Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.cer
File:                     3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.cer (raw, json)
Hash identifier:          x/q+oKH+gEpSo8v3phh9HMc31/NwnKbAPs+4cUybdhI=
Subject key identifier:   3D:13:11:8F:F7:94:AA:86:45:D4:CC:C0:6E:AF:6A:C4:3B:BD:04:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       346271049E635D8F6E10B56E586B39B47555BB82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 01:50:02 +0000
Certificate not after:    Sat 19 Apr 2025 01:55:02 +0000
Subordinate resources:    AS: 266524
                          IP: 170.245.176.0/22
                          IP: 2804:3918::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 03:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:62:71:04:9e:63:5d:8f:6e:10:b5:6e:58:6b:39:b4:75:55:bb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:50:02 2024 GMT
            Not After : Apr 19 01:55:02 2025 GMT
        Subject: CN=3D13118FF794AA8645D4CCC06EAF6AC43BBD044F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:05:80:73:50:2a:8e:af:f0:1a:f4:a6:9f:
                    7a:f0:ab:54:7e:f7:60:5d:48:8e:44:bd:d4:31:bb:
                    cb:00:07:20:91:c1:3d:a9:bf:d1:ad:72:d4:f6:0c:
                    3b:eb:d7:1a:42:f5:b9:3d:12:33:1e:04:06:30:ad:
                    82:43:00:26:1d:9a:5d:aa:59:b2:e7:9b:86:ce:8a:
                    7d:f7:ab:75:8e:9f:04:39:e9:1e:c2:dd:83:a7:9c:
                    82:ee:ba:3d:bd:d4:5f:38:f7:f6:49:61:d2:c1:99:
                    fa:f7:70:7f:96:5b:96:f0:5a:23:9c:a7:6c:21:3a:
                    4f:c1:c5:5a:4e:b2:87:5f:d3:b1:38:73:e0:af:bb:
                    eb:3a:3a:69:2b:98:b8:6c:3c:19:ee:1e:63:84:34:
                    d8:4b:a8:40:0e:92:a2:bb:28:5c:bd:a8:b4:2c:19:
                    97:1a:f0:fe:a8:fe:ca:20:9d:17:f7:86:fe:57:19:
                    cd:f0:93:cd:43:18:6f:ef:ca:ca:38:ac:4f:d0:40:
                    71:9d:60:7a:a6:a8:7b:e6:22:22:61:c0:aa:e9:10:
                    6a:4b:5c:66:92:6a:97:7e:34:7a:c2:40:81:5e:bf:
                    c8:0e:75:3f:0e:68:ab:f1:06:ba:3b:5a:3e:0e:6d:
                    45:f1:4f:e1:3b:9a:96:b7:0e:ec:4e:04:3f:8c:ff:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:13:11:8F:F7:94:AA:86:45:D4:CC:C0:6E:AF:6A:C4:3B:BD:04:4F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.176.0/22
                IPv6:
                  2804:3918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266524

    Signature Algorithm: sha256WithRSAEncryption
         7a:63:dd:1f:a6:ec:03:c9:96:4d:b1:a1:25:a2:ac:b7:ec:8c:
         58:c7:26:f4:a2:9f:67:eb:12:18:ae:9d:4d:c8:2a:c6:d2:68:
         c6:6a:f8:6d:4f:17:51:46:43:9a:b1:33:ab:a5:4f:b7:b8:78:
         3a:01:60:ec:d2:68:7c:2b:24:1f:bd:4e:9d:17:de:58:7e:4c:
         11:2c:84:7e:ea:15:6b:a5:8b:eb:6f:57:3f:b3:32:27:88:29:
         cd:c1:c2:7c:6b:c6:73:4f:b3:8d:43:0e:cd:e2:19:fc:5a:cd:
         83:c1:dd:84:b7:5f:15:de:ee:e6:52:54:9f:a9:2d:06:8f:85:
         8e:51:6e:99:15:f1:dc:93:dc:52:42:34:09:d1:25:f6:a7:75:
         ae:1c:2b:dc:26:b5:57:cd:85:61:7d:d6:4d:15:67:4c:04:a0:
         6b:73:dc:02:5d:a6:f0:72:22:0d:e3:4c:09:40:06:c7:77:1b:
         6d:f3:9c:37:68:90:fd:53:8d:24:34:e3:cd:36:17:fd:72:bd:
         f3:d9:04:b3:c9:dc:21:5d:42:ad:49:4f:b1:94:6f:77:f5:ee:
         41:2a:99:07:e5:a5:5c:3e:54:f7:1d:f2:ed:da:2d:5d:4d:7d:
         f0:96:a5:e8:01:89:20:82:2c:1f:00:7b:14:46:e7:4f:2b:af:
         4d:3f:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org