Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FF12F2C910D80D19549BE8B762BE68BBE37B528.cer
File:                     3FF12F2C910D80D19549BE8B762BE68BBE37B528.cer (raw, json)
Hash identifier:          bYSp/exlDukl/4Ilk4H2Bij1vlR935b3bAXjTk4E58U=
Subject key identifier:   3F:F1:2F:2C:91:0D:80:D1:95:49:BE:8B:76:2B:E6:8B:BE:37:B5:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A6E9EF5AF7E62EE83E7E9868BD3A6B98200EAA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1/3FF12F2C910D80D19549BE8B762BE68BBE37B528.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:16:48 +0000
Certificate not after:    Thu 03 Apr 2025 03:21:48 +0000
Subordinate resources:    AS: 272533
                          IP: 2804:82ac::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 17:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6e:9e:f5:af:7e:62:ee:83:e7:e9:86:8b:d3:a6:b9:82:00:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:16:48 2024 GMT
            Not After : Apr  3 03:21:48 2025 GMT
        Subject: CN=3FF12F2C910D80D19549BE8B762BE68BBE37B528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:42:99:1d:ee:5c:09:86:72:20:c1:0e:ff:
                    87:c6:56:85:6d:ea:57:90:8b:f3:b2:da:20:15:ae:
                    80:67:66:2c:73:f3:50:eb:0e:c1:b2:2a:e8:bf:9c:
                    12:50:cc:62:52:5a:17:3d:63:c6:18:dd:5d:b0:92:
                    f4:45:c7:5e:2c:05:59:83:a1:0d:3a:f7:9f:98:a6:
                    ab:5b:c6:34:e6:d0:1b:b4:82:94:7a:b0:f5:3d:8c:
                    65:b0:00:5f:32:99:83:b1:75:23:c3:08:07:fd:ca:
                    f2:3e:50:2e:86:83:3e:2b:ee:90:34:36:5a:af:df:
                    0f:6c:82:dc:fc:f7:23:fe:46:0d:c4:17:d7:e1:ed:
                    22:e6:73:8a:be:a0:5c:e8:8d:84:16:87:cf:4b:aa:
                    3c:bc:13:15:4f:7e:74:a6:dd:e1:f4:5a:dc:85:2d:
                    05:62:6a:53:7a:58:ee:7d:8b:9a:0d:7b:74:90:2a:
                    e5:16:4c:cb:7e:f7:6f:88:2b:4c:26:e5:b5:7f:d5:
                    57:de:2f:b9:0e:7e:3d:ce:f2:92:12:6a:c3:5e:90:
                    aa:27:e5:c6:90:ed:89:65:8a:55:73:0f:e8:0e:df:
                    65:0a:71:a5:b9:46:ef:2f:ff:9d:d8:e4:5a:b1:82:
                    66:30:3a:74:40:cf:7b:2d:8f:bf:50:81:76:ac:fc:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:F1:2F:2C:91:0D:80:D1:95:49:BE:8B:76:2B:E6:8B:BE:37:B5:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1/3FF12F2C910D80D19549BE8B762BE68BBE37B528.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272533

    Signature Algorithm: sha256WithRSAEncryption
         c6:19:85:8b:f4:f6:3e:5e:33:82:34:38:82:50:5a:34:1e:2c:
         46:a6:a6:cb:6c:80:eb:b0:4b:98:00:f6:57:81:e6:37:ae:f3:
         d3:01:c6:0b:e1:04:bd:96:9a:5d:1c:a5:42:2b:38:0d:fa:b1:
         d2:42:14:66:75:dd:ab:37:65:d6:57:fb:4c:da:5d:bc:7b:68:
         0e:5d:2b:38:18:3e:3e:f5:c2:35:e8:07:95:9a:56:4a:54:3e:
         cf:51:a3:21:29:76:ee:2d:30:d1:2d:b3:c1:b2:44:11:cf:c9:
         c6:b3:77:09:55:2d:a5:88:6f:3f:96:0f:43:a4:bc:d3:48:7a:
         46:e2:6c:f2:c7:02:94:b2:8f:52:ae:24:ea:86:aa:51:3d:cd:
         b9:b4:91:ea:ff:e8:30:b2:fa:5a:50:be:cd:45:ce:49:b3:63:
         e4:d5:ac:e3:59:16:22:8d:85:6f:5d:4e:61:65:26:6d:1f:c4:
         97:73:a9:32:90:93:be:1c:fe:64:4c:f4:1c:d2:e6:61:bf:94:
         3f:5d:71:58:b6:3c:b8:1b:d1:47:a7:fb:7a:b0:5c:4f:be:c4:
         8e:68:2b:54:e7:a3:0f:ac:05:0c:eb:39:c0:ac:72:9f:2d:04:
         cd:3d:18:b2:9b:12:10:a7:42:08:e0:56:03:d4:73:42:54:45:
         e1:91:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org