Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer
File:                     EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer (raw, json)
Hash identifier:          /HRBGNUjWSzSSw3R0IYc+crL+4Yh2WF/BmJwW/nHTzs=
Subject key identifier:   EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7052CE20A607912FD5E1F1F7241DDFF7FE9A1D50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 01 Sep 2024 20:35:31 +0000
Certificate not after:    Sun 31 Aug 2025 20:40:31 +0000
Subordinate resources:    AS: 270728
                          IP: 187.102.232.0/22
                          IP: 2804:7078::/32

Validation:               Failed, certificate revoked on Sun 29 Sep 2024 03:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:ce:20:a6:07:91:2f:d5:e1:f1:f7:24:1d:df:f7:fe:9a:1d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  1 20:35:31 2024 GMT
            Not After : Aug 31 20:40:31 2025 GMT
        Subject: CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:41:95:f5:9b:04:45:fe:2d:61:b5:c7:a1:7b:
                    b7:35:a3:f6:00:c7:f1:14:f2:90:71:ed:d1:9c:41:
                    1c:f3:94:b5:97:4b:05:3e:02:8e:f8:e4:1b:e7:87:
                    5d:5e:1c:1f:b7:2b:5e:1f:fe:79:3b:5c:16:9f:4e:
                    1a:50:94:09:e6:26:49:5c:39:65:99:8b:30:4c:1a:
                    0a:20:fa:69:44:a6:5e:aa:1d:48:c5:0a:f3:74:9d:
                    92:92:f3:92:8e:51:24:89:f1:14:77:12:8c:e0:8b:
                    7d:54:b1:16:44:d7:44:e5:ef:61:27:34:c9:94:30:
                    70:bd:7d:3d:b3:40:61:2b:0c:3e:93:bd:df:a1:5f:
                    a7:64:99:81:24:3d:d3:3d:e1:7e:cb:fe:8f:0a:73:
                    3c:c1:bb:ed:26:a5:5a:28:99:dd:3c:50:91:95:c8:
                    26:25:af:70:23:c6:c7:a3:e8:7a:a1:0a:c9:ce:52:
                    c7:06:a8:90:a8:08:ee:2a:5d:e5:29:c1:8c:c6:e2:
                    31:c7:1b:38:6f:66:38:5f:4b:f3:df:95:fa:27:4b:
                    c3:ea:61:68:48:1c:d1:dd:7d:d6:cd:4f:ad:1f:e0:
                    f0:bd:8b:68:2f:f4:27:2c:3a:60:3a:c5:27:3c:30:
                    99:2c:6b:51:5f:ff:9c:9c:b4:39:de:03:f6:b3:ce:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.232.0/22
                IPv6:
                  2804:7078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270728

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:b8:84:56:47:0a:81:c1:16:e6:17:7b:86:af:5d:3c:81:
         4c:67:d4:26:ea:2c:0c:03:c1:96:85:a8:2d:50:ed:38:0e:5c:
         45:00:c3:5b:52:40:ad:f3:d3:9f:48:2f:bf:66:e1:f4:80:9d:
         0c:62:39:9d:c6:13:36:b7:48:42:f8:e7:a1:38:fe:9e:ca:1b:
         a8:08:9f:e3:32:dc:42:84:fc:5e:e6:e6:46:8f:dd:f4:57:9c:
         f0:5f:25:34:0e:cc:0e:cd:5c:51:72:c6:09:01:6a:a4:82:4e:
         70:2d:f3:0f:37:63:fb:31:d2:f2:6b:4f:fc:51:2a:32:f3:1f:
         87:e8:b1:51:2c:22:dc:01:7f:92:28:af:19:66:1a:00:ba:cf:
         26:67:97:64:8f:ef:e3:d3:e5:cd:14:35:d4:74:2e:84:7a:d6:
         17:29:8c:8a:42:78:2e:50:b4:67:38:ea:c9:9b:03:be:0a:51:
         1d:0f:d3:26:18:93:ad:0c:66:97:f7:23:4d:c2:2e:d6:b5:10:
         ff:a0:ba:51:30:a7:62:b0:d8:1f:79:d7:24:78:45:10:66:58:
         ef:c7:4a:2e:72:82:a4:c0:cc:a7:7b:98:8d:7e:9b:25:09:15:
         a5:26:51:5d:00:79:f1:a4:b3:96:3d:23:47:93:75:ed:fa:04:
         91:38:7e:ba
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUcFLOIKYHkS/V4fH3JB3f9/6aHVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDEyMDM1MzFaFw0yNTA4MzEyMDQwMzFaMDMxMTAvBgNV
BAMTKEVDM0VGQjAzQjRCODQ0QjJEQkE5NDkzRjk5MkI1OTdDMjNCRkJFOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQZX1mwRF/i1htcehe7c1o/YA
x/EU8pBx7dGcQRzzlLWXSwU+Ao745Bvnh11eHB+3K14f/nk7XBafThpQlAnmJklc
OWWZizBMGgog+mlEpl6qHUjFCvN0nZKS85KOUSSJ8RR3Eozgi31UsRZE10Tl72En
NMmUMHC9fT2zQGErDD6Tvd+hX6dkmYEkPdM94X7L/o8KczzBu+0mpVoomd08UJGV
yCYlr3Ajxsej6HqhCsnOUscGqJCoCO4qXeUpwYzG4jHHGzhvZjhfS/PflfonS8Pq
YWhIHNHdfdbNT60f4PC9i2gv9CcsOmA6xSc8MJksa1Ff/5yctDneA/azzkwvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsPvsDtLhEstup
ST+ZK1l8I7++ijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRERw
bjkyMmRXSlhoRENpVkI0b2Zzd3U0VWFyRHBFeUNqam1oMkdBUnBMZVUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RE
cG45MjJkV0pYaERDaVZCNG9mc3d1NFVhckRwRXlDamptaDJHQVJwTGVVLzAvRUMz
RUZCMDNCNEI4NDRCMkRCQTk0OTNGOTkyQjU5N0MyM0JGQkU4QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCu2boMA0EAgACMAcDBQAoBHB4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhiDANBgkqhkiG9w0BAQsFAAOCAQEAa1e4hFZHCoHBFuYX
e4avXTyBTGfUJuosDAPBloWoLVDtOA5cRQDDW1JArfPTn0gvv2bh9ICdDGI5ncYT
NrdIQvjnoTj+nsobqAif4zLcQoT8XubmRo/d9Fec8F8lNA7MDs1cUXLGCQFqpIJO
cC3zDzdj+zHS8mtP/FEqMvMfh+ixUSwi3AF/kiivGWYaALrPJmeXZI/v49PlzRQ1
1HQuhHrWFymMikJ4LlC0ZzjqyZsDvgpRHQ/TJhiTrQxml/cjTcIu1rUQ/6C6UTCn
YrDYH3nXJHhFEGZY78dKLnKCpMDMp3uYjX6bJQkVpSZRXQB58aSzlj0jR5N17foE
kTh+ug==
-----END CERTIFICATE-----
Generated at Sun Sep 29 04:46:50 2024 by rpki-client on console-fra.rpki-client.org