Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
File:                     3F318214B1BD2E89818793B6E4B9967278CA87A1.cer (raw, json)
Hash identifier:          opKpTA37xF/yW2akejkX7YIL65ONz5Me7fV34ZurLhs=
Subject key identifier:   3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49C777E322E99F0EE6DD2CA74A0E7A9FFEACC107
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jul 2024 13:13:28 +0000
Certificate not after:    Thu 03 Jul 2025 13:18:28 +0000
Subordinate resources:    AS: 265285
                          IP: 168.90.148.0/22
                          IP: 2804:2d78::/32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 08:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c7:77:e3:22:e9:9f:0e:e6:dd:2c:a7:4a:0e:7a:9f:fe:ac:c1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  4 13:13:28 2024 GMT
            Not After : Jul  3 13:18:28 2025 GMT
        Subject: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:38:4c:a6:03:54:be:cb:d3:8a:45:94:76:
                    a9:0e:08:37:9f:d5:71:cb:de:bc:b0:29:33:4f:d7:
                    3c:6d:85:21:4c:ce:e6:dd:4e:bf:7f:78:21:6d:16:
                    d0:d5:d2:22:ea:9a:d9:01:d2:0d:56:03:20:86:10:
                    3f:b0:5e:bc:8b:32:0b:3f:64:7a:b9:70:2e:0b:e9:
                    86:c6:10:90:9c:f7:c4:20:33:ab:20:05:f7:e0:9e:
                    7f:1b:7c:26:e4:a6:b7:eb:d0:8a:12:74:99:47:04:
                    61:b8:03:9a:c8:6a:15:a7:77:20:fe:54:d8:38:87:
                    f6:dc:99:5f:fd:6b:16:8e:aa:3d:5c:de:a1:98:e9:
                    56:c0:b3:ce:45:e2:3d:a6:80:3e:bd:5a:0d:0a:69:
                    45:89:15:6e:a4:85:8e:32:cc:32:c3:f4:c6:0a:f8:
                    a2:c2:8a:72:47:88:03:c0:b7:c5:b8:d2:d9:3e:e9:
                    56:89:f9:a7:ad:34:b2:d5:f8:eb:8a:d9:67:e3:20:
                    02:eb:83:73:7d:a0:29:a1:ca:0e:19:b0:42:c7:4e:
                    34:63:14:d3:00:16:13:1c:17:5c:6b:1e:7e:b7:82:
                    b0:99:e8:cb:9a:83:9e:18:28:e7:88:96:53:4c:ff:
                    27:08:d1:06:ce:8a:94:c5:f8:7e:5f:80:94:c8:3a:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.148.0/22
                IPv6:
                  2804:2d78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265285

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:14:e5:1e:2d:56:bf:c3:d4:22:bd:09:11:4c:a9:97:3c:
         34:ac:e8:2b:6b:38:94:6b:d0:4b:7a:4e:b8:c4:d8:c9:69:80:
         f6:5c:45:41:cd:42:47:80:d6:19:33:6b:9a:fe:88:0e:c5:9b:
         c9:b4:02:85:e4:1e:a7:60:fc:a4:92:3b:8a:f0:7f:d3:33:cf:
         be:52:3d:3e:a5:d0:93:cc:d6:0b:4c:bc:75:2a:d6:55:20:a1:
         27:49:9b:67:76:8f:36:ab:86:52:d9:1d:7e:2f:3e:45:e6:b5:
         07:d6:6a:43:7a:98:b9:10:66:31:8c:c7:44:df:06:2b:5e:e4:
         65:bf:b7:b1:8e:bb:d1:6b:ad:b1:7a:fb:53:b0:88:fd:91:49:
         7e:16:99:f0:8b:2f:00:16:05:6e:47:af:1d:da:32:f6:66:e5:
         fb:f9:5b:1e:79:fb:d9:7b:53:5e:47:9b:bf:07:92:45:39:12:
         af:f8:66:26:d3:4f:20:97:4d:9c:8b:1a:68:0a:4a:f4:a9:a3:
         c9:6a:8b:cc:fa:9f:54:84:7a:36:27:87:b2:2c:e2:78:12:f9:
         50:ce:81:84:0b:f1:43:1f:7a:d4:cc:3f:dd:15:7b:8b:f4:56:
         3a:a2:5a:6a:05:af:be:0d:f7:7c:f6:48:be:c4:f1:0c:e5:88:
         b5:a4:18:fe
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUScd34yLpnw7m3SynSg56n/6swQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDQxMzEzMjhaFw0yNTA3MDMxMzE4MjhaMDMxMTAvBgNV
BAMTKDNGMzE4MjE0QjFCRDJFODk4MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrDhMpgNUvsvTikWUdqkOCDef
1XHL3rywKTNP1zxthSFMzubdTr9/eCFtFtDV0iLqmtkB0g1WAyCGED+wXryLMgs/
ZHq5cC4L6YbGEJCc98QgM6sgBffgnn8bfCbkprfr0IoSdJlHBGG4A5rIahWndyD+
VNg4h/bcmV/9axaOqj1c3qGY6VbAs85F4j2mgD69Wg0KaUWJFW6khY4yzDLD9MYK
+KLCinJHiAPAt8W40tk+6VaJ+aetNLLV+OuK2WfjIALrg3N9oCmhyg4ZsELHTjRj
FNMAFhMcF1xrHn63grCZ6Muag54YKOeIllNM/ycI0QbOipTF+H5fgJTIOl1pAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/MYIUsb0uiYGH
k7bkuZZyeMqHoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHRa
NXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRNSzUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh0
WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAvM0Yz
MTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3OENBODdBMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqFqUMA0EAgACMAcDBQAoBC14MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMRTANBgkqhkiG9w0BAQsFAAOCAQEAc+0U5R4tVr/D1CK9
CRFMqZc8NKzoK2s4lGvQS3pOuMTYyWmA9lxFQc1CR4DWGTNrmv6IDsWbybQCheQe
p2D8pJI7ivB/0zPPvlI9PqXQk8zWC0y8dSrWVSChJ0mbZ3aPNquGUtkdfi8+Rea1
B9ZqQ3qYuRBmMYzHRN8GK17kZb+3sY670WutsXr7U7CI/ZFJfhaZ8IsvABYFbkev
Hdoy9mbl+/lbHnn72XtTXkebvweSRTkSr/hmJtNPIJdNnIsaaApK9KmjyWqLzPqf
VIR6NieHsizieBL5UM6BhAvxQx961Mw/3RV7i/RWOqJaagWvvg33fPZIvsTxDOWI
taQY/g==
-----END CERTIFICATE-----
Generated at Wed Nov 6 10:12:02 2024 by rpki-client on console-fra.rpki-client.org