Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3CAD2896388C5BA707489CFFF029755F9DCB453.cer
File:                     A3CAD2896388C5BA707489CFFF029755F9DCB453.cer (raw, json)
Hash identifier:          FLAYSeQp7NpR3B383JGHwL5pr3LmMEszj704bXUaShA=
Subject key identifier:   A3:CA:D2:89:63:88:C5:BA:70:74:89:CF:FF:02:97:55:F9:DC:B4:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65895D426CBCF85C8F986ECF21AF162E5851D383
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/A3CAD2896388C5BA707489CFFF029755F9DCB453.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2024 19:47:08 +0000
Certificate not after:    Fri 03 Oct 2025 19:52:08 +0000
Subordinate resources:    AS: 271627
                          IP: 45.178.80.0/22
                          IP: 2804:7e7c::/32

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 10:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:5d:42:6c:bc:f8:5c:8f:98:6e:cf:21:af:16:2e:58:51:d3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  4 19:47:08 2024 GMT
            Not After : Oct  3 19:52:08 2025 GMT
        Subject: CN=A3CAD2896388C5BA707489CFFF029755F9DCB453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:b7:4d:d7:7f:07:24:f3:62:60:6e:e3:7e:
                    14:4d:e8:7b:09:eb:69:c4:a6:29:22:f3:cf:83:c5:
                    0c:27:19:31:bf:be:e5:31:56:73:49:85:c3:a8:7d:
                    db:91:ef:29:c8:91:d5:da:48:b8:72:7c:56:67:c9:
                    90:b6:85:95:18:e7:60:cd:af:e1:39:ed:cd:9b:7b:
                    2c:47:5c:d7:39:34:1d:27:80:40:fd:66:30:05:ea:
                    22:99:22:dc:d4:36:b6:fa:a5:e7:f7:a5:da:37:75:
                    28:3a:d3:fc:fb:22:af:69:4b:d1:b6:a7:56:f3:cb:
                    99:fe:be:92:97:29:a3:a0:06:6c:c2:ca:88:72:94:
                    ee:25:b0:24:a7:61:80:8a:d1:5c:86:0d:42:a4:46:
                    1e:11:bd:83:b2:6d:b1:86:7d:bf:23:36:69:ae:c4:
                    0b:29:0f:5a:45:ef:3b:e3:e6:0b:b0:dc:cb:dd:c6:
                    9a:30:7d:35:61:2e:03:b3:99:d9:a4:07:05:48:d6:
                    b8:b3:bf:9a:c3:43:70:15:7b:f7:c6:9c:6e:97:cf:
                    ed:c8:9f:c2:0a:2a:11:61:0c:69:a6:12:ac:c3:ec:
                    0e:82:c0:17:f2:88:82:1c:e1:04:43:b3:49:5f:23:
                    b2:45:bb:e7:94:8d:9f:a5:25:8f:8e:07:69:7d:45:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:CA:D2:89:63:88:C5:BA:70:74:89:CF:FF:02:97:55:F9:DC:B4:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/A3CAD2896388C5BA707489CFFF029755F9DCB453.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.80.0/22
                IPv6:
                  2804:7e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271627

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:5e:74:79:14:e6:29:11:be:45:c6:ae:82:03:0e:1a:09:
         d2:ed:91:0f:a1:64:f0:e4:7c:b8:f1:29:43:13:66:6f:48:d0:
         07:39:bd:e0:6e:7c:c0:7c:02:f5:b5:be:eb:cd:d1:c3:57:fd:
         8a:0b:2e:a3:a2:df:00:fd:8a:e7:f0:4c:7d:4f:5a:ca:2f:e4:
         61:cb:ec:42:27:89:cd:be:f8:ba:ea:6b:d9:21:94:36:c1:1a:
         60:68:80:3b:60:b6:44:25:8a:b7:22:db:22:67:42:bf:52:df:
         cc:ea:5d:3a:0e:53:02:aa:1d:3f:a5:d2:d0:24:c5:8c:66:3c:
         b7:87:80:a8:a3:e0:66:13:4a:eb:26:cf:c4:f0:da:96:a0:7a:
         e8:3f:10:11:ff:a2:10:fb:cc:dd:13:9f:b7:19:a0:38:df:28:
         4f:e8:60:80:c4:0c:d1:9d:0d:11:23:34:ec:d8:0e:8d:48:94:
         88:5f:21:e4:78:5a:5c:73:50:2e:6b:a5:d9:7e:63:78:54:6b:
         79:6a:b7:9c:6b:66:08:43:e6:83:37:77:d0:df:fd:23:37:74:
         26:05:20:37:00:cd:ce:4b:f4:92:6e:1f:eb:34:78:19:ea:66:
         e2:4b:32:42:e2:5c:fa:02:fb:18:de:5e:f7:44:ed:28:6e:6c:
         c3:86:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 12:15:40 2024 by rpki-client on console-fra.rpki-client.org