Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
File:                     B39237C922AB415B1B0A259FD32B278A7AC32631.cer (raw, json)
Hash identifier:          x07gF5C40/vEyyaksoHs6o/7XY5pzaUcHuR1a94IJ5k=
Subject key identifier:   B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44B8FF16610FC7DC01B802F49A2E79D83DDEA0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Aug 2024 18:49:25 +0000
Certificate not after:    Wed 20 Aug 2025 18:54:25 +0000
Subordinate resources:    AS: 264315
                          IP: 138.122.44.0/22
                          IP: 2804:25f8::/32

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 03:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b8:ff:16:61:0f:c7:dc:01:b8:02:f4:9a:2e:79:d8:3d:de:a0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 18:49:25 2024 GMT
            Not After : Aug 20 18:54:25 2025 GMT
        Subject: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:1c:25:b3:d9:92:90:4f:14:71:3f:62:6a:
                    d4:c0:4f:ad:54:59:98:a1:27:6c:b8:93:1f:c9:61:
                    0c:ab:20:2b:2a:2e:04:86:a1:ba:2a:09:2b:2d:db:
                    82:3e:a8:60:29:14:6e:06:ca:95:99:e3:50:41:25:
                    07:1f:55:ba:5c:56:51:1a:f2:ac:d0:b5:a5:31:09:
                    7a:b7:fe:40:9b:3c:9b:96:b1:35:dd:3e:f9:1c:f9:
                    e7:d3:66:3a:bb:b5:15:b6:34:66:f3:63:58:cd:73:
                    55:18:01:b5:39:53:1b:c5:39:c8:7a:ff:d6:2b:7f:
                    77:75:83:de:51:4c:fe:95:40:04:46:2d:b9:a1:04:
                    19:05:05:ad:a2:fc:f8:02:ca:c8:71:0f:60:3f:86:
                    ce:36:e1:ea:da:78:ca:32:cd:c9:d5:e5:8e:d4:8a:
                    b4:ca:d6:79:ff:93:35:af:fa:48:50:00:0d:b8:26:
                    5d:23:96:ef:f1:11:85:52:1b:18:ed:5d:40:69:48:
                    85:df:27:50:3f:8f:9a:7c:1e:1a:aa:b9:6a:98:0a:
                    98:ac:58:ff:d3:5c:50:a3:3d:95:76:60:4a:33:3d:
                    11:80:3a:64:e6:5c:62:e0:1b:e7:f7:62:f5:90:39:
                    b3:a2:16:9e:0b:49:a5:3f:4b:90:d6:b0:e3:9d:99:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22
                IPv6:
                  2804:25f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264315

    Signature Algorithm: sha256WithRSAEncryption
         cb:d3:7e:83:6f:50:a1:85:f0:39:58:4d:97:94:49:2b:32:03:
         c8:55:2d:94:e2:fd:01:4a:97:89:b5:90:27:91:3c:32:90:6d:
         3a:48:5a:0e:a4:6d:c9:f8:d0:f7:c2:06:a0:db:d4:95:37:eb:
         8a:2e:ee:de:81:ae:8c:55:b6:c1:e7:a4:46:c6:84:bf:a2:05:
         ab:a0:93:de:60:79:c8:be:22:e1:23:da:01:0d:74:62:13:78:
         28:b3:6d:53:e7:03:09:93:40:5e:ed:06:3c:0a:20:59:7f:fe:
         cc:74:d7:b2:7c:45:64:b8:a2:69:72:52:33:73:01:9c:9f:3c:
         0d:da:b1:7c:d2:e2:b5:7e:1b:7d:df:d5:24:e3:8b:83:b4:80:
         75:42:cc:d1:c4:1b:ec:10:b4:6d:fe:03:38:83:18:2a:ef:63:
         ff:0f:7e:6b:04:c5:dc:e0:01:e8:25:72:83:79:1e:9e:9a:53:
         93:28:87:9c:ff:60:59:dd:54:51:cc:00:2c:cb:83:84:99:f2:
         7e:78:62:87:85:0d:f9:df:2d:cb:ed:64:91:66:4a:e6:32:6b:
         3f:48:6a:e3:1d:9f:4f:9d:07:0c:e2:dc:18:8d:9c:fc:a3:7b:
         21:76:db:c2:f3:b4:38:4e:67:28:77:99:82:52:18:18:a9:4f:
         e1:ea:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:42:01 2024 by rpki-client on console-ams.rpki-client.org