Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/247A04F19573C8A3741F6C3F5EC97649723FE18C.cer
File:                     247A04F19573C8A3741F6C3F5EC97649723FE18C.cer (raw, json)
Hash identifier:          g/3FaCUnnS1Wjch3rZokCPU9tbhepXlqhKNH6vQMHtc=
Subject key identifier:   24:7A:04:F1:95:73:C8:A3:74:1F:6C:3F:5E:C9:76:49:72:3F:E1:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1810AF34274BD32246E9FD0F5B879D22A609FB7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/247A04F19573C8A3741F6C3F5EC97649723FE18C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 May 2024 12:46:27 +0000
Certificate not after:    Tue 06 May 2025 12:51:27 +0000
Subordinate resources:    AS: 267518
                          IP: 201.182.124.0/22
                          IP: 2804:42ac::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 18:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:10:af:34:27:4b:d3:22:46:e9:fd:0f:5b:87:9d:22:a6:09:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 12:46:27 2024 GMT
            Not After : May  6 12:51:27 2025 GMT
        Subject: CN=247A04F19573C8A3741F6C3F5EC97649723FE18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:97:cf:3d:1a:7c:2e:92:d9:01:0b:5b:02:
                    c4:99:52:5f:47:92:33:67:12:7d:14:3f:13:4e:9d:
                    0d:9b:ae:dc:e4:4e:ba:1a:fa:aa:ad:79:cc:92:d0:
                    b0:04:b5:5a:58:08:14:88:5f:bd:d9:28:11:ef:19:
                    13:01:54:14:dc:60:a7:66:ee:99:5d:24:41:12:1f:
                    e8:4a:80:16:89:8a:12:c1:c5:c2:4e:d1:d9:71:e0:
                    08:e7:94:62:c9:72:03:b2:a2:03:00:76:fe:e0:d7:
                    c4:4a:d2:eb:07:7c:91:24:6d:b7:94:6b:6e:da:74:
                    5f:99:36:46:e7:9d:6c:f0:8a:f6:dd:93:12:1b:cb:
                    42:3d:61:20:fd:41:1c:0c:b5:d3:8d:b6:24:00:c6:
                    e7:fc:eb:2b:c4:f2:49:06:45:9b:cf:e4:cc:98:2c:
                    5b:a3:3a:5d:4b:31:6f:91:11:5f:b5:88:fb:16:df:
                    5c:15:49:39:f5:63:53:38:87:77:54:62:19:f8:60:
                    5c:e6:7d:dc:d8:82:02:14:93:73:2f:3b:72:5b:fa:
                    65:b5:29:c8:0c:b6:79:27:ec:00:99:51:a1:a0:cb:
                    60:f7:92:29:f2:51:08:4d:6f:c0:03:a8:77:b6:52:
                    d0:0c:8c:06:8e:1b:9e:56:68:ee:60:28:a3:8f:4e:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:7A:04:F1:95:73:C8:A3:74:1F:6C:3F:5E:C9:76:49:72:3F:E1:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/247A04F19573C8A3741F6C3F5EC97649723FE18C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.124.0/22
                IPv6:
                  2804:42ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267518

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:24:6d:8e:45:93:7d:3c:58:f2:84:a2:61:4c:3f:c0:1b:
         87:19:21:54:a1:30:e3:3d:3d:87:3b:1a:03:ad:18:f5:3c:68:
         3f:ef:af:a5:27:6b:93:e3:97:5a:81:1b:8d:32:9f:06:25:f4:
         29:b1:ee:ef:78:23:ac:40:88:65:2b:ea:08:92:76:68:17:15:
         44:20:1f:53:fe:56:20:d8:33:d6:a2:24:b9:19:96:3e:f4:e3:
         63:c9:cc:64:d5:6e:f6:0b:2f:c3:d6:4d:77:df:f6:e4:1a:14:
         7f:af:ef:55:e1:f6:7f:d8:bb:48:99:8c:b4:19:32:e5:4d:91:
         95:1a:ce:2b:77:d8:04:9b:66:ef:04:72:99:35:02:04:c3:4b:
         69:ee:d0:00:aa:c2:fc:ba:91:96:b3:7a:ca:f3:c3:1b:e7:b4:
         0e:70:4c:22:ac:0b:87:89:ab:f3:c0:4e:73:5d:2f:8e:65:21:
         69:09:c0:f9:d1:50:7b:ba:65:ba:00:1a:3d:c3:49:71:cd:24:
         d3:bd:02:eb:e7:92:e1:62:ae:fd:f4:2c:f3:95:c4:d5:3c:be:
         8f:76:33:3f:33:80:da:6f:7d:f9:b6:62:39:af:a7:ef:b6:0f:
         9f:ad:ce:e3:dd:65:34:eb:21:3e:1c:75:53:53:80:66:e6:15:
         41:7e:88:46
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGBCvNCdL0yJG6f0PW4edIqYJ+30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MDcxMjQ2MjdaFw0yNTA1MDYxMjUxMjdaMDMxMTAvBgNV
BAMTKDI0N0EwNEYxOTU3M0M4QTM3NDFGNkMzRjVFQzk3NjQ5NzIzRkUxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWnZfPPRp8LpLZAQtbAsSZUl9H
kjNnEn0UPxNOnQ2brtzkTroa+qqtecyS0LAEtVpYCBSIX73ZKBHvGRMBVBTcYKdm
7pldJEESH+hKgBaJihLBxcJO0dlx4AjnlGLJcgOyogMAdv7g18RK0usHfJEkbbeU
a27adF+ZNkbnnWzwivbdkxIby0I9YSD9QRwMtdONtiQAxuf86yvE8kkGRZvP5MyY
LFujOl1LMW+REV+1iPsW31wVSTn1Y1M4h3dUYhn4YFzmfdzYggIUk3MvO3Jb+mW1
KcgMtnkn7ACZUaGgy2D3kinyUQhNb8ADqHe2UtAMjAaOG55WaO5gKKOPTsEFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkegTxlXPIo3Qf
bD9eyXZJcj/hjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRF
eVdMTGtVYWlScXZ6R1lpZERQOHRZbnRQSEZzUEZGaU0yWkJvNWkyRGcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o0
RXlXTExrVWFpUnF2ekdZaWREUDh0WW50UEhGc1BGRmlNMlpCbzVpMkRnLzAvMjQ3
QTA0RjE5NTczQzhBMzc0MUY2QzNGNUVDOTc2NDk3MjNGRTE4Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCybZ8MA0EAgACMAcDBQAoBEKsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQU/jANBgkqhkiG9w0BAQsFAAOCAQEAVsAkbY5Fk308WPKE
omFMP8AbhxkhVKEw4z09hzsaA60Y9TxoP++vpSdrk+OXWoEbjTKfBiX0KbHu73gj
rECIZSvqCJJ2aBcVRCAfU/5WINgz1qIkuRmWPvTjY8nMZNVu9gsvw9ZNd9/25BoU
f6/vVeH2f9i7SJmMtBky5U2RlRrOK3fYBJtm7wRymTUCBMNLae7QAKrC/LqRlrN6
yvPDG+e0DnBMIqwLh4mr88BOc10vjmUhaQnA+dFQe7plugAaPcNJcc0k070C6+eS
4WKu/fQs85XE1Ty+j3YzPzOA2m99+bZiOa+n77YPn63O491lNOshPhx1U1OAZuYV
QX6IRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org