Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer
File:                     130888861C156DEDFFE5F171F7DBBCF43993D81C.cer (raw, json)
Hash identifier:          0Qpg1JU/CofRvnRY78nmQepAxXRMOtNMNnxCV8W15uU=
Subject key identifier:   13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03E9360310C1C0785BFF1E1198417FFDA9BDCDDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:50 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:50 +0000
Subordinate resources:    AS: 268303
                          IP: 45.237.212.0/22
                          IP: 2804:4f18::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 04:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e9:36:03:10:c1:c0:78:5b:ff:1e:11:98:41:7f:fd:a9:bd:cd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:d7:c9:6b:bd:fa:d3:ba:2c:ee:fd:f3:84:
                    76:66:a4:79:60:7d:33:7c:12:a6:a0:37:74:61:99:
                    2c:e9:d2:03:48:60:68:2e:cd:16:e8:24:24:f0:52:
                    74:6f:85:37:4f:e7:11:5c:33:eb:5a:84:31:87:be:
                    3b:3d:d3:83:32:fd:fa:02:a5:10:98:f1:63:05:b8:
                    fa:23:84:a4:e2:09:d5:34:a6:1f:00:ef:21:0f:b5:
                    25:e4:23:67:df:6d:39:bd:de:0b:f4:05:70:e4:07:
                    95:fb:e3:b8:0e:5c:be:f1:58:ac:7b:15:c4:e7:8a:
                    d5:94:9d:67:fd:a2:af:16:3b:82:20:4f:f5:59:60:
                    1b:2c:6d:83:ef:18:51:f7:ed:5b:36:ea:e8:3c:b7:
                    a8:2d:28:b2:f3:64:b5:2f:4d:ed:03:df:b3:29:f0:
                    56:47:5c:c1:65:54:5d:4e:75:7f:96:3a:36:27:e7:
                    b6:e6:b8:1a:bc:f6:dc:a8:ed:23:08:5c:8b:ab:1e:
                    c2:9b:c8:d5:ba:0f:d4:b2:0e:87:1d:d9:da:bc:e8:
                    b4:03:77:f8:6f:e3:7e:49:89:97:b1:ca:3e:eb:a4:
                    01:3f:2b:3c:fc:5b:c2:50:1e:3a:08:e9:b8:b5:a4:
                    11:d9:96:50:1c:67:3e:8b:62:70:af:e0:88:c2:8a:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22
                IPv6:
                  2804:4f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268303

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:9a:59:a5:04:81:ff:4c:55:fc:b7:f1:18:f9:52:73:d9:
         46:1a:c1:92:d5:13:bc:b6:5c:61:df:4f:2e:68:45:b2:b7:c7:
         74:2b:52:53:0f:9e:cb:98:f9:68:53:ea:44:90:cf:34:d6:50:
         f5:32:57:01:b5:3e:31:43:19:ad:67:7b:55:ce:eb:68:cf:b4:
         56:26:3b:0e:ba:52:74:01:59:49:ea:5e:88:ba:c0:5f:6c:af:
         92:2d:a2:23:4b:28:89:e7:71:23:fe:2e:2d:4f:48:b8:57:e5:
         e6:fc:35:16:d5:70:b0:37:93:95:89:dd:46:0d:59:7e:22:64:
         cc:86:84:d1:ca:98:7d:38:9f:0c:2c:ab:36:d6:e5:b7:11:97:
         6a:cd:f9:40:2c:40:09:57:ab:3e:b8:ee:ff:3e:1b:e9:e3:fc:
         ea:3e:8f:94:12:94:63:2d:83:4b:bb:be:74:0b:4e:d8:98:0a:
         6c:05:ec:06:c7:fd:fb:6a:57:40:1a:4d:98:51:6b:f8:52:d9:
         ed:c7:77:fa:07:29:8c:8a:f7:a6:c2:aa:e5:28:0f:4a:4a:32:
         a1:24:6d:86:42:38:b3:18:db:55:6e:a7:c7:de:8a:6f:70:54:
         05:2a:f9:2d:cf:70:34:ec:b9:81:07:37:34:f0:24:12:21:db:
         e3:5d:b9:c5
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUA+k2AxDBwHhb/x4RmEF//am9zdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1NTBaFw0yNTA0MDIxODMwNTBaMDMxMTAvBgNV
BAMTKDEzMDg4ODg2MUMxNTZERURGRkU1RjE3MUY3REJCQ0Y0Mzk5M0Q4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+9fJa73607os7v3zhHZmpHlg
fTN8EqagN3RhmSzp0gNIYGguzRboJCTwUnRvhTdP5xFcM+tahDGHvjs904My/foC
pRCY8WMFuPojhKTiCdU0ph8A7yEPtSXkI2ffbTm93gv0BXDkB5X747gOXL7xWKx7
FcTnitWUnWf9oq8WO4IgT/VZYBssbYPvGFH37Vs26ug8t6gtKLLzZLUvTe0D37Mp
8FZHXMFlVF1OdX+WOjYn57bmuBq89tyo7SMIXIurHsKbyNW6D9SyDocd2dq86LQD
d/hv435JiZexyj7rpAE/Kzz8W8JQHjoI6bi1pBHZllAcZz6LYnCv4IjCiqWLAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTCIiGHBVt7f/l
8XH327z0OZPYHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhH
NU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQa2IvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhH
NU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQa2IvMS8xMzA4
ODg4NjFDMTU2REVERkZFNUYxNzFGN0RCQkNGNDM5OTNEODFDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt7dQwDQQCAAIwBwMFACgETxgwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBgPMA0GCSqGSIb3DQEBCwUAA4IBAQCW5ZpZpQSB/0xV/Lfx
GPlSc9lGGsGS1RO8tlxh308uaEWyt8d0K1JTD57LmPloU+pEkM801lD1MlcBtT4x
QxmtZ3tVzutoz7RWJjsOulJ0AVlJ6l6IusBfbK+SLaIjSyiJ53Ej/i4tT0i4V+Xm
/DUW1XCwN5OVid1GDVl+ImTMhoTRyph9OJ8MLKs21uW3EZdqzflALEAJV6s+uO7/
Phvp4/zqPo+UEpRjLYNLu750C07YmApsBewGx/37aldAGk2YUWv4Utntx3f6BymM
ivemwqrlKA9KSjKhJG2GQjizGNtVbqfH3opvcFQFKvktz3A07LmBBzc08CQSIdvj
XbnF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org