Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
File:                     1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer (raw, json)
Hash identifier:          DaOEI0AcMcXJCyLGdKP83RP8BO1sH23z5tETCvdM++4=
Subject key identifier:   1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19E8C90D1646B3FF9D8F50D7194D4AB7F74C05B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 May 2024 13:03:44 +0000
Certificate not after:    Mon 19 May 2025 13:08:44 +0000
Subordinate resources:    AS: 28287
                          AS: 262272
                          IP: 45.70.232.0/22
                          IP: 138.36.180.0/22
                          IP: 138.118.120.0/22
                          IP: 167.249.176.0/22
                          IP: 168.194.60.0/22
                          IP: 177.21.128.0/20
                          IP: 177.130.96.0/20
                          IP: 177.154.32.0/20
                          IP: 179.127.64.0/21
                          IP: 187.1.16.0/20
                          IP: 187.120.128.0/19
                          IP: 189.124.80.0/20
                          IP: 201.49.192.0/20
                          IP: 2804:1080::/32
                          IP: 2804:21f8::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 20:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:c9:0d:16:46:b3:ff:9d:8f:50:d7:19:4d:4a:b7:f7:4c:05:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 13:03:44 2024 GMT
            Not After : May 19 13:08:44 2025 GMT
        Subject: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:32:86:36:a3:5e:3f:0d:f2:18:2d:3a:ee:
                    f6:03:d4:53:7d:f1:88:3e:e8:24:a5:51:2f:c6:99:
                    f4:e5:23:ee:18:bd:d5:36:2c:a2:bd:9b:1e:4d:23:
                    3b:41:f5:dc:4e:44:52:b2:04:d0:d5:71:4d:36:cc:
                    c4:83:5a:b2:f1:4d:02:53:43:56:e3:a7:d8:59:30:
                    bf:a4:28:e4:3e:d2:23:fa:86:55:e4:0c:44:25:6e:
                    0c:ca:07:20:14:bb:92:9c:58:0a:90:eb:09:41:97:
                    88:4c:82:96:b4:b6:23:0a:d8:56:20:cc:54:dd:e4:
                    d9:f4:28:c1:09:20:b1:64:11:3b:1d:91:20:a2:61:
                    fb:62:fd:7c:ed:b4:9d:58:0c:0a:9e:40:db:eb:14:
                    b5:89:ec:72:31:39:92:6f:10:5e:f0:dd:36:4a:52:
                    56:70:9e:9e:3f:30:cd:01:ef:73:3e:b1:30:6a:82:
                    76:f1:b8:cc:c2:3b:36:54:f5:7c:99:11:e0:56:01:
                    74:d0:07:b3:65:fa:a1:ac:89:8b:01:74:14:a7:60:
                    cd:c1:8c:6f:4f:d6:a3:91:6a:48:51:28:94:0a:58:
                    c7:53:7f:07:35:bc:32:0a:43:b8:a6:ca:89:1f:2a:
                    94:92:4d:44:42:25:b1:ac:31:ad:b1:d9:9b:29:32:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.232.0/22
                  138.36.180.0/22
                  138.118.120.0/22
                  167.249.176.0/22
                  168.194.60.0/22
                  177.21.128.0/20
                  177.130.96.0/20
                  177.154.32.0/20
                  179.127.64.0/21
                  187.1.16.0/20
                  187.120.128.0/19
                  189.124.80.0/20
                  201.49.192.0/20
                IPv6:
                  2804:1080::/32
                  2804:21f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28287
                  262272

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:2d:0c:23:f2:68:70:be:6d:c4:0b:fa:20:50:08:b8:c5:
         77:34:76:59:0f:c4:a3:42:88:72:b6:f7:9d:9f:22:38:9c:b1:
         e2:9e:ca:69:f7:a9:c4:cc:5e:db:2e:88:9e:91:50:49:50:f4:
         0c:1f:17:10:b7:bd:fc:ec:22:0c:0e:0f:38:6b:aa:c4:e8:d9:
         a0:a3:ff:fc:00:70:72:fc:44:b7:03:0a:55:23:64:13:14:48:
         b2:a6:f1:38:17:16:ea:e5:d7:de:64:ef:6c:cc:e7:cd:87:e3:
         50:17:2a:82:85:eb:7c:f8:15:b8:5e:6e:b2:aa:b1:91:0a:ae:
         2c:64:39:90:08:5f:27:78:8b:a3:da:43:c8:f4:42:b4:f5:46:
         54:c9:9d:e9:ac:70:b6:91:48:72:fb:94:15:a5:70:3a:d0:21:
         77:e8:51:e0:33:b3:f9:68:c1:c3:5f:13:6b:d6:e6:98:e4:e6:
         02:6b:55:bb:3f:e2:be:05:9b:3a:27:16:2a:b4:30:20:a7:3a:
         67:2e:4f:6a:de:77:3f:78:7f:87:57:ed:a1:94:e8:bc:0b:c0:
         54:83:fc:8f:20:66:c8:ae:46:e1:3e:c3:1b:aa:9a:fa:9e:31:
         f3:76:4a:5f:57:08:09:e1:60:da:15:b5:c1:6e:a5:c5:a1:68:
         4c:20:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org