Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BD3EE40DABA0B97635B081F90825C8429926014.cer
File:                     1BD3EE40DABA0B97635B081F90825C8429926014.cer (raw, json)
Hash identifier:          xSkHtXojo9v3AqijM45AVfYrzMPqTtNcvMtx0trly/Q=
Subject key identifier:   1B:D3:EE:40:DA:BA:0B:97:63:5B:08:1F:90:82:5C:84:29:92:60:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6811A0843414DAF7E70C2895A392A8E94AC066F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/1BD3EE40DABA0B97635B081F90825C8429926014.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 04:14:18 +0000
Certificate not after:    Fri 04 Apr 2025 04:19:18 +0000
Subordinate resources:    AS: 271293
                          IP: 170.233.240.0/22
                          IP: 2804:793c::/32

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:11:a0:84:34:14:da:f7:e7:0c:28:95:a3:92:a8:e9:4a:c0:66:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 04:14:18 2024 GMT
            Not After : Apr  4 04:19:18 2025 GMT
        Subject: CN=1BD3EE40DABA0B97635B081F90825C8429926014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:3d:b7:0e:36:12:98:75:7d:dc:3a:0f:ce:
                    ff:38:69:4a:25:a2:0a:96:b4:49:4d:72:4b:61:7a:
                    ad:86:32:0f:47:42:a6:2b:81:01:8a:3e:8e:27:8a:
                    40:35:40:3f:c7:3b:dd:df:2f:a7:0d:26:f4:23:1f:
                    a6:c3:b4:6c:ab:37:89:1b:48:df:e2:11:5a:51:f1:
                    a2:0f:4b:1c:c4:bb:9c:cd:a7:5f:46:30:6f:c7:3a:
                    c4:a1:43:e2:e9:0d:c5:d5:29:80:f3:a9:31:33:3a:
                    60:67:df:7f:dd:72:0b:76:1b:92:c2:02:cb:73:f8:
                    5c:95:35:44:48:cd:f3:95:56:28:82:5e:e1:7d:fb:
                    e2:93:05:a1:ff:23:30:f4:8f:37:bc:6c:7e:9c:12:
                    ac:ea:fa:cc:4a:37:14:a5:9d:ad:80:ad:80:96:85:
                    0b:70:3b:0a:6d:94:66:b3:56:12:69:5f:3d:ed:25:
                    0a:90:da:ed:d3:d4:96:0b:e8:a9:61:bc:e8:5b:17:
                    2e:7a:89:3f:9c:61:26:4a:5d:3b:35:dd:d9:75:c8:
                    b7:ff:a0:08:5f:00:0c:0f:bb:e4:e3:05:e7:ab:ed:
                    3d:fa:56:17:9d:20:10:af:7f:82:ac:b5:c3:8f:45:
                    a0:10:d1:6b:f8:e9:a6:b4:21:b8:13:97:90:d8:2b:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:D3:EE:40:DA:BA:0B:97:63:5B:08:1F:90:82:5C:84:29:92:60:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/1BD3EE40DABA0B97635B081F90825C8429926014.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22
                IPv6:
                  2804:793c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271293

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:14:e1:1d:08:34:20:30:0a:bc:88:63:8c:ed:b0:e6:e1:
         fb:69:ad:31:d1:73:f9:aa:de:3e:f6:d5:89:91:6e:29:e1:96:
         c4:d3:60:0f:22:45:b7:01:16:c5:12:e7:e1:c5:bc:54:8a:6c:
         bf:2f:52:0b:70:01:ac:cd:c3:36:ff:52:60:79:c4:5c:e1:3b:
         31:77:01:45:53:f2:5c:db:ce:b5:54:f6:94:a3:ac:75:88:df:
         ad:d5:a5:4c:d7:7d:2a:53:cd:13:ae:c8:22:a3:ca:e0:eb:4a:
         3d:bb:55:cf:3f:52:37:fe:04:20:57:fe:7d:68:e7:d8:93:ec:
         15:56:4c:ad:78:2e:5e:5c:9a:3b:df:1e:2e:5e:bb:f1:85:4b:
         29:6e:bd:07:be:6a:b0:81:03:98:40:da:cf:dc:49:06:0f:8f:
         87:05:1e:8f:f4:38:fa:c2:98:0d:54:89:ea:4c:f5:4e:94:6a:
         6d:9a:42:7a:c1:b5:50:69:f8:1b:51:4a:62:c0:1b:52:b2:0d:
         3d:bb:05:0a:5c:34:a2:f7:47:dc:19:67:e1:bf:56:a9:ba:d8:
         a6:21:e6:f8:de:97:bb:ad:cb:62:15:91:62:9d:6e:fe:a0:8b:
         dc:34:b9:57:2c:0c:6c:6d:58:7a:95:5a:82:14:92:02:87:21:
         85:c4:5d:44
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUaBGghDQU2vfnDCiVo5Ko6UrAZvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDUwNDE0MThaFw0yNTA0MDQwNDE5MThaMDMxMTAvBgNV
BAMTKDFCRDNFRTQwREFCQTBCOTc2MzVCMDgxRjkwODI1Qzg0Mjk5MjYwMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pT23DjYSmHV93DoPzv84aUol
ogqWtElNcktheq2GMg9HQqYrgQGKPo4nikA1QD/HO93fL6cNJvQjH6bDtGyrN4kb
SN/iEVpR8aIPSxzEu5zNp19GMG/HOsShQ+LpDcXVKYDzqTEzOmBn33/dcgt2G5LC
Astz+FyVNURIzfOVViiCXuF9++KTBaH/IzD0jze8bH6cEqzq+sxKNxSlna2ArYCW
hQtwOwptlGazVhJpXz3tJQqQ2u3T1JYL6KlhvOhbFy56iT+cYSZKXTs13dl1yLf/
oAhfAAwPu+TjBeer7T36VhedIBCvf4KstcOPRaAQ0Wv46aa0IbgTl5DYK1BTAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb0+5A2roLl2Nb
CB+QglyEKZJgFDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBw
VGRqUDNmdlNDVHR5SllOZXVQcFRhVXIyZzIzQVVIeG80dzMyZ3VjWDgvMjCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBw
VGRqUDNmdlNDVHR5SllOZXVQcFRhVXIyZzIzQVVIeG80dzMyZ3VjWDgvMi8xQkQz
RUU0MERBQkEwQjk3NjM1QjA4MUY5MDgyNUM4NDI5OTI2MDE0Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKq6fAwDQQCAAIwBwMFACgEeTwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCO9MA0GCSqGSIb3DQEBCwUAA4IBAQCOtRThHQg0IDAKvIhj
jO2w5uH7aa0x0XP5qt4+9tWJkW4p4ZbE02APIkW3ARbFEufhxbxUimy/L1ILcAGs
zcM2/1JgecRc4TsxdwFFU/Jc2861VPaUo6x1iN+t1aVM130qU80Trsgio8rg60o9
u1XPP1I3/gQgV/59aOfYk+wVVkyteC5eXJo73x4uXrvxhUspbr0HvmqwgQOYQNrP
3EkGD4+HBR6P9Dj6wpgNVInqTPVOlGptmkJ6wbVQafgbUUpiwBtSsg09uwUKXDSi
90fcGWfhv1aputimIeb43pe7rctiFZFinW7+oIvcNLlXLAxsbVh6lVqCFJIChyGF
xF1E
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org