Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2053E115997942246CCF12C116A7D7EAF3D64BCD.cer
File:                     2053E115997942246CCF12C116A7D7EAF3D64BCD.cer (raw, json)
Hash identifier:          v5v2sbN1Bf8I2/zWkOAO3bz6VetDB3W2o1MWLIORObE=
Subject key identifier:   20:53:E1:15:99:79:42:24:6C:CF:12:C1:16:A7:D7:EA:F3:D6:4B:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C48C620A7888DD1EFCB35D447C6C1808307FCEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/2053E115997942246CCF12C116A7D7EAF3D64BCD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:41:52 +0000
Certificate not after:    Thu 03 Apr 2025 10:46:52 +0000
Subordinate resources:    AS: 269577
                          IP: 45.189.44.0/22
                          IP: 2804:66b4::/32

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:48:c6:20:a7:88:8d:d1:ef:cb:35:d4:47:c6:c1:80:83:07:fc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:41:52 2024 GMT
            Not After : Apr  3 10:46:52 2025 GMT
        Subject: CN=2053E115997942246CCF12C116A7D7EAF3D64BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:ae:5a:c9:a7:e1:63:d6:c5:6a:ea:14:dd:
                    17:c6:1d:1a:1b:4c:45:0d:61:25:62:50:54:89:d1:
                    90:f9:d6:9a:ee:7a:6e:f6:74:34:f2:ce:83:4e:d5:
                    64:d7:30:be:3b:e0:73:27:42:fc:54:9c:89:7e:47:
                    b7:b5:43:41:3d:cb:6f:19:93:14:b3:f8:77:e2:e3:
                    75:2a:a5:a5:5e:6a:a1:3c:87:ac:5e:3c:8b:1f:6d:
                    94:5a:7c:46:86:e3:de:1f:df:eb:66:52:68:da:47:
                    61:20:56:b5:b8:b2:66:a0:ae:07:7d:54:cb:74:dd:
                    f8:a7:dc:80:54:25:b5:02:59:fe:1c:da:ae:3a:7e:
                    40:99:6c:83:bd:c8:84:97:14:4e:11:25:36:d4:0c:
                    a4:87:07:3a:16:8a:82:d8:43:ac:af:44:79:94:22:
                    e7:b5:9a:14:ee:4d:46:87:23:a2:3c:79:ed:f7:8f:
                    b1:83:1c:43:7b:25:55:7e:68:4f:35:8d:74:15:c7:
                    1d:8c:bf:e2:06:5e:71:6f:a6:fa:72:0d:58:4f:ff:
                    fc:6a:cf:7e:7a:1d:de:17:3f:24:52:c8:ff:76:c2:
                    e7:bd:b0:4c:7d:6e:95:f6:e0:bd:34:4e:9b:58:ed:
                    6e:23:5d:fb:a9:86:7d:a6:e0:0f:9c:b7:a2:fe:b9:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:53:E1:15:99:79:42:24:6C:CF:12:C1:16:A7:D7:EA:F3:D6:4B:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/2053E115997942246CCF12C116A7D7EAF3D64BCD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.44.0/22
                IPv6:
                  2804:66b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269577

    Signature Algorithm: sha256WithRSAEncryption
         22:60:5d:c4:f2:a6:41:f9:9f:a3:55:4d:5f:3c:29:2c:a2:b2:
         45:7c:d4:53:75:38:eb:52:da:bd:a3:c4:32:cb:51:3d:ee:91:
         d2:7b:57:b3:74:df:96:2c:3d:a5:d7:84:21:e3:8f:e4:2f:7a:
         65:09:8b:69:cf:ba:17:78:8b:5b:62:ce:94:d1:26:c1:aa:49:
         02:73:27:61:a5:ea:e1:0b:42:96:87:b1:f6:6c:15:fc:42:ef:
         6c:7d:25:43:f7:4b:f6:5e:7b:86:34:7c:59:43:16:87:f0:18:
         be:c0:6b:6e:7a:9f:b8:17:7c:05:12:34:15:f7:13:86:6c:09:
         e3:3f:68:0a:91:1c:f7:b2:4f:c1:ca:a2:cc:26:58:d0:df:f8:
         24:ec:a9:02:35:c2:33:98:99:10:68:49:77:da:6a:9a:8a:a6:
         20:1d:b1:48:45:20:6e:a5:71:f3:8b:52:80:90:8c:e8:c0:ca:
         03:5a:42:05:b2:e7:c4:4e:6b:ad:b7:d2:01:dd:74:c2:3d:d7:
         cc:85:8b:e2:d7:ee:06:9b:e5:72:70:4c:f5:df:a3:a9:40:d5:
         df:36:59:f1:82:b2:27:6a:32:f0:c1:0b:b6:ea:96:fa:05:87:
         f6:e1:b1:c4:a9:b3:2d:f3:45:c1:fc:eb:1b:89:a0:ac:bf:68:
         d8:4f:96:f4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPEjGIKeIjdHvyzXUR8bBgIMH/OwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMDQxNTJaFw0yNTA0MDMxMDQ2NTJaMDMxMTAvBgNV
BAMTKDIwNTNFMTE1OTk3OTQyMjQ2Q0NGMTJDMTE2QTdEN0VBRjNENjRCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/K5ayafhY9bFauoU3RfGHRob
TEUNYSViUFSJ0ZD51pruem72dDTyzoNO1WTXML474HMnQvxUnIl+R7e1Q0E9y28Z
kxSz+Hfi43UqpaVeaqE8h6xePIsfbZRafEaG494f3+tmUmjaR2EgVrW4smagrgd9
VMt03fin3IBUJbUCWf4c2q46fkCZbIO9yISXFE4RJTbUDKSHBzoWioLYQ6yvRHmU
Iue1mhTuTUaHI6I8ee33j7GDHEN7JVV+aE81jXQVxx2Mv+IGXnFvpvpyDVhP//xq
z356Hd4XPyRSyP92wue9sEx9bpX24L00TptY7W4jXfuphn2m4A+ct6L+ueTfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgU+EVmXlCJGzP
EsEWp9fq89ZLzTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ01K
d2FRQ3F3TVFzcGM2NFo2bmR0aVdNdzZpZVE4cHhTeDg2dFFWWHFSc1UvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NN
SndhUUNxd01Rc3BjNjRaNm5kdGlXTXc2aWVROHB4U3g4NnRRVlhxUnNVLzEvMjA1
M0UxMTU5OTc5NDIyNDZDQ0YxMkMxMTZBN0Q3RUFGM0Q2NEJDRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb0sMA0EAgACMAcDBQAoBGa0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdCTANBgkqhkiG9w0BAQsFAAOCAQEAImBdxPKmQfmfo1VN
XzwpLKKyRXzUU3U461LavaPEMstRPe6R0ntXs3Tfliw9pdeEIeOP5C96ZQmLac+6
F3iLW2LOlNEmwapJAnMnYaXq4QtCloex9mwV/ELvbH0lQ/dL9l57hjR8WUMWh/AY
vsBrbnqfuBd8BRI0FfcThmwJ4z9oCpEc97JPwcqizCZY0N/4JOypAjXCM5iZEGhJ
d9pqmoqmIB2xSEUgbqVx84tSgJCM6MDKA1pCBbLnxE5rrbfSAd10wj3XzIWL4tfu
BpvlcnBM9d+jqUDV3zZZ8YKyJ2oy8MELtuqW+gWH9uGxxKmzLfNFwfzrG4mgrL9o
2E+W9A==
-----END CERTIFICATE-----
Generated at Thu Sep 19 18:52:22 2024 by rpki-client on console-fra.rpki-client.org