Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
File:                     9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer (raw, json)
Hash identifier:          kImdrpIAqjwAUCajHtxjAbx5CGNMvYy1zirkdQfrCxw=
Subject key identifier:   9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BB445F965617E8A44C0FBBC1F50E322C47A884B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:10 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:10 +0000
Subordinate resources:    AS: 52932
                          IP: 177.185.112.0/21
                          IP: 2804:28b0::/32

Validation:               Failed, certificate revoked on Wed 08 May 2024 15:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:45:f9:65:61:7e:8a:44:c0:fb:bc:1f:50:e3:22:c4:7a:88:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:db:7c:f7:5e:85:4f:bf:d2:a8:5b:32:dd:
                    25:00:d6:06:b9:80:a5:1d:8e:3c:ef:33:6d:12:80:
                    db:8c:a5:9a:f8:d0:02:f7:6b:f4:94:a4:b0:0e:a8:
                    57:91:82:68:9c:74:47:a9:b4:ae:aa:c8:37:9c:fe:
                    5a:ea:55:ec:b6:3c:4b:95:9d:e4:c0:fd:6a:24:ff:
                    27:ee:40:e3:f3:e8:9f:57:e9:06:a0:cb:99:9c:67:
                    ad:e0:b7:5f:60:13:58:39:02:ac:ab:8a:a6:90:95:
                    51:b6:4e:75:00:02:6b:64:c5:66:9c:2f:ed:57:8c:
                    3e:4d:e0:a9:56:29:15:49:2c:c3:93:0f:6b:c3:01:
                    e2:07:18:22:22:a3:a7:a2:58:0a:b9:05:a3:61:2a:
                    b1:8c:60:2b:61:07:fd:19:f6:ec:dd:8e:71:30:2d:
                    f5:c5:78:89:92:68:35:41:67:b6:8d:49:11:66:c5:
                    9e:83:57:35:bf:e5:cd:72:d8:e0:02:97:d2:2a:de:
                    99:84:99:5f:69:80:68:24:4c:9f:93:8b:e0:b7:88:
                    0c:cb:b2:cd:e5:b8:26:0f:6a:19:89:55:92:91:91:
                    f9:7f:44:6a:1b:b5:09:99:5d:32:8d:50:fd:01:33:
                    c8:c0:9b:63:a4:76:6c:ac:93:fa:81:54:83:b3:42:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21
                IPv6:
                  2804:28b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52932

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:6d:59:36:f7:9d:17:99:62:82:62:1b:3f:07:c7:bb:25:
         7a:69:bb:a3:3b:ad:60:87:5e:42:cf:7a:92:41:76:03:d1:47:
         0d:07:f6:ac:24:7e:c8:cd:d4:0b:f3:00:4d:32:50:22:fa:60:
         80:50:87:96:7b:23:80:55:aa:f3:7f:2f:62:96:af:20:89:5f:
         b9:ab:49:29:d0:b2:55:fb:4b:7c:41:88:24:9e:12:37:7b:e0:
         32:a3:39:1f:47:bd:76:d3:76:ae:92:d1:8b:97:f8:f9:ae:dd:
         d9:da:da:c9:72:36:20:d5:d5:39:5c:19:f7:07:11:0a:7a:54:
         e7:dd:1a:4f:bb:60:6d:8f:4f:72:0e:cf:2f:69:22:e2:57:a2:
         00:39:b6:07:18:21:c0:2c:1f:c2:24:3d:b6:44:9d:38:ce:13:
         58:4c:17:50:87:a1:b8:de:03:67:27:2f:97:13:0b:48:ec:7b:
         3a:06:3c:78:a9:9d:b0:8f:d3:ac:b4:79:2f:8f:76:8b:dd:89:
         fa:d2:36:4b:ba:7b:10:70:41:19:09:40:04:73:91:a4:e8:27:
         89:75:3b:fd:1d:ef:29:a8:35:f3:41:c7:2f:07:89:23:d2:68:
         c3:d3:c8:be:95:f5:4e:6d:5c:4a:38:5a:b4:65:7d:f1:61:e5:
         7f:1f:55:9c
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUa7RF+WVhfopEwPu8H1DjIsR6iEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMDMxMTAvBgNV
BAMTKDlEMzQ4QTBBNjZBMkY1NUEzNUVFM0ZFNzZDNTBENERFRUU5ODRCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRydt8916FT7/SqFsy3SUA1ga5
gKUdjjzvM20SgNuMpZr40AL3a/SUpLAOqFeRgmicdEeptK6qyDec/lrqVey2PEuV
neTA/Wok/yfuQOPz6J9X6Qagy5mcZ63gt19gE1g5AqyriqaQlVG2TnUAAmtkxWac
L+1XjD5N4KlWKRVJLMOTD2vDAeIHGCIio6eiWAq5BaNhKrGMYCthB/0Z9uzdjnEw
LfXFeImSaDVBZ7aNSRFmxZ6DVzW/5c1y2OACl9Iq3pmEmV9pgGgkTJ+Ti+C3iAzL
ss3luCYPahmJVZKRkfl/RGobtQmZXTKNUP0BM8jAm2Okdmysk/qBVIOzQsMjAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdNIoKZqL1WjXu
P+dsUNTe7phLcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHhX
Y2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQR2QvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHhX
Y2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQR2QvMS85RDM0
OEEwQTY2QTJGNTVBMzVFRTNGRTc2QzUwRDRERUVFOTg0QjcyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAOxuXAwDQQCAAIwBwMFACgEKLAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAM7EMA0GCSqGSIb3DQEBCwUAA4IBAQAUzW1ZNvedF5ligmIb
PwfHuyV6abujO61gh15Cz3qSQXYD0UcNB/asJH7IzdQL8wBNMlAi+mCAUIeWeyOA
Varzfy9ilq8giV+5q0kp0LJV+0t8QYgknhI3e+AyozkfR71203auktGLl/j5rt3Z
2trJcjYg1dU5XBn3BxEKelTn3RpPu2Btj09yDs8vaSLiV6IAObYHGCHALB/CJD22
RJ04zhNYTBdQh6G43gNnJy+XEwtI7Hs6Bjx4qZ2wj9OstHkvj3aL3Yn60jZLunsQ
cEEZCUAEc5Gk6CeJdTv9He8pqDXzQccvB4kj0mjD08i+lfVObVxKOFq0ZX3xYeV/
H1Wc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org