Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer
File:                     F3860F57CCED8C936C498E86A51A295017183FFB.cer (raw, json)
Hash identifier:          /bLs6CJvEhVTpHP+DOExn/aaOI0w1dZu7zf6RfT/9oY=
Subject key identifier:   F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69F6E6D2ADE20A2CD6B7F0149540B623E3B060D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/F3860F57CCED8C936C498E86A51A295017183FFB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 16:46:18 +0000
Certificate not after:    Tue 01 Jul 2025 16:51:18 +0000
Subordinate resources:    AS: 263920
                          IP: 138.185.240.0/22
                          IP: 2804:27c0::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 11:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f6:e6:d2:ad:e2:0a:2c:d6:b7:f0:14:95:40:b6:23:e3:b0:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 16:46:18 2024 GMT
            Not After : Jul  1 16:51:18 2025 GMT
        Subject: CN=F3860F57CCED8C936C498E86A51A295017183FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:77:e1:d9:dc:76:a9:40:ad:08:8b:55:61:
                    f8:4d:5d:da:71:81:cc:b3:38:ee:67:88:7d:86:c3:
                    d5:30:73:02:14:b8:7b:9d:f5:07:bf:cf:0a:71:a2:
                    98:16:1e:b0:d4:1a:ea:9d:92:5b:92:dc:34:8d:ba:
                    d8:b3:ec:5f:db:74:ae:bd:44:8f:58:80:0a:bb:be:
                    e7:a2:4c:cf:90:59:d8:d1:b0:f3:51:5d:41:4d:9d:
                    25:b6:77:fa:85:77:95:33:02:ff:e9:cd:c7:1c:d6:
                    37:22:34:4c:e8:48:fc:8a:0e:b6:9f:e4:25:d7:1c:
                    81:6f:74:be:be:b5:7a:67:74:d8:9c:6a:e3:14:b8:
                    c4:b7:da:42:35:ad:5b:e7:2d:46:c6:23:eb:35:ee:
                    e5:49:09:26:b1:40:86:c4:1a:44:68:c1:17:1b:d9:
                    21:14:42:0d:11:31:d5:09:73:cc:f4:98:63:80:77:
                    06:ba:f9:a1:b2:59:18:33:52:9e:df:24:2f:eb:fd:
                    56:6c:7c:d1:a5:91:ca:f8:e5:bb:54:62:23:88:02:
                    06:fd:df:34:05:76:c1:b7:2d:26:a0:f9:e1:1e:e5:
                    38:94:dc:d1:c1:43:dc:2c:e7:1a:db:53:8d:5d:07:
                    ad:de:af:93:66:78:b7:0f:14:26:94:c7:23:f5:89:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/F3860F57CCED8C936C498E86A51A295017183FFB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/22
                IPv6:
                  2804:27c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263920

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:65:eb:64:38:51:cd:dc:f8:9a:be:81:52:22:e1:fb:ba:
         61:02:4e:d2:43:65:12:cf:4b:1c:e0:30:0e:2d:63:da:bb:39:
         10:03:5f:42:3d:d4:58:b9:d9:40:a4:23:53:d3:fa:94:cb:a6:
         65:ed:41:c2:9c:44:a0:4b:a6:a9:b8:55:b4:3c:0b:bc:68:16:
         a1:c7:2d:2b:d1:78:93:bf:dd:3b:58:eb:d8:3c:5b:c8:04:9c:
         d9:43:ff:e3:a8:74:67:d1:d6:8b:16:52:6c:a4:2e:b8:a6:13:
         49:51:07:64:6e:0b:25:fc:c7:58:b3:b8:01:e0:3a:5c:48:fd:
         68:60:f6:e8:d4:6a:37:33:b2:2d:7d:00:54:c9:d5:63:23:bb:
         66:2d:75:40:ba:92:a4:d6:f8:a5:be:6f:16:2e:58:f1:73:13:
         34:46:63:89:cf:b0:7a:0c:a0:be:31:9a:60:d3:ae:0d:5a:f3:
         32:c3:7d:2b:f5:05:a6:6e:c2:ca:f3:3d:b6:3b:fc:63:ce:ef:
         0a:ae:aa:e9:99:28:a6:93:69:07:0c:76:16:a5:b1:9e:a7:0b:
         8d:78:99:7f:e5:b1:9a:c3:c9:18:cb:0d:a3:d6:29:bc:93:e6:
         e3:7a:c0:13:72:06:d2:ba:4f:c3:84:6f:93:02:52:e5:e6:85:
         98:0d:02:dc
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUafbm0q3iCizWt/AUlUC2I+OwYNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDIxNjQ2MThaFw0yNTA3MDExNjUxMThaMDMxMTAvBgNV
BAMTKEYzODYwRjU3Q0NFRDhDOTM2QzQ5OEU4NkE1MUEyOTUwMTcxODNGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLe3fh2dx2qUCtCItVYfhNXdpx
gcyzOO5niH2Gw9UwcwIUuHud9Qe/zwpxopgWHrDUGuqdkluS3DSNutiz7F/bdK69
RI9YgAq7vueiTM+QWdjRsPNRXUFNnSW2d/qFd5UzAv/pzccc1jciNEzoSPyKDraf
5CXXHIFvdL6+tXpndNicauMUuMS32kI1rVvnLUbGI+s17uVJCSaxQIbEGkRowRcb
2SEUQg0RMdUJc8z0mGOAdwa6+aGyWRgzUp7fJC/r/VZsfNGlkcr45btUYiOIAgb9
3zQFdsG3LSag+eEe5TiU3NHBQ9ws5xrbU41dB63er5NmeLcPFCaUxyP1iZ5HAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzhg9XzO2Mk2xJ
joalGilQFxg/+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUY3
Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4OG8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VG
NzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAvRjM4
NjBGNTdDQ0VEOEM5MzZDNDk4RTg2QTUxQTI5NTAxNzE4M0ZGQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCirnwMA0EAgACMAcDBQAoBCfAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQG8DANBgkqhkiG9w0BAQsFAAOCAQEAuiRl62Q4Uc3c+Jq+
gVIi4fu6YQJO0kNlEs9LHOAwDi1j2rs5EANfQj3UWLnZQKQjU9P6lMumZe1BwpxE
oEumqbhVtDwLvGgWocctK9F4k7/dO1jr2DxbyASc2UP/46h0Z9HWixZSbKQuuKYT
SVEHZG4LJfzHWLO4AeA6XEj9aGD26NRqNzOyLX0AVMnVYyO7Zi11QLqSpNb4pb5v
Fi5Y8XMTNEZjic+wegygvjGaYNOuDVrzMsN9K/UFpm7CyvM9tjv8Y87vCq6q6Zko
ppNpBwx2FqWxnqcLjXiZf+WxmsPJGMsNo9YpvJPm43rAE3IG0rpPw4RvkwJS5eaF
mA0C3A==
-----END CERTIFICATE-----
Generated at Mon Jul 8 12:53:40 2024 by rpki-client on console-fra.rpki-client.org