Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE3FF73388C7BDFA140471D214D86EB86CB0FE1A.cer
File:                     AE3FF73388C7BDFA140471D214D86EB86CB0FE1A.cer (raw, json)
Hash identifier:          YXvAx5775ulr0N/uyFBYxL5+v9c+UQACqTNQZHlbsAY=
Subject key identifier:   AE:3F:F7:33:88:C7:BD:FA:14:04:71:D2:14:D8:6E:B8:6C:B0:FE:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E40DF9E33FABF9657BD48377F9128CDB3404297
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/AE3FF73388C7BDFA140471D214D86EB86CB0FE1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 12:37:51 +0000
Certificate not after:    Mon 05 May 2025 12:42:51 +0000
Subordinate resources:    AS: 28246
                          IP: 187.1.32.0/20

Validation:               Failed, certificate revoked on Sun 12 May 2024 06:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:40:df:9e:33:fa:bf:96:57:bd:48:37:7f:91:28:cd:b3:40:42:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 12:37:51 2024 GMT
            Not After : May  5 12:42:51 2025 GMT
        Subject: CN=AE3FF73388C7BDFA140471D214D86EB86CB0FE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:c0:22:20:71:fb:cd:0d:13:36:e8:6e:89:
                    3e:c3:7e:bd:e8:73:e6:5b:48:72:3e:e8:cc:19:ad:
                    a7:8b:fb:af:6c:20:98:5c:57:42:ae:0e:f2:47:c4:
                    19:a9:7b:e6:e6:7a:be:3c:27:16:25:1a:89:71:c1:
                    a4:9a:96:f9:8e:a5:6d:07:9d:88:b5:3d:2e:3a:ba:
                    ca:cd:44:72:13:0b:ba:82:62:70:64:15:d5:8c:3a:
                    b1:2c:e5:7d:4f:cc:69:41:98:bd:18:c3:c1:2b:fc:
                    31:dc:3f:0d:c8:16:b2:cb:e7:b4:49:b1:39:07:0e:
                    ab:55:c5:5c:20:3e:af:a4:09:bd:54:2a:9c:f4:ea:
                    6c:f8:37:b0:3f:85:ee:d7:32:42:d5:2c:1a:99:5f:
                    95:1c:29:f8:76:cb:0f:df:02:d7:6f:2e:bb:e0:14:
                    66:aa:d4:bb:e8:8d:39:47:b8:e3:22:92:c2:47:0d:
                    42:94:a2:73:6e:d6:39:20:be:3e:1f:14:7a:a2:4b:
                    17:7b:9b:cf:59:5d:32:95:a8:eb:d7:97:a4:e3:5e:
                    6d:0a:e1:46:fa:ae:3e:73:cc:13:0f:8f:91:eb:98:
                    fd:f7:cf:a7:d2:b9:d8:ce:a9:fb:2f:ff:d4:e9:0d:
                    d4:a4:dc:80:67:a8:8d:39:4f:27:19:0f:f4:a7:2a:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:3F:F7:33:88:C7:BD:FA:14:04:71:D2:14:D8:6E:B8:6C:B0:FE:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/AE3FF73388C7BDFA140471D214D86EB86CB0FE1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28246

    Signature Algorithm: sha256WithRSAEncryption
         60:70:2a:7d:1e:e0:d4:67:30:ac:a6:88:c0:7d:57:12:bf:a3:
         62:69:fc:5a:b9:e9:11:57:53:b3:1f:ba:a4:2e:74:c0:20:2a:
         71:83:0d:3b:c0:b0:98:26:f5:76:80:b9:d1:37:a8:a2:78:09:
         57:89:b3:8e:84:82:3f:d6:cc:b8:89:f8:f6:24:4b:c5:50:6b:
         f4:4a:6b:41:a9:0a:f5:f0:83:14:1a:7f:5b:b2:fb:fb:af:8e:
         56:d5:ae:e5:3a:f7:14:35:5c:43:27:ed:c3:bf:82:e7:43:6c:
         d1:e2:aa:7f:6a:aa:9c:c9:e4:af:73:d8:f6:f2:ca:92:86:cd:
         31:69:61:ec:12:a8:a1:d0:65:35:ff:af:90:0e:b5:3f:42:d2:
         69:c6:86:37:0f:06:b9:c3:c5:e8:e8:32:ce:5f:8c:77:1c:68:
         64:9c:c8:0c:7d:c7:08:53:17:65:a1:e4:c5:5e:3d:5a:16:4e:
         ad:44:2d:f1:4a:8a:f3:56:97:48:69:48:1a:df:51:98:28:77:
         8b:16:24:14:19:1a:83:7d:13:02:d1:6f:e4:b2:5b:47:ff:e8:
         13:bd:20:f7:17:10:8b:e6:68:24:eb:4b:bf:88:ec:2f:b9:d0:
         cd:28:10:c1:10:b8:61:88:e8:60:14:c7:10:b4:d9:91:7d:00:
         4f:90:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org