Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer
File:                     34BD768B65C97BD03F40D833E018BBE743046FE2.cer (raw, json)
Hash identifier:          tAuWcDrJCvK860MK9GYG+qEy99kbFRgqFvkj2KjZIAA=
Subject key identifier:   34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6485FE2FA959F9D64681FA4AC6FFE7D7A5699183
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/34BD768B65C97BD03F40D833E018BBE743046FE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 01:06:05 +0000
Certificate not after:    Fri 04 Apr 2025 01:11:05 +0000
Subordinate resources:    AS: 28300
                          IP: 177.223.160.0/19
                          IP: 179.97.224.0/19
                          IP: 179.107.160.0/19
                          IP: 189.28.160.0/20
                          IP: 2804:2ac::/32

Validation:               Failed, certificate revoked on Mon 27 May 2024 00:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:85:fe:2f:a9:59:f9:d6:46:81:fa:4a:c6:ff:e7:d7:a5:69:91:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 01:06:05 2024 GMT
            Not After : Apr  4 01:11:05 2025 GMT
        Subject: CN=34BD768B65C97BD03F40D833E018BBE743046FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:18:b8:48:e6:2d:9b:3c:52:bf:70:ed:27:
                    77:ab:eb:a7:77:1e:ec:77:64:86:f9:47:a7:2d:05:
                    e3:59:1d:6a:33:e4:46:f9:b8:a5:47:d4:52:a0:27:
                    b4:64:2a:f5:bb:d3:90:78:f7:94:24:92:59:3a:07:
                    5b:b0:22:1c:2e:9a:ef:83:27:d0:cb:a4:51:ef:c5:
                    e2:63:fd:8f:8e:e1:18:57:b8:04:04:2e:8a:fc:56:
                    98:7c:7a:1d:65:16:32:3e:d7:52:d2:5c:52:39:fa:
                    79:68:78:75:3a:2c:52:82:51:cb:75:cb:83:30:81:
                    ef:ca:0d:b5:83:ad:45:9f:6f:6a:30:06:af:cb:fe:
                    43:1a:b8:02:be:4f:8f:0f:5a:20:84:ed:3c:cc:35:
                    70:b6:30:a7:de:ec:ee:af:5c:7c:8b:3d:b1:fd:bc:
                    80:a5:3a:91:c8:f4:b1:19:c2:cb:4a:31:ca:67:1d:
                    93:43:0b:fe:2d:6f:61:28:01:5b:91:00:57:79:f4:
                    d3:3e:d8:84:a2:69:49:e4:09:8c:99:f2:c3:4a:a6:
                    44:cf:85:9e:ef:a0:76:08:ac:ec:70:74:96:9b:ad:
                    5a:6d:0f:39:b4:ab:48:94:a1:a4:26:f7:a3:ca:da:
                    3b:8e:22:52:c1:da:77:fd:12:54:d2:bf:43:ca:76:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/34BD768B65C97BD03F40D833E018BBE743046FE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.160.0/19
                  179.97.224.0/19
                  179.107.160.0/19
                  189.28.160.0/20
                IPv6:
                  2804:2ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28300

    Signature Algorithm: sha256WithRSAEncryption
         41:42:b8:a5:91:4d:9c:48:72:c8:70:b4:f9:27:91:4d:81:56:
         00:6a:bc:6b:a7:94:a8:9e:03:b4:a6:c3:8c:f1:ba:ea:10:7e:
         5d:71:43:e9:23:1e:87:6d:56:2b:ff:2e:1f:a8:50:44:f0:be:
         d6:b5:d1:c4:62:f0:0c:82:27:da:24:59:3e:40:03:69:72:b9:
         dc:98:03:19:41:6a:d2:fd:d3:41:31:14:01:26:42:23:e1:95:
         d3:61:30:07:e5:37:f7:63:fc:ec:7f:5a:60:8c:bc:f4:ca:45:
         2f:ab:9f:5d:1b:de:e5:74:2c:35:bc:1d:43:89:9c:71:bc:2c:
         68:45:e7:fd:40:3e:b0:98:1c:31:06:2f:a8:5f:3a:16:2a:76:
         de:85:05:42:6d:ad:5c:e6:2b:c4:81:38:b9:36:10:40:67:05:
         86:c5:dc:ab:57:c9:eb:54:79:97:78:65:cc:95:9a:01:93:03:
         f4:94:1f:3d:b3:5d:ca:60:d8:41:c3:45:ce:9a:99:5e:85:58:
         dc:41:55:3e:04:2f:56:92:82:4b:c2:40:5b:cf:3b:76:27:ef:
         df:fe:a2:50:8e:5a:8b:c0:bf:6e:6c:22:53:0f:56:f9:5e:b9:
         5e:10:0f:3f:23:90:3d:bd:1c:c8:12:25:ef:b9:96:f3:f3:2a:
         1c:79:af:50
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUZIX+L6lZ+dZGgfpKxv/n16VpkYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDUwMTA2MDVaFw0yNTA0MDQwMTExMDVaMDMxMTAvBgNV
BAMTKDM0QkQ3NjhCNjVDOTdCRDAzRjQwRDgzM0UwMThCQkU3NDMwNDZGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZhi4SOYtmzxSv3DtJ3er66d3
Hux3ZIb5R6ctBeNZHWoz5Eb5uKVH1FKgJ7RkKvW705B495Qkklk6B1uwIhwumu+D
J9DLpFHvxeJj/Y+O4RhXuAQELor8Vph8eh1lFjI+11LSXFI5+nloeHU6LFKCUct1
y4Mwge/KDbWDrUWfb2owBq/L/kMauAK+T48PWiCE7TzMNXC2MKfe7O6vXHyLPbH9
vIClOpHI9LEZwstKMcpnHZNDC/4tb2EoAVuRAFd59NM+2ISiaUnkCYyZ8sNKpkTP
hZ7voHYIrOxwdJabrVptDzm0q0iUoaQm96PK2juOIlLB2nf9ElTSv0PKdlKJAgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0vXaLZcl70D9A
2DPgGLvnQwRv4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXpT
TmplR3dIeFlaMTd6ajZkVHd5d2pnSFZNSnlKYnhINERzWGZUeU1leXkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl6
U05qZUd3SHhZWjE3emo2ZFR3eXdqZ0hWTUp5SmJ4SDREc1hmVHlNZXl5LzEvMzRC
RDc2OEI2NUM5N0JEMDNGNDBEODMzRTAxOEJCRTc0MzA0NkZFMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQFsd+gAwQFs2HgAwQFs2ugAwQEvRygMA0EAgACMAcD
BQAoBAKsMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm6MMA0GCSqGSIb3DQEBCwUA
A4IBAQBBQrilkU2cSHLIcLT5J5FNgVYAarxrp5SongO0psOM8brqEH5dcUPpIx6H
bVYr/y4fqFBE8L7WtdHEYvAMgifaJFk+QANpcrncmAMZQWrS/dNBMRQBJkIj4ZXT
YTAH5Tf3Y/zsf1pgjLz0ykUvq59dG97ldCw1vB1DiZxxvCxoRef9QD6wmBwxBi+o
XzoWKnbehQVCba1c5ivEgTi5NhBAZwWGxdyrV8nrVHmXeGXMlZoBkwP0lB89s13K
YNhBw0XOmplehVjcQVU+BC9WkoJLwkBbzzt2J+/f/qJQjlqLwL9ubCJTD1b5Xrle
EA8/I5A9vRzIEiXvuZbz8yocea9Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org