Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3103106DCB0D8500465A80ED45C189B032855D1.cer
File:                     B3103106DCB0D8500465A80ED45C189B032855D1.cer (raw, json)
Hash identifier:          uTj9b2sJm7uXMKSdgzfE6VIS5Vfket9EM4dQHdd5X7E=
Subject key identifier:   B3:10:31:06:DC:B0:D8:50:04:65:A8:0E:D4:5C:18:9B:03:28:55:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D5FC6E11EF3B38F927C90BD4697A0BEC14BA3B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/B3103106DCB0D8500465A80ED45C189B032855D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 14:12:42 +0000
Certificate not after:    Fri 29 Aug 2025 14:17:42 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:c6:e1:1e:f3:b3:8f:92:7c:90:bd:46:97:a0:be:c1:4b:a3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 14:12:42 2024 GMT
            Not After : Aug 29 14:17:42 2025 GMT
        Subject: CN=B3103106DCB0D8500465A80ED45C189B032855D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f6:eb:cd:1d:20:a6:0d:f8:d2:13:99:dc:be:
                    7f:a9:e1:a8:9b:41:19:95:06:7c:46:51:8e:05:1d:
                    91:6f:f5:7a:a1:ae:32:85:ea:44:9e:93:15:59:57:
                    7c:6e:36:a1:81:58:53:52:e9:a4:29:54:83:4a:4b:
                    76:34:4d:08:0e:1d:c9:eb:4d:87:0b:05:19:d8:08:
                    e3:03:8c:11:7a:2b:ef:5c:e0:b2:70:e4:8c:14:20:
                    41:1a:15:3a:24:2d:89:d3:32:0c:63:6d:41:b0:f9:
                    1a:5f:5e:3f:1c:aa:d8:4f:f1:de:5c:3b:fd:93:cb:
                    21:a6:78:30:48:e2:6b:19:4e:2b:7f:bc:a3:77:06:
                    47:84:47:ee:ee:a5:73:4f:b8:0a:45:a6:de:12:13:
                    3a:75:64:09:36:77:c6:f8:89:04:7d:10:94:82:e0:
                    12:23:7d:b3:f4:6c:0f:01:9d:54:1d:44:2e:2d:8e:
                    e5:dc:28:13:cf:b0:3d:92:89:1f:b8:af:17:81:b4:
                    f1:3b:d5:b6:60:44:1e:1c:9a:fa:a8:ed:e8:06:29:
                    1e:f7:1a:bd:ec:35:14:c0:91:16:d7:e2:d6:27:fd:
                    ff:3e:94:c7:b3:be:ff:ad:f0:11:3b:c7:75:83:94:
                    29:ef:11:be:43:e7:a7:f7:bf:5c:a0:39:3f:7a:f5:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:10:31:06:DC:B0:D8:50:04:65:A8:0E:D4:5C:18:9B:03:28:55:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/B3103106DCB0D8500465A80ED45C189B032855D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:68:3b:ec:f1:f1:d3:1f:18:29:74:49:39:c7:ff:be:d9:
         eb:5d:71:57:0c:63:fb:f3:af:44:34:77:d6:87:65:00:d1:19:
         11:44:02:50:ff:9c:a1:d9:51:da:82:41:90:34:6a:da:bc:4c:
         25:2f:d4:a2:8b:d6:4f:15:5f:7f:fc:36:56:06:c4:f1:a3:e3:
         48:45:97:5d:f0:d8:4a:17:44:2c:fb:aa:38:49:22:65:b1:dc:
         5f:35:1e:a6:18:eb:3d:66:38:0a:92:0a:5d:f0:5b:5e:9f:59:
         59:1e:32:31:ce:72:3f:af:f9:22:09:1b:f5:f5:6f:cc:49:d4:
         36:dc:17:33:02:ec:83:9e:d5:98:da:e6:eb:f6:5d:ed:25:7f:
         36:2c:07:c2:33:e6:29:65:23:a0:bc:7c:54:a9:47:76:ad:6d:
         21:b7:ec:48:af:55:bc:ec:83:d3:e0:29:d8:04:70:11:95:ee:
         7b:ef:ba:b4:a7:3b:43:aa:b7:3b:82:59:1c:f0:de:e4:28:cb:
         b7:34:ce:a1:84:d4:07:e1:ad:8e:27:61:5f:a8:87:8c:cd:63:
         15:3e:36:62:77:77:78:d3:ca:85:2b:18:b6:6e:c6:43:ca:96:
         8f:cd:8b:25:84:33:5c:f6:fa:5f:b4:82:95:a1:7b:04:06:4f:
         e4:9f:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:13:58 2024 by rpki-client on console-ams.rpki-client.org