Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F624DC73663F6020124EB9373C3E190C2003FD8.cer
File:                     3F624DC73663F6020124EB9373C3E190C2003FD8.cer (raw, json)
Hash identifier:          y0Zqs2PnbLmAS0wjQWHRZKdW6SPwMook7MDnSL2g8XI=
Subject key identifier:   3F:62:4D:C7:36:63:F6:02:01:24:EB:93:73:C3:E1:90:C2:00:3F:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18400F943A1F817C8748DDFFCFB84243B04FB1C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:17:21 +0000
Certificate not after:    Thu 03 Apr 2025 16:22:21 +0000
Subordinate resources:    AS: 269703
                          IP: 45.191.92.0/22
                          IP: 2804:6898::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 09:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:40:0f:94:3a:1f:81:7c:87:48:dd:ff:cf:b8:42:43:b0:4f:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:17:21 2024 GMT
            Not After : Apr  3 16:22:21 2025 GMT
        Subject: CN=3F624DC73663F6020124EB9373C3E190C2003FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:df:21:47:96:3e:ee:79:78:b8:f2:13:a1:
                    1c:58:44:65:fa:be:b5:33:10:f2:76:e3:d8:f5:11:
                    eb:bb:bc:95:94:2a:f6:84:2e:6a:f2:e8:97:cf:85:
                    64:92:b1:7d:42:4b:84:c9:6c:b0:36:a4:6a:3b:7f:
                    9f:39:d6:2f:f5:f6:cf:14:30:a0:55:da:8d:ff:ec:
                    36:a9:4a:1a:51:9b:2b:6e:29:85:a6:c3:26:70:39:
                    d4:28:c8:3d:aa:8b:0e:b9:76:b8:d3:14:4d:f6:bf:
                    79:ef:7d:3f:4a:80:07:50:73:da:81:ec:52:d7:d7:
                    af:bf:7c:34:3d:66:6d:0a:68:cf:88:b2:6a:62:e7:
                    90:5c:dd:cc:f0:e1:d7:0d:45:c8:ba:40:45:bd:d2:
                    79:92:5e:1d:81:95:6e:7a:d9:46:b0:23:9f:36:7f:
                    79:b9:24:97:8e:bb:71:eb:c6:00:ec:33:1d:a1:b1:
                    99:01:73:4c:e6:4e:08:2b:a3:a6:69:df:d6:13:01:
                    79:76:cc:fb:c4:25:6a:82:03:f3:68:89:67:31:3e:
                    15:1e:27:ad:69:c3:c6:41:68:9b:f2:ea:50:fe:ea:
                    a3:55:e8:c5:d4:06:0e:82:ee:a7:7c:c1:0a:2d:fc:
                    d0:a6:a1:1f:02:bd:79:1d:7e:83:60:97:60:bd:9e:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:62:4D:C7:36:63:F6:02:01:24:EB:93:73:C3:E1:90:C2:00:3F:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.92.0/22
                IPv6:
                  2804:6898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269703

    Signature Algorithm: sha256WithRSAEncryption
         b4:57:b5:06:5a:00:ad:27:00:f6:22:b7:a5:36:8b:e4:cd:e6:
         65:24:12:c4:79:e7:c1:54:25:3a:e8:43:bb:6f:0f:bd:c5:d4:
         d3:2c:92:e4:8f:56:86:a0:a6:92:a4:eb:13:09:1f:d6:f0:a4:
         59:a6:5b:eb:2f:b9:c2:d3:1b:0e:cd:52:5a:68:cd:b8:17:48:
         4d:ef:91:3a:a5:1e:6b:83:78:3c:68:73:71:d4:d7:f0:71:6a:
         f4:e7:64:bc:38:57:34:18:02:72:e8:4e:40:dc:9e:56:70:8a:
         66:64:2b:f1:8a:f0:f3:8f:4e:ff:45:be:b8:1f:dc:25:a9:ba:
         57:65:0a:85:e8:37:2f:f7:a1:e7:ea:9a:6a:93:17:9b:08:8b:
         c6:2b:10:1e:d1:07:dd:69:d2:60:47:e9:92:cf:12:9f:65:88:
         ef:d4:dd:0a:df:02:47:e0:8a:c7:ea:c7:ea:4a:fb:fc:7e:23:
         d8:0f:4c:b5:9d:b5:5d:60:62:0a:d5:bf:50:9d:08:e8:7e:59:
         74:30:a7:9b:05:d3:0e:2b:82:2e:42:be:a6:a0:9a:54:06:91:
         16:fe:0e:f5:f5:b3:70:de:80:ef:7d:5b:42:67:94:74:1d:f1:
         e9:5f:a5:5a:3a:76:e1:0a:30:5e:8f:b3:e1:fb:11:5c:28:93:
         7f:f5:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org