Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.cer
File:                     7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.cer (raw, json)
Hash identifier:          FFwGUCf9jUsjQ6OPULY1PPNdBrHyaPYpMMtW2wK4Mis=
Subject key identifier:   7F:3F:61:BF:6C:2E:81:A3:DC:FB:31:6F:AA:5B:38:13:7C:AE:CA:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C412492F17715C1CDE94C0BC36EA45737FC9A13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Aug 2024 17:22:32 +0000
Certificate not after:    Tue 05 Aug 2025 17:27:32 +0000
Subordinate resources:    AS: 270703
                          IP: 186.209.124.0/22
                          IP: 2804:700c::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 03:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:41:24:92:f1:77:15:c1:cd:e9:4c:0b:c3:6e:a4:57:37:fc:9a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 17:22:32 2024 GMT
            Not After : Aug  5 17:27:32 2025 GMT
        Subject: CN=7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:7c:8d:fb:c6:2a:b5:f7:94:63:ef:c1:43:
                    04:57:d1:e3:9b:42:68:d1:6f:83:64:63:80:4d:42:
                    cc:3b:aa:1d:ce:bd:1e:65:d5:ac:b1:21:29:01:48:
                    d6:ce:06:e7:fd:39:25:de:2b:97:8d:a5:66:ac:0e:
                    16:a3:1e:2f:22:c8:4d:9d:17:7b:c1:b0:50:b1:36:
                    b4:f8:32:97:c0:aa:17:16:a0:39:c1:ad:cb:4d:cb:
                    26:42:e9:74:5c:9a:ce:88:30:19:7a:70:48:4a:28:
                    f5:44:00:45:32:bd:2f:97:ee:9b:39:a1:53:c7:98:
                    2b:7a:26:40:b4:0d:32:54:bd:c9:73:b3:d8:e7:e0:
                    1d:b6:c1:a0:c0:2b:37:50:d7:cf:4f:74:7a:25:82:
                    fb:19:7d:aa:9d:2a:89:73:58:74:e5:4e:13:5d:27:
                    5b:a9:94:c4:4d:4b:fe:60:a7:d2:0e:17:49:e0:06:
                    18:76:f4:a9:c5:5f:71:b3:fa:cc:62:0e:6d:a8:25:
                    1d:d4:12:c7:11:09:c0:e6:9e:e2:74:4b:79:f1:47:
                    0f:a1:4e:a7:df:58:91:9c:76:e5:15:7e:81:87:f0:
                    26:fb:9e:4f:d9:d3:44:e6:fb:c9:01:86:5b:20:ea:
                    b9:0b:b8:da:a2:9e:2b:c4:9a:cd:e3:06:a2:63:d9:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:3F:61:BF:6C:2E:81:A3:DC:FB:31:6F:AA:5B:38:13:7C:AE:CA:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.124.0/22
                IPv6:
                  2804:700c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270703

    Signature Algorithm: sha256WithRSAEncryption
         cf:42:4c:4c:96:0d:d1:89:d3:55:64:95:f0:8c:8e:1e:ab:de:
         6b:e5:43:e6:48:19:21:29:3b:35:06:41:53:93:47:17:6e:51:
         2f:8f:21:b2:85:a7:22:cf:1e:94:c4:b2:b8:c4:5e:0b:22:8d:
         29:eb:eb:e7:cd:64:0c:d2:5f:bb:92:4a:aa:4e:35:60:20:09:
         a5:b2:17:92:20:7d:53:6f:93:52:f1:bd:4d:c5:c6:a6:9a:2d:
         bd:ee:a3:7b:5e:26:68:14:fc:d4:42:e7:68:b7:00:4d:bf:84:
         92:75:89:ba:28:0d:f3:2b:9d:54:6f:31:b8:ec:ef:88:84:d4:
         ec:8f:2f:a0:43:6e:a5:87:04:72:5c:32:36:ca:55:3d:7b:ca:
         8a:b7:34:ee:f9:e3:c8:ca:12:fc:4e:f0:64:dd:f2:9e:8d:00:
         84:39:35:09:77:3b:cb:e5:43:e3:00:cd:50:fb:36:e9:7d:c2:
         4f:63:09:1f:aa:dc:2a:d9:6b:96:73:ad:bd:a0:31:5e:88:c1:
         35:d2:c1:a3:3a:b3:6b:5c:8d:db:c8:00:53:41:d9:4a:59:37:
         2f:dc:67:70:50:9f:82:a5:45:36:2b:cd:20:30:f8:20:90:39:
         e8:d0:23:c5:c9:23:d6:bd:67:2b:dd:c1:63:a2:9d:3c:69:29:
         76:24:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:52:20 2024 by rpki-client on console-ams.rpki-client.org