Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/019644AAEAED29967FF0AC96DCADEF592F939063.cer
File:                     019644AAEAED29967FF0AC96DCADEF592F939063.cer (raw, json)
Hash identifier:          KIBmQCvuL3cXiDRyHoC9wUcXocRvW841GWjeDbHVoik=
Subject key identifier:   01:96:44:AA:EA:ED:29:96:7F:F0:AC:96:DC:AD:EF:59:2F:93:90:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7588A7B8041A74CF0CE373FD8271074DB5BE58E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/019644AAEAED29967FF0AC96DCADEF592F939063.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:34:42 +0000
Certificate not after:    Thu 03 Apr 2025 16:39:42 +0000
Subordinate resources:    AS: 267249
                          IP: 45.232.56.0/22
                          IP: 2804:4a90::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:a7:b8:04:1a:74:cf:0c:e3:73:fd:82:71:07:4d:b5:be:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:34:42 2024 GMT
            Not After : Apr  3 16:39:42 2025 GMT
        Subject: CN=019644AAEAED29967FF0AC96DCADEF592F939063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:0b:e7:88:e3:f5:89:b2:42:e6:ea:5f:88:
                    68:ee:28:73:8f:7e:77:ba:62:18:d4:db:45:bd:2b:
                    df:df:5d:2a:1a:67:15:3c:02:b6:13:91:ac:e6:ad:
                    d1:f8:1e:d2:57:42:95:5f:79:fc:68:36:4a:2b:ee:
                    c5:ad:cd:54:ac:ec:5c:19:a2:e0:cb:3b:74:64:78:
                    d2:d0:99:28:4b:97:f6:5d:69:01:64:19:94:b4:ec:
                    48:57:b1:b1:da:16:15:ca:39:61:03:6c:bd:28:d0:
                    49:61:74:b8:b7:ac:c8:d5:71:2e:87:c8:f1:a8:db:
                    03:ee:d7:c2:75:b9:30:ff:a0:4f:ac:73:69:11:60:
                    e2:64:02:e4:01:3d:33:2a:55:7f:6f:fe:9f:50:88:
                    0e:62:00:46:7c:b3:12:10:fe:7e:cb:65:56:f6:8e:
                    95:9a:96:c8:1e:42:1a:5d:60:e2:1c:1d:95:9f:76:
                    5e:f4:72:24:eb:12:ba:b7:7c:ae:0b:05:8e:13:bf:
                    e6:53:7b:e7:51:36:b7:ca:01:50:3b:b3:6f:69:c3:
                    ad:4c:b0:bc:74:83:ec:73:66:30:ed:83:58:13:11:
                    34:d3:ea:46:5d:f4:6b:3f:8d:c3:8c:46:17:d6:1f:
                    90:72:2a:9a:c1:3c:77:ca:48:44:39:5d:27:db:1f:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:96:44:AA:EA:ED:29:96:7F:F0:AC:96:DC:AD:EF:59:2F:93:90:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/019644AAEAED29967FF0AC96DCADEF592F939063.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/22
                IPv6:
                  2804:4a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267249

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:c7:74:91:b3:d7:0c:60:4a:77:b3:75:42:b0:89:d4:4d:
         80:8b:f4:0b:5a:56:e3:54:31:e3:dd:1b:97:cf:8b:f9:8e:01:
         33:a5:56:62:0d:15:60:d2:54:b6:13:ae:f8:7c:0d:ab:83:28:
         a3:5d:ef:94:be:86:c0:a1:29:d2:4a:78:91:c4:82:ed:d4:b6:
         49:90:d8:fa:15:62:2a:a3:78:a4:d4:cd:3d:d3:26:df:58:70:
         bd:20:ab:b3:42:ac:72:1f:52:fa:be:75:7c:35:45:3b:7c:df:
         f6:fe:b9:f8:d5:85:0a:3e:db:fd:6f:1b:c0:fb:d1:fc:0f:fb:
         95:56:cb:0f:d9:3c:3f:16:b3:b4:c9:38:75:eb:53:ae:73:13:
         d2:e0:d4:92:b4:cb:0e:2b:f9:dd:d0:77:ad:03:5e:cd:2b:21:
         22:5c:8d:43:a5:e0:75:e0:bc:e7:fc:b1:88:da:29:d1:1b:3c:
         ae:42:b7:24:da:15:8f:ce:8c:36:1b:18:f4:f0:1a:5b:28:98:
         14:9a:6e:d7:d4:6b:4d:3b:99:53:81:85:4f:1c:a7:ac:e5:f7:
         0d:a4:b5:05:e6:10:3b:f7:dc:8e:6d:05:51:e3:c2:5d:dc:56:
         3e:a1:54:d1:7f:e7:e3:ec:99:21:7b:b3:5d:c4:09:81:d4:60:
         bc:61:42:f3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdYinuAQadM8M43P9gnEHTbW+WOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNjM0NDJaFw0yNTA0MDMxNjM5NDJaMDMxMTAvBgNV
BAMTKDAxOTY0NEFBRUFFRDI5OTY3RkYwQUM5NkRDQURFRjU5MkY5MzkwNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85wvniOP1ibJC5upfiGjuKHOP
fne6YhjU20W9K9/fXSoaZxU8ArYTkazmrdH4HtJXQpVfefxoNkor7sWtzVSs7FwZ
ouDLO3RkeNLQmShLl/ZdaQFkGZS07EhXsbHaFhXKOWEDbL0o0ElhdLi3rMjVcS6H
yPGo2wPu18J1uTD/oE+sc2kRYOJkAuQBPTMqVX9v/p9QiA5iAEZ8sxIQ/n7LZVb2
jpWalsgeQhpdYOIcHZWfdl70ciTrErq3fK4LBY4Tv+ZTe+dRNrfKAVA7s29pw61M
sLx0g+xzZjDtg1gTETTT6kZd9Gs/jcOMRhfWH5ByKprBPHfKSEQ5XSfbH9O/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBlkSq6u0pln/w
rJbcre9ZL5OQYzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGtt
b2lxN2hINFF0YXJLTmtZTU5UdVVMamJLYTdoNzFqdnJmV3l1RzY1NlUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rr
bW9pcTdoSDRRdGFyS05rWU1OVHVVTGpiS2E3aDcxanZyZld5dUc2NTZVLzEvMDE5
NjQ0QUFFQUVEMjk5NjdGRjBBQzk2RENBREVGNTkyRjkzOTA2My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeg4MA0EAgACMAcDBQAoBEqQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQT8TANBgkqhkiG9w0BAQsFAAOCAQEADN/HdJGz1wxgSnez
dUKwidRNgIv0C1pW41Qx490bl8+L+Y4BM6VWYg0VYNJUthOu+HwNq4Moo13vlL6G
wKEp0kp4kcSC7dS2SZDY+hViKqN4pNTNPdMm31hwvSCrs0Ksch9S+r51fDVFO3zf
9v65+NWFCj7b/W8bwPvR/A/7lVbLD9k8PxaztMk4detTrnMT0uDUkrTLDiv53dB3
rQNezSshIlyNQ6XgdeC85/yxiNop0Rs8rkK3JNoVj86MNhsY9PAaWyiYFJpu19Rr
TTuZU4GFTxynrOX3DaS1BeYQO/fcjm0FUePCXdxWPqFU0X/n4+yZIXuzXcQJgdRg
vGFC8w==
-----END CERTIFICATE-----
Generated at Mon Jul 15 09:06:52 2024 by rpki-client on console-ams.rpki-client.org