416CD86C22F0C9283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:97:ec:0e:0d:c0:a2:1d:47:98:bb:07:6d:
                    25:de:9a:ab:58:35:b4:6a:88:3c:e8:06:61:39:29:
                    80:7a:57:b0:f9:1f:f3:4d:9e:38:fb:b6:74:2c:db:
                    20:d2:3c:4c:61:be:a0:fe:43:8f:8a:38:0c:c2:8f:
                    2f:71:cb:a4:3e:14:94:56:9f:7f:9f:c2:20:d0:e8:
                    34:ca:3e:c9:7c:9f:12:2f:78:80:6b:f9:cc:d1:27:
                    a2:c4:0a:b9:2c:a2:66:f6:62:e8:1d:b4:6c:21:bc:
                    8d:3a:62:22:6c:d0:23:df:6c:1d:1b:c5:68:7d:6c:
                    ff:da:d7:8d:a5:5e:03:31:46:cd:fd:07:93:4c:44:
                    4c:67:0f:80:78:aa:c5:67:87:10:10:66:7c:b2:96:
                    2e:a0:24:51:6f:c7:85:b6:b6:76:f2:51:ad:ca:6a:
                    ef:3a:c4:0b:1d:21:8f:e6:a6:d6:f0:1c:5f:80:d6:
                    de:c8:88:43:4f:df:83:52:32:9a:e8:cb:cb:b8:ae:
                    5d:3b:d9:bb:76:fe:e4:aa:e0:e5:e3:8d:21:ea:2c:
                    0a:cd:ed:f9:c4:b2:46:03:89:2d:28:61:7c:ed:28:
                    eb:b5:c5:85:b0:0c:25:05:ee:5b:70:c4:08:32:53:
                    67:a0:b6:6a:bd:2b:06:e7:91:74:5b:be:9a:05:14:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:1D:CB:1E:2F:97:CA:11:15:72:D9:04:16:CD:86:C2:2F:0C:92:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.8.0/22
                IPv6:
                  2804:3908::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266519

    Signature Algorithm: sha256WithRSAEncryption
         70:00:16:c3:0d:3b:71:fe:aa:a6:ad:c1:2f:8b:7c:1d:55:cd:
         d0:01:3a:e0:61:af:25:ed:66:c3:45:1a:b1:b4:e5:e7:35:68:
         56:ae:ef:c4:6c:d6:02:3b:dd:cf:8f:d3:22:76:ec:8e:76:cd:
         8e:31:3b:af:a3:63:0f:1d:ba:43:51:45:50:c7:d2:b7:8b:34:
         10:6d:b5:65:6e:ee:e6:92:47:bc:40:c9:f9:4c:e6:21:e8:dc:
         8e:66:19:09:fd:a6:73:cc:23:71:92:4c:c6:0a:33:13:6b:9a:
         e9:8f:9a:c6:f1:65:bc:8d:ec:f8:66:16:1c:dd:3a:0a:18:d7:
         12:81:6b:15:18:84:06:91:b2:a3:93:0a:7e:3b:fa:4e:68:b2:
         b4:09:af:de:b3:aa:86:0f:14:9b:2c:ea:8f:bf:54:9d:fb:64:
         1a:d6:38:12:58:53:3f:0f:69:08:36:cc:26:33:64:ec:b8:a9:
         22:45:1e:e3:66:eb:ed:83:2e:cc:97:54:08:34:bf:52:85:5c:
         d8:09:a7:13:4b:2c:10:b4:2b:98:8f:8d:0b:fb:14:c9:3d:0a:
         3e:43:1e:3c:35:1e:90:68:f6:ce:60:5d:17:be:24:fd:cc:01:
         fc:ac:7b:f3:db:de:05:a3:bc:98:9b:af:16:ef:13:fe:7e:da:
         87:d0:4d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org