Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3F401FFC77A2119AB7FFE9CA5009D149A8E3A2A.cer
File:                     B3F401FFC77A2119AB7FFE9CA5009D149A8E3A2A.cer (raw, json)
Hash identifier:          tmOlGZ4K9BV42NzCnXAQ//6ibeCwxzBTmki2DTCP1/c=
Subject key identifier:   B3:F4:01:FF:C7:7A:21:19:AB:7F:FE:9C:A5:00:9D:14:9A:8E:3A:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21D3EB64DAD56CF1BE4E2E78BDD515BD9319DBE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/B3F401FFC77A2119AB7FFE9CA5009D149A8E3A2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 20:05:44 +0000
Certificate not after:    Mon 03 Jun 2024 20:10:44 +0000
Subordinate resources:    AS: 267668
                          IP: 45.224.72.0/22
                          IP: 2804:4508::/32

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 13:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:eb:64:da:d5:6c:f1:be:4e:2e:78:bd:d5:15:bd:93:19:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 20:05:44 2023 GMT
            Not After : Jun  3 20:10:44 2024 GMT
        Subject: CN=B3F401FFC77A2119AB7FFE9CA5009D149A8E3A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a3:23:c9:d5:cd:ae:94:5a:d8:68:21:1e:f5:
                    06:31:b1:ef:87:09:db:2e:7c:67:b5:52:e6:94:9d:
                    9f:5e:0b:36:4a:48:84:df:bd:dd:53:2f:f4:33:d6:
                    de:fb:7c:2f:15:9b:c1:92:af:f7:23:aa:5e:11:e6:
                    73:51:43:fb:8b:02:3b:a1:87:7b:4b:21:7f:e0:80:
                    b5:62:37:53:84:d6:6f:b3:d1:31:67:93:10:bc:01:
                    5d:cd:31:08:20:2f:88:25:d3:67:98:0c:e6:27:21:
                    63:6b:23:c6:7a:eb:67:af:48:22:a2:fe:7b:f1:4b:
                    b4:bd:ae:84:7d:ba:53:87:ee:99:eb:ff:1d:24:d9:
                    dd:1e:ba:e4:29:24:16:b7:2f:ca:fa:64:01:3b:2e:
                    bb:3e:ae:c6:6c:22:90:d1:f0:48:0b:6e:c6:60:e1:
                    70:18:3e:70:b1:bb:2b:52:4e:82:65:41:4a:40:50:
                    98:e9:3a:b0:80:9e:d2:0d:fd:f6:29:90:68:0e:e7:
                    c4:93:1a:4e:2f:f8:a0:21:25:bc:e2:7e:c2:81:8d:
                    f9:9a:2c:dd:a8:da:79:02:f3:70:3c:69:11:c3:61:
                    cf:b9:49:f0:cb:66:9b:0d:64:98:af:14:99:00:e9:
                    22:0c:15:f0:d8:92:21:74:c3:a1:ff:60:3b:ef:95:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:F4:01:FF:C7:7A:21:19:AB:7F:FE:9C:A5:00:9D:14:9A:8E:3A:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/B3F401FFC77A2119AB7FFE9CA5009D149A8E3A2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22
                IPv6:
                  2804:4508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267668

    Signature Algorithm: sha256WithRSAEncryption
         a0:8c:cd:f9:16:7c:ed:24:4c:df:02:03:47:6c:cc:d7:60:5b:
         9a:92:cb:06:8e:af:76:ce:75:c6:5a:34:87:1e:d8:30:cb:f0:
         32:cf:f4:4c:1d:d4:22:a5:eb:0e:fe:da:00:57:09:88:46:e6:
         5b:f5:40:9d:90:e9:45:54:f6:53:3e:0f:17:ef:0d:ad:9e:27:
         0e:d6:13:fc:b7:79:ec:e7:53:dd:0d:37:a5:a9:f5:70:63:02:
         d5:c2:4c:51:e9:6b:36:c3:f2:9a:5b:34:7e:8a:09:4b:cd:3c:
         bb:ca:65:1f:5b:3f:69:57:52:0d:fc:dc:0e:f1:25:70:aa:12:
         f5:cf:8a:48:58:c7:ed:9f:4c:6d:82:b8:74:77:45:8a:0f:9b:
         69:b6:8a:55:9b:f9:db:86:44:fe:05:86:24:7e:72:1b:ba:90:
         86:d0:55:45:9a:35:5b:9b:31:86:65:26:a1:01:46:03:d7:04:
         c0:d3:a9:71:e8:46:4c:7c:83:68:f9:7b:6c:32:93:af:fc:81:
         9d:c3:bf:9a:94:e4:97:83:03:6f:50:db:bc:b8:49:fc:1d:d1:
         a4:eb:ab:ee:b2:2c:3c:ac:1c:d6:46:da:66:e4:0a:d8:35:a5:
         00:56:03:f4:c9:fa:9c:dd:b8:b5:e1:41:1d:09:28:83:d8:f2:
         18:b2:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:24 2024 by rpki-client on console.sobornost.net