Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.cer
File:                     3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.cer (raw, json)
Hash identifier:          7InrtXO0GNoTtAYO6HyxPVgAIS5gWoHuYhpyHsni4UM=
Subject key identifier:   3E:8C:3E:20:04:59:1E:04:09:96:F1:A3:A5:BF:95:7E:E6:1B:FE:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18E7F66C23768205D1D60CC59E22AA6B460306A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Oct 2024 22:33:37 +0000
Certificate not after:    Thu 02 Oct 2025 22:38:37 +0000
Subordinate resources:    AS: 270917
                          IP: 177.200.136.0/22
                          IP: 2804:7378::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e7:f6:6c:23:76:82:05:d1:d6:0c:c5:9e:22:aa:6b:46:03:06:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  3 22:33:37 2024 GMT
            Not After : Oct  2 22:38:37 2025 GMT
        Subject: CN=3E8C3E2004591E040996F1A3A5BF957EE61BFEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:08:c6:66:0f:56:f5:e6:a1:b3:f6:f5:24:
                    cf:d9:0c:2f:0d:10:85:79:8c:f6:d7:18:c3:aa:88:
                    0e:6b:2b:d6:ea:66:0c:2a:9c:8e:2e:2c:96:86:3c:
                    e2:6c:49:5d:d8:b4:3f:1a:00:03:08:c5:cb:86:5e:
                    34:36:3c:e4:9a:6c:16:27:f7:d2:81:6e:c8:1e:ea:
                    9c:9d:90:50:05:7e:c3:79:72:75:a7:f7:75:77:f0:
                    0a:68:0f:f5:00:56:4d:14:98:6a:da:e2:f4:84:4a:
                    d6:4a:18:0e:2f:fd:38:04:af:8c:c3:1b:1d:c9:04:
                    78:d0:ee:85:39:74:fd:2d:42:61:4a:59:95:d1:b5:
                    bc:68:f3:69:4f:e8:8a:5f:c4:ec:70:eb:e4:c9:ca:
                    69:dc:c9:be:9b:dc:f4:b2:f6:0c:bf:30:af:27:a8:
                    cc:7a:0f:90:a1:37:4c:f6:70:02:5a:e7:fb:07:5f:
                    98:75:76:aa:70:a6:4a:da:34:79:ae:3e:64:a8:72:
                    df:e1:b4:30:1e:5b:a8:69:50:77:c2:de:0d:9b:fc:
                    29:41:2f:fa:99:fd:27:b2:ed:14:40:07:5e:13:e9:
                    8b:43:ba:86:be:31:9d:8a:b0:fe:09:5a:bf:6b:8c:
                    d1:20:3b:a3:91:8b:ce:58:76:73:e1:3d:03:b9:3e:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:8C:3E:20:04:59:1E:04:09:96:F1:A3:A5:BF:95:7E:E6:1B:FE:BF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22
                IPv6:
                  2804:7378::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270917

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:b8:96:62:93:a8:20:00:37:da:0f:83:94:e1:2b:56:26:
         1f:88:f3:aa:7c:72:f9:36:cb:8b:6d:84:ac:af:bf:b0:d3:04:
         38:df:0d:bb:70:71:f3:8c:72:9a:7f:fd:8a:95:3b:a6:39:0f:
         a5:c3:c6:cb:b6:80:87:3c:dc:8d:72:c0:e4:71:7b:01:ca:38:
         a6:22:6a:ef:4b:45:85:e3:ed:2d:e9:46:e1:7a:74:67:d1:27:
         16:fc:b2:f2:2b:49:d6:3b:94:69:0c:21:b7:9a:5f:01:d1:83:
         64:75:2a:56:04:2a:7a:e7:82:f5:bc:20:e9:30:2c:51:21:1e:
         79:89:19:8c:c7:d4:ad:03:6b:ad:7f:72:c8:a2:d5:18:5e:61:
         34:66:76:cf:19:37:03:a3:84:b8:39:95:8c:af:12:68:55:d4:
         16:0e:51:21:b9:ad:27:b3:a9:b5:6c:38:89:ca:a2:10:69:53:
         44:39:77:da:a1:cd:89:c2:f8:35:61:3a:79:f6:b0:53:8f:9f:
         f1:08:15:14:af:67:86:59:2f:42:4c:6a:91:65:7d:e6:cd:3e:
         b1:62:fc:03:56:2a:96:df:e7:a5:fa:15:8b:a2:13:dd:7a:e7:
         2d:9a:ae:db:c0:6d:96:2b:04:ba:3f:75:78:6f:ac:c2:fd:32:
         f8:86:19:04
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGOf2bCN2ggXR1gzFniKqa0YDBqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDMyMjMzMzdaFw0yNTEwMDIyMjM4MzdaMDMxMTAvBgNV
BAMTKDNFOEMzRTIwMDQ1OTFFMDQwOTk2RjFBM0E1QkY5NTdFRTYxQkZFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbgjGZg9W9eahs/b1JM/ZDC8N
EIV5jPbXGMOqiA5rK9bqZgwqnI4uLJaGPOJsSV3YtD8aAAMIxcuGXjQ2POSabBYn
99KBbsge6pydkFAFfsN5cnWn93V38ApoD/UAVk0UmGra4vSEStZKGA4v/TgEr4zD
Gx3JBHjQ7oU5dP0tQmFKWZXRtbxo82lP6IpfxOxw6+TJymncyb6b3PSy9gy/MK8n
qMx6D5ChN0z2cAJa5/sHX5h1dqpwpkraNHmuPmSoct/htDAeW6hpUHfC3g2b/ClB
L/qZ/Sey7RRAB14T6YtDuoa+MZ2KsP4JWr9rjNEgO6ORi85YdnPhPQO5Pq6jAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+jD4gBFkeBAmW
8aOlv5V+5hv+vzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW10
dldwVGluVlVvR3paY0Nud2dpMUp2aHBoeDRMdDJSanV6Wmg2SlNXQlkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vt
dHZXcFRpblZVb0d6WmNDbndnaTFKdmhwaHg0THQyUmp1elpoNkpTV0JZLzAvM0U4
QzNFMjAwNDU5MUUwNDA5OTZGMUEzQTVCRjk1N0VFNjFCRkVCRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsciIMA0EAgACMAcDBQAoBHN4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiRTANBgkqhkiG9w0BAQsFAAOCAQEASrm4lmKTqCAAN9oP
g5ThK1YmH4jzqnxy+TbLi22ErK+/sNMEON8Nu3Bx84xymn/9ipU7pjkPpcPGy7aA
hzzcjXLA5HF7Aco4piJq70tFhePtLelG4Xp0Z9EnFvyy8itJ1juUaQwht5pfAdGD
ZHUqVgQqeueC9bwg6TAsUSEeeYkZjMfUrQNrrX9yyKLVGF5hNGZ2zxk3A6OEuDmV
jK8SaFXUFg5RIbmtJ7OptWw4icqiEGlTRDl32qHNicL4NWE6efawU4+f8QgVFK9n
hlkvQkxqkWV95s0+sWL8A1Yqlt/npfoVi6IT3XrnLZqu28BtlisEuj91eG+swv0y
+IYZBA==
-----END CERTIFICATE-----
Generated at Sun Nov 3 09:10:18 2024 by rpki-client on console-ams.rpki-client.org