Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer
File:                     3ED26604F180666257EA8C65758E6A93C0EA50F8.cer (raw, json)
Hash identifier:          WGBgfAqG0HlclpNwCBo74QeNig4kQTFNoGd9FfLdPso=
Subject key identifier:   3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       189BB39CC2354C3E0BD58AF1B16BE9D1D1D8F8DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:47 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:47 +0000
Subordinate resources:    AS: 265365
                          IP: 168.205.128.0/22
                          IP: 2804:2ec4::/32

Validation:               Failed, certificate revoked on Wed 08 May 2024 10:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9b:b3:9c:c2:35:4c:3e:0b:d5:8a:f1:b1:6b:e9:d1:d1:d8:f8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject: CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:e0:d7:19:74:5d:69:dc:af:3e:e8:9d:a1:
                    e1:49:49:36:65:a3:be:1d:bb:2f:c6:88:6d:b8:4b:
                    72:b9:9c:12:59:21:b5:65:8b:10:f3:48:fd:14:27:
                    18:91:f9:bb:cb:31:59:53:7a:06:2d:5f:cd:e9:5b:
                    88:aa:b4:a3:d9:5c:d1:96:3c:a1:6f:bd:cd:92:a3:
                    8d:e7:21:ad:17:ac:29:7f:2a:c6:32:a2:62:b1:5a:
                    47:8a:2f:06:62:45:54:76:b8:a5:90:8d:87:93:15:
                    6c:1a:d0:3e:51:50:6e:f4:4f:0c:c7:13:c5:62:ac:
                    5d:25:f4:db:b2:9c:1d:b0:12:59:f0:7b:de:9b:e4:
                    69:63:5c:65:c0:1a:03:71:c5:80:0c:2e:31:36:5b:
                    e3:1c:e4:dd:82:4a:e7:ab:64:71:82:27:19:38:ed:
                    81:73:17:47:58:79:c7:62:88:01:5f:3a:37:43:2e:
                    59:eb:5e:44:50:79:e9:e3:e6:a4:0e:0c:82:e1:9d:
                    a7:7b:70:8f:5c:ce:60:72:7b:39:8a:4f:94:38:18:
                    37:fe:4a:21:61:8a:8c:02:bc:03:1a:c1:f8:18:e9:
                    88:1d:a4:f3:03:8f:04:f4:00:bf:42:1b:8e:a4:b7:
                    08:72:5d:a4:d2:49:ca:5d:0f:41:1c:06:e2:0a:a4:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.128.0/22
                IPv6:
                  2804:2ec4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265365

    Signature Algorithm: sha256WithRSAEncryption
         c4:45:59:3d:40:63:11:1f:3b:85:db:b5:59:e0:35:78:0f:8b:
         c9:9d:53:c7:ac:e0:6e:04:0e:9f:48:3d:05:94:78:85:6a:b8:
         65:89:34:8b:8a:3d:78:4e:7c:89:d0:46:1f:9d:e8:3c:09:0f:
         1e:67:40:f0:b7:af:2a:eb:ab:79:5b:f5:06:5b:1b:b8:10:fd:
         c5:aa:44:53:b7:b1:93:71:e7:47:2b:5f:02:f8:89:4f:b3:cb:
         af:7b:11:bb:9c:f7:b8:50:62:e7:19:45:de:92:76:f7:7f:ec:
         75:d0:f6:41:4a:27:b5:8c:51:44:6a:0e:9c:a9:13:0f:6c:be:
         49:80:49:85:10:a0:dc:bf:79:f8:92:33:3b:88:db:25:ae:84:
         6d:6b:f8:37:8c:57:e3:eb:98:7c:0b:35:b1:35:cc:74:53:59:
         8c:2d:a9:30:7c:d1:74:05:82:04:ee:8f:d2:db:61:54:a9:46:
         dc:06:ee:c5:b5:ad:ae:e4:76:af:bb:61:2f:04:85:42:7a:d2:
         85:53:e1:76:f2:b8:a3:bc:4a:c3:d5:41:47:5a:db:4a:87:d1:
         4a:fe:07:75:0e:a3:6e:7e:0f:e6:bc:65:0e:15:f6:08:ef:ad:
         67:3b:37:98:b7:f0:94:b5:b4:03:85:e8:2d:91:6d:a4:f3:d6:
         76:0c:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org