Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
File:                     C3AFF141530D91097156CCAECCDD429D2C9F5738.cer (raw, json)
Hash identifier:          gxXKcuHFQl/rrqtAlMPKvFrjksVodjFLCLNkMJsCeKs=
Subject key identifier:   C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B59F27BB120BBA14A8CBEBBDEBF0789369D5392
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jul 2024 19:33:53 +0000
Certificate not after:    Thu 03 Jul 2025 19:38:53 +0000
Subordinate resources:    AS: 266433
                          IP: 45.226.120.0/22
                          IP: 131.108.252.0/22
                          IP: 138.185.4.0/22
                          IP: 168.194.40.0/22
                          IP: 170.82.4.0/22
                          IP: 2804:37bc::/32

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 22:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:59:f2:7b:b1:20:bb:a1:4a:8c:be:bb:de:bf:07:89:36:9d:53:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  4 19:33:53 2024 GMT
            Not After : Jul  3 19:38:53 2025 GMT
        Subject: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:1e:74:40:53:85:5d:3c:50:20:a9:75:85:
                    f7:22:a0:e8:cf:ed:bc:26:9e:99:13:1f:77:b7:46:
                    9a:e7:2e:41:5c:dc:e2:0b:19:c7:f8:6d:6e:da:6e:
                    37:b8:88:ac:8a:ad:6e:2d:fe:a3:2e:04:f1:ff:57:
                    fd:67:60:8e:3c:09:ce:50:c7:cd:3c:e8:fe:54:d7:
                    a3:e9:95:0e:39:91:76:39:c9:09:f9:b8:a6:92:e4:
                    98:bf:2c:4b:09:c0:5e:56:5d:e5:a8:7f:98:a2:96:
                    f9:89:1e:0b:3e:36:cd:99:d4:1d:2a:45:fb:33:83:
                    ba:d7:db:e7:13:72:07:a7:cf:6b:26:1d:73:71:1f:
                    68:e4:9c:1d:67:1a:44:41:37:08:e3:1d:2f:fd:ef:
                    43:fa:2d:4b:8b:3d:a2:16:a3:b7:32:77:0c:d8:c6:
                    b2:4f:4f:76:56:72:1a:1c:c2:ab:d2:ef:08:8d:b8:
                    3f:55:92:a1:b3:01:1b:85:f3:f7:20:26:be:05:5e:
                    bd:22:06:ce:94:3d:55:c0:be:57:f0:d5:2b:d3:52:
                    9d:a5:35:be:c5:ab:45:52:c6:61:2a:a7:96:c2:a1:
                    34:64:2b:33:de:71:d9:29:46:ec:8e:71:d4:3f:25:
                    15:27:10:fd:90:a1:e4:b2:43:42:04:a2:8c:7c:e3:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.120.0/22
                  131.108.252.0/22
                  138.185.4.0/22
                  168.194.40.0/22
                  170.82.4.0/22
                IPv6:
                  2804:37bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266433

    Signature Algorithm: sha256WithRSAEncryption
         27:38:82:55:25:d3:d2:a6:82:e1:33:aa:e9:cc:45:35:a1:4d:
         44:f4:94:42:d9:7f:f7:65:b3:40:89:20:69:ca:03:5f:ae:f2:
         19:2f:1f:b1:6a:d1:f7:5a:9b:5b:77:77:dc:60:d5:1c:d5:df:
         09:7f:1c:9c:3f:5f:0d:6d:d2:e4:8b:54:4a:7a:d0:22:dc:21:
         2d:d6:7d:ee:28:44:3b:3d:36:b8:b2:5c:37:49:d2:94:bb:03:
         4a:4f:66:db:cc:25:31:65:59:b1:3d:8f:6c:b5:46:a3:e6:89:
         ff:ef:13:53:a6:17:7e:45:79:4b:e6:d2:eb:9b:dc:77:1b:e7:
         f9:5c:5e:78:4e:c7:40:4d:59:96:98:a7:99:52:00:7c:ab:c8:
         18:71:d7:21:d5:86:4a:86:a6:b4:cb:cd:24:58:12:ef:d2:20:
         cb:88:9c:1f:58:ef:dc:4b:36:81:8c:12:16:8e:b7:61:ff:d9:
         9e:d9:39:e0:66:09:7c:19:cf:e9:78:4c:93:80:8c:d2:13:d3:
         fa:7e:16:ce:e0:f1:9b:48:35:e0:f9:50:b5:cb:85:4c:35:c4:
         fb:03:e4:80:1e:b8:00:d4:b4:b2:25:95:63:84:19:2e:1b:0c:
         a5:ee:32:fa:ca:c8:e0:e2:43:d4:4e:a5:92:97:bd:f1:ac:92:
         cc:3b:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 23:32:53 2024 by rpki-client on console-ams.rpki-client.org