Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer
File:                     F3698D7241A7709C231EAE882D9687C76C4BD16A.cer (raw, json)
Hash identifier:          jRI8HkI7NzMgee7e0jdzfke1h43p/0YUVqvtzy7hmZg=
Subject key identifier:   F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F2C10922CD3B3D988E0730714DC45676DC2C7CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:28:23 +0000
Certificate not after:    Thu 03 Apr 2025 22:33:23 +0000
Subordinate resources:    AS: 266066
                          IP: 45.4.124.0/22
                          IP: 2804:3a08::/32

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 07:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2c:10:92:2c:d3:b3:d9:88:e0:73:07:14:dc:45:67:6d:c2:c7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:28:23 2024 GMT
            Not After : Apr  3 22:33:23 2025 GMT
        Subject: CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:94:48:0e:f7:7a:b4:ce:9c:2d:b2:14:f7:
                    7d:b3:81:46:fd:3c:8f:87:c5:2d:52:f5:a4:73:1d:
                    e3:71:69:ca:57:1a:87:22:dd:76:71:8a:b3:2c:53:
                    45:2b:1e:03:81:b4:7c:cc:43:d6:e1:a7:05:ab:11:
                    9e:25:dd:0e:2b:51:e4:ec:be:6b:ed:c5:a0:73:44:
                    73:4c:8b:05:38:7e:27:d6:ab:c9:11:95:ab:db:35:
                    88:07:01:d6:e3:ad:c9:82:d6:1f:b5:7e:0f:e5:d2:
                    4f:9f:b3:ed:5f:d6:c7:98:e1:f5:04:7f:79:ad:4f:
                    00:62:4d:dc:4b:6b:a9:65:14:4b:cd:0b:0d:2a:4d:
                    f4:f4:14:8c:f3:c1:b2:69:70:3a:c7:18:3b:81:8c:
                    ec:73:91:38:a7:3c:6b:12:fb:28:0f:cb:fa:b6:41:
                    29:df:a6:22:76:ed:7d:af:ed:a0:21:59:de:20:d9:
                    4a:0d:db:02:fe:f5:25:52:60:57:8f:e0:c9:75:96:
                    84:68:73:23:37:9f:0e:6b:34:6c:98:a9:d9:a9:4e:
                    b5:4a:2f:ec:11:a0:f8:bb:f1:f2:91:47:86:f9:13:
                    36:92:19:30:80:5d:07:43:84:78:21:bd:ee:5b:06:
                    b8:e2:04:0d:51:9a:d3:03:ee:2e:31:a1:d8:26:d2:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.124.0/22
                IPv6:
                  2804:3a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266066

    Signature Algorithm: sha256WithRSAEncryption
         86:79:e9:90:2f:91:18:6b:da:e8:8e:fd:ab:14:98:a1:75:ec:
         28:65:b3:09:4e:24:5c:d6:e2:27:89:31:3c:73:4b:19:bb:c0:
         36:3b:b0:1a:50:e3:99:39:61:10:bb:02:98:a9:8f:95:26:b8:
         94:41:f8:00:20:8d:4b:f4:e4:d3:b5:e1:28:ac:92:49:d4:42:
         e0:47:29:22:93:d3:3b:89:f5:a3:b3:65:bc:c6:83:26:0d:0f:
         00:e7:36:bb:9f:c2:e8:80:6d:93:6f:08:73:27:66:49:df:06:
         8c:5c:32:80:02:82:6b:fb:81:a0:66:98:28:ba:5b:d8:55:3f:
         b0:9f:ad:e7:18:28:a4:de:d3:46:9b:c4:cc:17:9c:c6:91:fd:
         92:ed:b7:b7:5b:86:ca:73:f3:45:37:ca:e2:ef:c5:0d:67:11:
         29:1e:c9:3d:82:78:9d:b5:25:ed:c0:16:a0:4f:b7:47:fc:28:
         f7:bd:d1:73:ee:a2:81:3f:0d:01:56:6e:fb:47:09:15:00:e5:
         bf:74:df:ea:f1:7e:0b:21:0d:cc:a6:af:be:3d:29:eb:a7:4b:
         da:c4:51:51:f8:bb:d2:1e:ac:b9:1f:c1:61:6b:8b:a8:7e:e7:
         f7:aa:ed:1a:e1:73:0e:3e:39:f2:24:d1:dd:a7:8b:e4:65:1d:
         76:04:df:34
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUHywQkizTs9mI4HMHFNxFZ23Cx84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMjI4MjNaFw0yNTA0MDMyMjMzMjNaMDMxMTAvBgNV
BAMTKEYzNjk4RDcyNDFBNzcwOUMyMzFFQUU4ODJEOTY4N0M3NkM0QkQxNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFpRIDvd6tM6cLbIU932zgUb9
PI+HxS1S9aRzHeNxacpXGoci3XZxirMsU0UrHgOBtHzMQ9bhpwWrEZ4l3Q4rUeTs
vmvtxaBzRHNMiwU4fifWq8kRlavbNYgHAdbjrcmC1h+1fg/l0k+fs+1f1seY4fUE
f3mtTwBiTdxLa6llFEvNCw0qTfT0FIzzwbJpcDrHGDuBjOxzkTinPGsS+ygPy/q2
QSnfpiJ27X2v7aAhWd4g2UoN2wL+9SVSYFeP4Ml1loRocyM3nw5rNGyYqdmpTrVK
L+wRoPi78fKRR4b5EzaSGTCAXQdDhHghve5bBrjiBA1RmtMD7i4xodgm0g8/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzaY1yQadwnCMe
rogtlofHbEvRajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQk1D
V1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5NncvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JN
Q1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzEvRjM2
OThENzI0MUE3NzA5QzIzMUVBRTg4MkQ5Njg3Qzc2QzRCRDE2QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQR8MA0EAgACMAcDBQAoBDoIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPUjANBgkqhkiG9w0BAQsFAAOCAQEAhnnpkC+RGGva6I79
qxSYoXXsKGWzCU4kXNbiJ4kxPHNLGbvANjuwGlDjmTlhELsCmKmPlSa4lEH4ACCN
S/Tk07XhKKySSdRC4EcpIpPTO4n1o7NlvMaDJg0PAOc2u5/C6IBtk28IcydmSd8G
jFwygAKCa/uBoGaYKLpb2FU/sJ+t5xgopN7TRpvEzBecxpH9ku23t1uGynPzRTfK
4u/FDWcRKR7JPYJ4nbUl7cAWoE+3R/wo973Rc+6igT8NAVZu+0cJFQDlv3Tf6vF+
CyENzKavvj0p66dL2sRRUfi70h6suR/BYWuLqH7n96rtGuFzDj458iTR3aeL5GUd
dgTfNA==
-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:47 2024 by rpki-client on console-fra.rpki-client.org