Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33F621EAC77637AE81992A914287B98250733D51.cer
File:                     33F621EAC77637AE81992A914287B98250733D51.cer (raw, json)
Hash identifier:          P5B0mAIEdUAIdf9sZfNhMl1Tmkso0mVkSTq2LoGKsho=
Subject key identifier:   33:F6:21:EA:C7:76:37:AE:81:99:2A:91:42:87:B9:82:50:73:3D:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B023215F80E49DB88416613893D06101801DBDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/33F621EAC77637AE81992A914287B98250733D51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:28:39 +0000
Certificate not after:    Thu 03 Apr 2025 09:33:39 +0000
Subordinate resources:    AS: 263584
                          IP: 177.129.136.0/21
                          IP: 2804:f68::/32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 17:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:02:32:15:f8:0e:49:db:88:41:66:13:89:3d:06:10:18:01:db:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:28:39 2024 GMT
            Not After : Apr  3 09:33:39 2025 GMT
        Subject: CN=33F621EAC77637AE81992A914287B98250733D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:be:a0:12:ad:23:2a:06:d9:44:1e:69:55:
                    a8:52:08:fa:19:76:cd:55:f6:2b:25:9a:02:1e:a6:
                    22:8f:8e:d5:b0:46:26:0d:db:fc:77:fe:d4:56:8c:
                    ba:85:87:ce:e8:7b:a4:65:e6:af:bc:b7:f4:d9:5e:
                    17:7d:bd:a8:0c:ff:57:14:7d:ec:7c:5f:0e:fa:b6:
                    53:e4:fa:07:fb:36:00:76:33:1c:4f:8b:7d:9e:8c:
                    e1:bf:48:48:a3:de:35:c5:0e:a2:f5:c9:4e:0e:02:
                    8f:c0:88:c4:c3:2f:99:ec:95:4e:e8:d2:2e:ef:6b:
                    8c:2a:80:21:51:bb:0b:80:80:e7:f4:53:e5:11:92:
                    06:f9:35:f3:33:ab:d1:72:b5:52:aa:f9:1c:b1:0a:
                    42:66:cc:54:b5:6d:f6:5a:3b:17:4d:21:8c:1b:13:
                    7d:60:06:b0:6b:e7:c6:5e:4a:b8:49:7c:df:8a:41:
                    c2:62:5a:e9:31:3a:ce:b2:67:ae:9f:c3:9e:f3:32:
                    7d:20:8b:d3:50:2f:75:6d:85:97:5f:d9:a3:1d:7d:
                    3e:10:94:7b:48:1b:c9:53:f7:ee:8f:44:46:ae:e3:
                    cc:ca:56:2b:13:64:47:b9:1a:34:5a:31:ea:22:32:
                    48:e4:07:93:3e:78:f0:ef:29:a4:f6:f7:29:fd:76:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:F6:21:EA:C7:76:37:AE:81:99:2A:91:42:87:B9:82:50:73:3D:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/33F621EAC77637AE81992A914287B98250733D51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21
                IPv6:
                  2804:f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263584

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:dc:0a:7e:f5:14:b4:fe:4f:5e:d5:0e:3d:a2:d2:e2:7b:
         9f:d9:92:15:29:b9:d2:18:4c:bb:cd:77:db:58:8c:26:1c:ab:
         73:47:54:86:dd:69:ff:8c:2c:a1:59:39:9a:fc:a5:4e:c2:04:
         fe:4c:1e:c1:be:08:b9:78:24:c6:cd:9f:88:58:df:4d:b9:2d:
         1e:d7:66:ed:95:b5:c0:8e:f8:63:55:19:be:e9:10:bb:88:71:
         ab:3f:bf:f3:ef:3d:74:f8:7b:6c:1d:14:df:77:b2:05:28:a8:
         9b:88:9e:49:f6:63:2e:fa:d7:e0:1c:bf:fa:86:3a:71:44:ae:
         86:00:72:63:2d:3a:86:4c:3c:ae:a2:cd:28:65:d2:1f:19:cd:
         5f:4f:83:98:40:9d:99:f0:a3:11:7b:00:96:ef:18:35:84:e1:
         e8:dc:cd:e3:cf:e1:16:6b:0b:0d:d3:3b:6c:db:61:01:e1:21:
         c4:8c:bb:70:0f:c5:5a:aa:37:00:03:fc:2b:3a:74:95:4f:8f:
         0b:a7:19:66:77:49:99:81:50:b1:d5:cd:39:95:85:7e:c1:31:
         50:55:2a:e3:65:26:7a:15:16:d9:a7:6e:dd:14:ce:96:ba:d7:
         6c:04:6f:d9:2e:66:70:4d:c3:33:41:c6:b6:1f:cf:f1:e0:ed:
         5c:90:8a:b3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCwIyFfgOSduIQWYTiT0GEBgB294wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwOTI4MzlaFw0yNTA0MDMwOTMzMzlaMDMxMTAvBgNV
BAMTKDMzRjYyMUVBQzc3NjM3QUU4MTk5MkE5MTQyODdCOTgyNTA3MzNENTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGor6gEq0jKgbZRB5pVahSCPoZ
ds1V9islmgIepiKPjtWwRiYN2/x3/tRWjLqFh87oe6Rl5q+8t/TZXhd9vagM/1cU
fex8Xw76tlPk+gf7NgB2MxxPi32ejOG/SEij3jXFDqL1yU4OAo/AiMTDL5nslU7o
0i7va4wqgCFRuwuAgOf0U+URkgb5NfMzq9FytVKq+RyxCkJmzFS1bfZaOxdNIYwb
E31gBrBr58ZeSrhJfN+KQcJiWukxOs6yZ66fw57zMn0gi9NQL3VthZdf2aMdfT4Q
lHtIG8lT9+6PREau48zKVisTZEe5GjRaMeoiMkjkB5M+ePDvKaT29yn9dskbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz9iHqx3Y3roGZ
KpFCh7mCUHM9UTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0tp
MnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRSQ3EvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dL
aTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzEvMzNG
NjIxRUFDNzc2MzdBRTgxOTkyQTkxNDI4N0I5ODI1MDczM0Q1MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsYGIMA0EAgACMAcDBQAoBA9oMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFoDANBgkqhkiG9w0BAQsFAAOCAQEAUw7cCn71FLT+T17V
Dj2i0uJ7n9mSFSm50hhMu81321iMJhyrc0dUht1p/4wsoVk5mvylTsIE/kwewb4I
uXgkxs2fiFjfTbktHtdm7ZW1wI74Y1UZvukQu4hxqz+/8+89dPh7bB0U33eyBSio
m4ieSfZjLvrX4By/+oY6cUSuhgByYy06hkw8rqLNKGXSHxnNX0+DmECdmfCjEXsA
lu8YNYTh6NzN48/hFmsLDdM7bNthAeEhxIy7cA/FWqo3AAP8Kzp0lU+PC6cZZndJ
mYFQsdXNOZWFfsExUFUq42UmehUW2adu3RTOlrrXbARv2S5mcE3DM0HGth/P8eDt
XJCKsw==
-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:47 2024 by rpki-client on console-fra.rpki-client.org