Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/000D47573EC50F94D695B0ECBAF7ED1DB5ED6A9E.cer
File:                     000D47573EC50F94D695B0ECBAF7ED1DB5ED6A9E.cer (raw, json)
Hash identifier:          ad5poGUDoKYC4plEll4qAK2xDQJJLnC9X6D58yuL6i8=
Subject key identifier:   00:0D:47:57:3E:C5:0F:94:D6:95:B0:EC:BA:F7:ED:1D:B5:ED:6A:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B19E19EE769DCDF2B40BB2CCBE63D2F8BB9A4C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/000D47573EC50F94D695B0ECBAF7ED1DB5ED6A9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2024 18:59:43 +0000
Certificate not after:    Wed 05 Nov 2025 19:04:43 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 10:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:19:e1:9e:e7:69:dc:df:2b:40:bb:2c:cb:e6:3d:2f:8b:b9:a4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 18:59:43 2024 GMT
            Not After : Nov  5 19:04:43 2025 GMT
        Subject: CN=000D47573EC50F94D695B0ECBAF7ED1DB5ED6A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:50:a5:8a:f8:19:f9:b6:5a:13:d6:d4:62:
                    c3:87:72:8f:d5:8b:a2:46:65:a2:36:1d:df:af:cf:
                    8d:39:5b:b9:23:dc:ae:90:bc:8c:1c:15:77:a9:59:
                    4f:8c:5d:4e:22:4c:9a:88:bf:2d:e6:89:d9:e8:77:
                    28:0c:b6:6f:5f:aa:9b:ff:a9:bc:b9:a3:63:c6:08:
                    13:ef:d5:63:d8:ec:42:90:32:b0:7b:61:d5:c5:10:
                    f1:92:68:5e:eb:20:35:8d:92:f0:8c:bf:9a:d9:31:
                    00:c1:c6:94:2f:2a:d5:97:4c:61:27:e2:00:b6:20:
                    b3:df:b4:6b:2a:c4:43:c1:40:c4:5c:71:3f:84:78:
                    e1:5f:0c:97:80:a5:d3:5f:96:1d:a6:d3:43:66:9c:
                    93:ee:f9:fb:d7:24:ec:ee:d7:e5:7d:b9:8a:ba:69:
                    a5:75:0c:fe:2c:d8:0a:4d:f1:5d:bd:35:96:a3:dd:
                    ac:0c:d3:11:00:c0:b4:44:5b:f3:80:37:84:ba:f7:
                    f5:a3:d9:50:ea:a6:0f:a0:4b:30:5e:ca:12:a4:d0:
                    d9:f9:44:6e:2c:29:62:94:bc:12:99:a6:92:42:d3:
                    17:91:0d:b6:7c:0a:26:6d:31:ee:14:e2:94:45:b3:
                    80:be:d4:37:b0:41:fc:c8:ad:fc:79:b3:d3:f5:20:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:0D:47:57:3E:C5:0F:94:D6:95:B0:EC:BA:F7:ED:1D:B5:ED:6A:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/000D47573EC50F94D695B0ECBAF7ED1DB5ED6A9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:d8:a1:ea:ab:83:f2:31:69:77:fc:45:ef:c8:d3:3c:1c:
         49:c8:a3:1e:57:5a:cf:7b:e4:c8:54:ec:03:87:2d:a2:db:08:
         97:46:35:5d:96:82:35:66:6b:70:15:a2:d1:e9:35:7d:7a:4b:
         30:a7:4d:cb:d9:f8:d4:e3:d9:f3:45:af:16:09:fd:47:31:c3:
         2a:9a:62:51:56:93:5b:ca:57:f8:35:cc:33:11:fb:64:1c:48:
         ab:31:be:02:9c:05:c8:3e:80:ba:27:22:8d:db:52:94:a1:4d:
         f9:39:5b:65:29:5c:ef:1f:42:a0:31:34:a2:fb:d6:27:3d:0c:
         d0:70:6e:0f:58:7f:66:85:85:0f:0a:61:12:c8:da:81:be:85:
         b9:73:c8:05:a3:44:a6:c3:28:fc:f4:cb:c4:e5:50:70:96:45:
         4b:07:88:63:51:26:43:24:33:f2:13:9e:a2:7a:98:fa:f0:5d:
         74:92:30:bf:d1:ed:03:68:34:ac:86:e7:c9:14:6c:3e:4f:a4:
         d7:10:86:bb:e4:f6:5d:4b:7d:78:86:e1:12:9c:da:b2:de:ec:
         fd:82:41:ef:3b:a6:21:9b:58:7b:fc:18:7c:91:54:6d:5c:46:
         16:f1:47:db:ae:bb:19:bf:7a:61:0b:5e:2e:87:24:a4:6d:c0:
         76:8a:a2:3b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSxnhnudp3N8rQLssy+Y9L4u5pMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDYxODU5NDNaFw0yNTExMDUxOTA0NDNaMDMxMTAvBgNV
BAMTKDAwMEQ0NzU3M0VDNTBGOTRENjk1QjBFQ0JBRjdFRDFEQjVFRDZBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9L1ClivgZ+bZaE9bUYsOHco/V
i6JGZaI2Hd+vz405W7kj3K6QvIwcFXepWU+MXU4iTJqIvy3midnodygMtm9fqpv/
qby5o2PGCBPv1WPY7EKQMrB7YdXFEPGSaF7rIDWNkvCMv5rZMQDBxpQvKtWXTGEn
4gC2ILPftGsqxEPBQMRccT+EeOFfDJeApdNflh2m00NmnJPu+fvXJOzu1+V9uYq6
aaV1DP4s2ApN8V29NZaj3awM0xEAwLREW/OAN4S69/Wj2VDqpg+gSzBeyhKk0Nn5
RG4sKWKUvBKZppJC0xeRDbZ8CiZtMe4U4pRFs4C+1DewQfzIrfx5s9P1IMjvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQADUdXPsUPlNaV
sOy69+0dte1qnjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzlL
NGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc5
SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAvMDAw
RDQ3NTczRUM1MEY5NEQ2OTVCMEVDQkFGN0VEMURCNUVENkE5RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa4QMA0EAgACMAcDBQAoBFvwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaTjANBgkqhkiG9w0BAQsFAAOCAQEATSzYoeqrg/IxaXf8
Re/I0zwcScijHldaz3vkyFTsA4ctotsIl0Y1XZaCNWZrcBWi0ek1fXpLMKdNy9n4
1OPZ80WvFgn9RzHDKppiUVaTW8pX+DXMMxH7ZBxIqzG+ApwFyD6AuicijdtSlKFN
+TlbZSlc7x9CoDE0ovvWJz0M0HBuD1h/ZoWFDwphEsjagb6FuXPIBaNEpsMo/PTL
xOVQcJZFSweIY1EmQyQz8hOeonqY+vBddJIwv9HtA2g0rIbnyRRsPk+k1xCGu+T2
XUt9eIbhEpzast7s/YJB7zumIZtYe/wYfJFUbVxGFvFH2667Gb96YQteLockpG3A
doqiOw==
-----END CERTIFICATE-----
Generated at Thu Nov 7 13:09:03 2024 by rpki-client on console-fra.rpki-client.org