Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E8B08F937FD48E9D8FDBBB8CA75981C4701323B.cer
File:                     3E8B08F937FD48E9D8FDBBB8CA75981C4701323B.cer (raw, json)
Hash identifier:          SmIKHwYK137P+bvfsOmHhPxD9PWNjp3sh06PDCbklMc=
Subject key identifier:   3E:8B:08:F9:37:FD:48:E9:D8:FD:BB:B8:CA:75:98:1C:47:01:32:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D259AD2E10818C60E33C5D58972E7F2F36C813E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/3E8B08F937FD48E9D8FDBBB8CA75981C4701323B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 19:49:37 +0000
Certificate not after:    Mon 30 Jun 2025 19:54:37 +0000
Subordinate resources:    AS: 61608
                          IP: 2804:8270::/32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 00:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:25:9a:d2:e1:08:18:c6:0e:33:c5:d5:89:72:e7:f2:f3:6c:81:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 19:49:37 2024 GMT
            Not After : Jun 30 19:54:37 2025 GMT
        Subject: CN=3E8B08F937FD48E9D8FDBBB8CA75981C4701323B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:89:24:1c:12:c4:3a:59:de:45:6e:6d:eb:
                    b4:f2:fc:90:3f:86:cc:b4:5b:fb:83:b2:35:f4:57:
                    94:1a:aa:ac:a7:86:0d:cd:31:4f:f1:75:da:4c:83:
                    3d:dc:10:34:58:d5:09:74:2f:88:37:2e:d4:03:7c:
                    3f:61:19:44:63:28:71:1a:69:4d:e4:4a:ee:fb:57:
                    cc:0d:c3:ed:5f:64:c0:70:b9:ff:e6:78:64:db:a4:
                    17:26:07:9b:ca:e4:1d:b0:3e:c8:a1:82:0c:2c:5f:
                    5c:8f:45:06:b1:e0:0e:ba:d4:3f:ee:f2:aa:36:de:
                    b3:4c:e8:aa:2f:1e:2f:e8:ab:ce:5e:33:89:b4:50:
                    a9:d3:6e:3b:63:bf:7f:25:8d:4a:01:4b:50:08:9b:
                    06:c5:7f:ae:67:06:6e:94:b2:6d:93:c3:57:16:49:
                    eb:e9:18:5d:44:1b:42:3f:26:fa:c9:1b:b8:54:d8:
                    2d:54:0b:45:6c:31:8e:3c:2e:60:b9:c5:ec:01:8e:
                    d6:52:24:3b:20:0c:19:8d:b7:52:1d:fb:f6:2d:7b:
                    b8:0e:4d:08:9b:f9:55:6d:90:76:8d:fe:f0:2f:4f:
                    7f:87:1e:33:26:2d:5f:5c:6e:a2:d7:54:e7:b0:14:
                    d4:cc:c5:0c:b7:d6:5c:b4:f6:39:bb:db:c4:8a:cc:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:8B:08:F9:37:FD:48:E9:D8:FD:BB:B8:CA:75:98:1C:47:01:32:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/3E8B08F937FD48E9D8FDBBB8CA75981C4701323B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61608

    Signature Algorithm: sha256WithRSAEncryption
         be:55:97:88:c4:d9:31:15:bd:ba:98:37:a2:e8:6d:31:77:a4:
         2a:11:63:4f:ca:51:d9:b0:e6:e0:a7:28:4a:f2:10:8d:1d:53:
         55:26:8c:7b:f7:33:91:ed:14:a8:43:35:ef:64:b8:7c:15:40:
         35:25:12:d9:47:45:6b:14:e5:2b:8e:8b:31:7e:7f:ac:6e:39:
         59:e8:2e:e5:1c:28:bd:28:66:dd:fc:73:d8:7c:da:42:f7:7c:
         74:0d:66:f9:b1:55:4a:24:26:56:77:89:72:f3:cf:54:dd:8b:
         49:c9:d0:9a:fd:d7:8d:c8:5c:f6:3c:c7:7b:f3:08:76:c1:3e:
         2c:3d:63:5d:11:9f:b6:20:b1:44:22:c5:fb:a3:7d:3b:2f:cb:
         d0:73:ff:ef:5d:c8:28:97:92:03:70:52:20:50:cd:d2:e3:b0:
         e5:a9:b2:59:b2:da:77:84:a3:96:21:b4:d1:18:18:f7:03:1e:
         53:55:76:c7:54:2d:bb:b9:ba:74:19:55:2f:61:13:6b:c6:50:
         43:bd:e2:34:00:d8:e6:47:63:68:19:da:3a:43:e3:2d:74:66:
         b9:db:a6:2e:a3:9d:d0:73:fc:e8:b2:11:c3:0e:d1:cd:4b:02:
         2e:d5:79:b1:0e:08:80:20:09:b8:22:13:03:a8:35:4d:e3:54:
         d5:03:15:7d
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUXSWa0uEIGMYOM8XViXLn8vNsgT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDExOTQ5MzdaFw0yNTA2MzAxOTU0MzdaMDMxMTAvBgNV
BAMTKDNFOEIwOEY5MzdGRDQ4RTlEOEZEQkJCOENBNzU5ODFDNDcwMTMyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqIkkHBLEOlneRW5t67Ty/JA/
hsy0W/uDsjX0V5Qaqqynhg3NMU/xddpMgz3cEDRY1Ql0L4g3LtQDfD9hGURjKHEa
aU3kSu77V8wNw+1fZMBwuf/meGTbpBcmB5vK5B2wPsihggwsX1yPRQax4A661D/u
8qo23rNM6KovHi/oq85eM4m0UKnTbjtjv38ljUoBS1AImwbFf65nBm6Usm2Tw1cW
SevpGF1EG0I/JvrJG7hU2C1UC0VsMY48LmC5xewBjtZSJDsgDBmNt1Id+/Yte7gO
TQib+VVtkHaN/vAvT3+HHjMmLV9cbqLXVOewFNTMxQy31ly09jm728SKzBAxAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+iwj5N/1I6dj9
u7jKdZgcRwEyOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ05w
QmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5HYk0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NO
cEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAvM0U4
QjA4RjkzN0ZENDhFOUQ4RkRCQkI4Q0E3NTk4MUM0NzAxMzIzQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCcDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA
8KgwDQYJKoZIhvcNAQELBQADggEBAL5Vl4jE2TEVvbqYN6LobTF3pCoRY0/KUdmw
5uCnKEryEI0dU1UmjHv3M5HtFKhDNe9kuHwVQDUlEtlHRWsU5SuOizF+f6xuOVno
LuUcKL0oZt38c9h82kL3fHQNZvmxVUokJlZ3iXLzz1Tdi0nJ0Jr9143IXPY8x3vz
CHbBPiw9Y10Rn7YgsUQixfujfTsvy9Bz/+9dyCiXkgNwUiBQzdLjsOWpslmy2neE
o5YhtNEYGPcDHlNVdsdULbu5unQZVS9hE2vGUEO94jQA2OZHY2gZ2jpD4y10Zrnb
pi6jndBz/OiyEcMO0c1LAi7VebEOCIAgCbgiEwOoNU3jVNUDFX0=
-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org