Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.cer
File:                     EC3D2AF31757127EC7DE6313971820C9C34E685C.cer (raw, json)
Hash identifier:          c5S51wYdMM6athSJML2qceCZIVCUnOgNlOoK61T0uQE=
Subject key identifier:   EC:3D:2A:F3:17:57:12:7E:C7:DE:63:13:97:18:20:C9:C3:4E:68:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       200746DB44FFB5713F5153493FEB22ADDC47D9D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:05 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:05 +0000
Subordinate resources:    AS: 266003
                          IP: 181.191.96.0/22
                          IP: 2804:4118::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 18:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:46:db:44:ff:b5:71:3f:51:53:49:3f:eb:22:ad:dc:47:d9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject: CN=EC3D2AF31757127EC7DE6313971820C9C34E685C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:5f:9d:cb:6a:db:11:4f:ad:7a:d1:85:6c:
                    20:de:bf:b2:44:45:81:62:07:46:05:ca:47:7f:a2:
                    c3:88:ff:a3:db:c9:1a:46:fd:48:80:36:02:80:8b:
                    3b:e1:19:9e:24:c2:b0:2a:e4:9f:6e:6e:02:a9:3d:
                    b6:28:0e:12:8c:af:27:a3:d7:e8:1b:2e:b4:98:e2:
                    c4:e3:10:b8:7c:3a:cf:ab:a6:01:32:1e:82:8f:d3:
                    10:7f:4f:d5:29:50:8e:ca:c1:4b:c0:f7:93:a7:0f:
                    06:b3:f1:05:06:5a:0b:95:c9:28:6d:cd:f7:64:49:
                    8c:55:f9:a2:90:2c:ef:7d:bd:a6:39:df:44:4b:d5:
                    04:87:f5:ea:f3:e6:19:56:1d:96:c3:95:d0:c9:6b:
                    08:11:34:99:32:ec:55:bc:92:a0:e7:bd:05:e2:51:
                    d8:8f:10:95:9e:f5:24:11:fb:56:76:50:c5:93:f5:
                    ec:5c:55:ab:de:11:63:00:5c:37:2d:4f:23:4b:7a:
                    88:42:36:b2:67:85:1c:eb:16:92:11:83:ce:98:ce:
                    0c:e6:37:fa:8a:1a:b7:fa:bb:0a:7b:05:c1:2b:2b:
                    c0:95:91:2b:18:4d:44:53:3e:89:6b:f3:9d:07:00:
                    eb:56:97:0a:5c:bd:39:16:07:99:d7:d7:fb:62:1c:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:3D:2A:F3:17:57:12:7E:C7:DE:63:13:97:18:20:C9:C3:4E:68:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.96.0/22
                IPv6:
                  2804:4118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266003

    Signature Algorithm: sha256WithRSAEncryption
         ce:a4:22:3b:4d:0b:a1:9a:12:88:73:7b:b6:ca:eb:a7:94:f1:
         6f:a9:fe:9c:f2:6a:85:f8:97:fe:24:05:4c:e6:c3:3a:33:53:
         b2:48:8d:31:75:a5:33:76:57:74:94:2d:4d:d7:3b:bc:1d:d1:
         75:30:cf:04:c0:cc:f6:f8:3c:ae:9c:f9:11:0f:f2:77:ce:c2:
         58:73:a1:59:72:88:61:48:19:fe:40:53:ab:2f:09:81:f1:10:
         0e:e6:1e:ad:79:00:f7:66:bb:84:2b:4f:4e:5e:87:3b:a1:f3:
         e3:f8:9d:0c:00:45:58:36:b1:9d:41:a5:3c:a3:17:50:e4:85:
         82:4b:96:77:27:f7:f7:3c:e1:8a:24:a9:2c:7e:2c:25:d3:12:
         52:3a:4a:e3:bf:ab:af:ef:c7:a1:47:56:10:a7:1f:50:11:22:
         bf:b5:d3:ab:d4:15:af:5c:79:3e:ce:f3:20:20:f5:cb:05:35:
         01:c5:93:02:7b:d1:17:31:ca:24:74:94:6f:d9:7d:b4:e4:bd:
         cd:96:64:75:3f:b1:44:09:16:8a:21:62:ac:f2:3a:e3:1f:0b:
         80:90:2b:62:c8:f0:68:43:34:58:f1:c2:f7:15:d2:94:b9:13:
         89:16:4d:53:bd:87:da:ab:19:0e:78:de:1a:22:7b:38:d2:d1:
         2b:a0:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org