Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
File:                     21846FD68091A2016CCF764693C6904AC8FF62A9.cer (raw, json)
Hash identifier:          MeAqgIaqP/nQyjxiuMiukXB3yX5/AG9T86ildILLZ0c=
Subject key identifier:   21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       38428797E346B0EA6DDAD9DAA307BC9DFCC8FB1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2024 17:28:26 +0000
Certificate not after:    Mon 28 Jul 2025 17:33:26 +0000
Subordinate resources:    AS: 266948
                          IP: 45.225.192.0/22
                          IP: 2804:45c4::/32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 23:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:87:97:e3:46:b0:ea:6d:da:d9:da:a3:07:bc:9d:fc:c8:fb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 17:28:26 2024 GMT
            Not After : Jul 28 17:33:26 2025 GMT
        Subject: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:d4:88:91:4e:73:4d:62:a3:d5:f4:0e:40:
                    3d:99:0d:bb:96:f8:25:ca:80:31:75:b0:15:78:92:
                    f6:08:0e:e5:15:a7:fb:f1:ac:9d:4d:24:5a:14:59:
                    d2:cd:1f:b0:1e:06:58:97:7d:43:3f:9e:60:58:ad:
                    d2:15:5d:43:69:07:f6:79:56:62:3d:17:29:39:5b:
                    2e:67:87:b5:f9:9b:0f:dd:c8:83:bb:67:b5:f2:16:
                    f3:32:56:b9:fa:94:ce:4a:64:e8:55:2f:28:00:a5:
                    91:79:b6:8c:ef:3a:a6:65:78:1b:d6:7d:ac:5f:98:
                    75:03:0c:33:b6:3a:f5:28:cc:fd:b0:24:b5:b1:71:
                    77:19:a3:c8:df:62:fe:88:1b:38:76:22:44:92:50:
                    34:75:e2:57:fe:e5:0a:4b:9a:68:b3:46:fe:c4:9c:
                    4f:5b:a2:a8:b3:55:7d:7d:d2:53:7a:df:bb:e6:8b:
                    26:c3:1d:95:81:ec:4f:d5:77:73:49:32:c1:17:60:
                    df:d2:62:4d:e5:dc:d8:b5:51:2a:51:9b:75:dc:f6:
                    11:d5:9f:e1:61:64:f2:70:8b:b8:0f:81:e7:01:3e:
                    06:b6:e3:16:08:b7:bb:b2:0a:cc:6d:60:ff:a1:12:
                    9d:53:df:4d:ad:a1:80:22:41:c6:6b:28:95:a2:f1:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/22
                IPv6:
                  2804:45c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266948

    Signature Algorithm: sha256WithRSAEncryption
         dc:77:35:6d:0f:ca:87:32:b5:36:24:77:da:53:d4:cb:ad:7c:
         fb:90:f2:dc:7c:99:40:b2:3f:63:21:05:44:f8:40:16:da:65:
         0f:49:03:08:1b:8e:cf:c5:27:7d:1b:91:73:94:24:7a:64:d0:
         61:3d:c5:35:02:1c:7e:ac:a6:98:d8:5f:48:d0:b1:10:2f:56:
         3d:b4:dd:93:34:ae:cd:63:e4:7b:9c:4f:95:05:a7:6a:43:41:
         1e:ab:32:29:11:2e:67:10:51:b4:cd:fa:f2:76:0a:35:6e:5f:
         85:7f:1b:54:5e:65:dd:f9:5e:93:68:eb:12:70:f2:7d:c6:16:
         99:65:29:f4:fd:72:1f:c5:df:76:0c:a9:52:ff:fb:74:b1:27:
         14:6b:62:1d:d9:da:db:c6:9d:5c:2b:c3:a0:48:de:c2:93:f4:
         13:72:7c:e9:42:1a:d2:02:cd:1b:b5:d9:ed:2a:38:ee:66:37:
         47:d8:67:f1:3b:71:67:d3:f3:de:ae:3d:18:1d:b1:3e:d2:22:
         3b:76:fc:4e:03:f7:cf:81:db:71:81:bc:25:73:9e:c4:b0:19:
         25:f3:88:3d:04:c3:cf:b0:42:58:20:fb:95:58:1f:22:8c:59:
         66:c9:a2:05:01:3e:1f:a7:74:9c:49:35:a4:4f:50:63:c4:1a:
         0a:91:2d:6b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOEKHl+NGsOpt2tnaowe8nfzI+x0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjkxNzI4MjZaFw0yNTA3MjgxNzMzMjZaMDMxMTAvBgNV
BAMTKDIxODQ2RkQ2ODA5MUEyMDE2Q0NGNzY0NjkzQzY5MDRBQzhGRjYyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPY9SIkU5zTWKj1fQOQD2ZDbuW
+CXKgDF1sBV4kvYIDuUVp/vxrJ1NJFoUWdLNH7AeBliXfUM/nmBYrdIVXUNpB/Z5
VmI9Fyk5Wy5nh7X5mw/dyIO7Z7XyFvMyVrn6lM5KZOhVLygApZF5tozvOqZleBvW
faxfmHUDDDO2OvUozP2wJLWxcXcZo8jfYv6IGzh2IkSSUDR14lf+5QpLmmizRv7E
nE9boqizVX190lN637vmiybDHZWB7E/Vd3NJMsEXYN/SYk3l3Ni1USpRm3Xc9hHV
n+FhZPJwi7gPgecBPga24xYIt7uyCsxtYP+hEp1T302toYAiQcZrKJWi8T8RAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhhG/WgJGiAWzP
dkaTxpBKyP9iqTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnVK
YzQyb2lWTXBqTkg4NU13RzNtcTk1VXVhRG9jaFhHMzhiWm5NdG1jWkgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z1
SmM0Mm9pVk1wak5IODVNd0czbXE5NVV1YURvY2hYRzM4YlpuTXRtY1pILzAvMjE4
NDZGRDY4MDkxQTIwMTZDQ0Y3NjQ2OTNDNjkwNEFDOEZGNjJBOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeHAMA0EAgACMAcDBQAoBEXEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQSxDANBgkqhkiG9w0BAQsFAAOCAQEA3Hc1bQ/KhzK1NiR3
2lPUy618+5Dy3HyZQLI/YyEFRPhAFtplD0kDCBuOz8UnfRuRc5QkemTQYT3FNQIc
fqymmNhfSNCxEC9WPbTdkzSuzWPke5xPlQWnakNBHqsyKREuZxBRtM368nYKNW5f
hX8bVF5l3flek2jrEnDyfcYWmWUp9P1yH8XfdgypUv/7dLEnFGtiHdna28adXCvD
oEjewpP0E3J86UIa0gLNG7XZ7So47mY3R9hn8TtxZ9Pz3q49GB2xPtIiO3b8TgP3
z4HbcYG8JXOexLAZJfOIPQTDz7BCWCD7lVgfIoxZZsmiBQE+H6d0nEk1pE9QY8Qa
CpEtaw==
-----END CERTIFICATE-----
Generated at Tue Oct 8 05:01:27 2024 by rpki-client on console-ams.rpki-client.org