Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/34F7C2EDB9080DF9CB8169035529045BE14FC6EF.cer
File:                     34F7C2EDB9080DF9CB8169035529045BE14FC6EF.cer (raw, json)
Hash identifier:          6exLIMNIv9AROjyWQCrfD0067GBMQDmgtS8NINeh81k=
Subject key identifier:   34:F7:C2:ED:B9:08:0D:F9:CB:81:69:03:55:29:04:5B:E1:4F:C6:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B0661B2BFB55D3572A8D04C1378589051746004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34F7C2EDB9080DF9CB8169035529045BE14FC6EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jun 2024 13:38:22 +0000
Certificate not after:    Fri 27 Jun 2025 13:43:22 +0000
Subordinate resources:    AS: 267027
                          IP: 45.227.168.0/22
                          IP: 2804:4708::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 19:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:06:61:b2:bf:b5:5d:35:72:a8:d0:4c:13:78:58:90:51:74:60:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 28 13:38:22 2024 GMT
            Not After : Jun 27 13:43:22 2025 GMT
        Subject: CN=34F7C2EDB9080DF9CB8169035529045BE14FC6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:35:6e:8d:d4:e6:73:42:21:2c:48:f3:5d:
                    58:5a:9a:35:5a:60:39:65:c9:d1:00:2c:f0:70:b2:
                    16:bf:fc:e7:00:b0:bc:dc:88:31:51:51:3e:42:6f:
                    35:cc:6d:05:27:fb:44:30:56:fe:69:a7:ef:b4:73:
                    12:d1:9c:78:1f:a4:d2:44:e5:8c:1e:14:27:b5:12:
                    d6:56:d6:3b:f8:3b:4e:85:0f:f4:9b:58:e8:55:e9:
                    24:ab:d1:45:d2:ed:57:34:19:96:f4:1e:52:65:06:
                    e9:88:67:70:41:95:a6:74:0a:e6:a4:57:0e:39:e6:
                    8d:49:1a:17:ea:7a:48:59:fa:d7:0e:2e:2a:7a:88:
                    03:d5:1c:ff:80:f7:56:23:7c:db:1e:43:bc:d4:de:
                    fb:67:1e:24:07:75:e9:84:93:13:7c:03:04:76:6b:
                    34:fc:12:3e:e1:5d:85:10:4f:0a:1a:cd:cd:41:71:
                    82:e0:89:f8:92:ca:5d:79:db:48:22:e4:dc:2b:e0:
                    ba:87:bf:a5:68:6c:ff:9c:af:f1:ad:c1:02:74:6a:
                    f2:f9:c0:cb:6d:19:e4:58:8f:a4:1a:c7:87:83:6d:
                    6c:f9:fb:2a:b9:08:1f:7d:60:11:ce:55:06:e6:31:
                    60:a0:21:62:9b:99:cf:53:7c:cc:3a:0a:22:f1:94:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:F7:C2:ED:B9:08:0D:F9:CB:81:69:03:55:29:04:5B:E1:4F:C6:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34F7C2EDB9080DF9CB8169035529045BE14FC6EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/22
                IPv6:
                  2804:4708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267027

    Signature Algorithm: sha256WithRSAEncryption
         31:85:11:fe:be:82:19:3a:b5:2d:5a:6c:91:5b:ab:d4:61:5b:
         8a:e4:eb:94:ed:4d:76:a4:11:e8:96:4a:00:64:e9:65:13:09:
         a5:22:5d:a8:2f:b7:70:25:7e:3f:01:6c:69:5d:28:6b:77:4b:
         f8:f6:64:d5:7f:17:27:3a:a4:f1:07:1c:a9:1d:a1:d5:42:a4:
         a5:8f:1d:a5:7e:2d:ca:56:3e:64:15:b3:ce:46:82:dd:24:92:
         85:29:8b:94:15:26:e4:cb:b7:ec:2e:20:ac:23:2a:4b:80:0d:
         4a:c6:33:9d:45:d3:13:e9:3f:74:a4:02:a4:10:47:4a:10:9e:
         6c:5a:3d:f3:76:bd:bf:5f:3f:3b:c9:a9:b8:d3:3f:65:75:79:
         e3:7f:a3:14:61:de:f3:1e:17:99:4a:08:5e:b2:a1:7d:3c:e2:
         97:ae:b1:db:15:0c:fd:7e:65:c1:ce:84:a7:4d:4c:0a:2a:0f:
         5d:a6:2c:cb:27:2a:12:ff:32:94:c1:f3:18:57:f3:f1:b8:02:
         f5:91:f1:da:94:f8:b3:a8:cf:ad:2c:c3:17:85:38:22:7c:15:
         10:22:33:0e:17:41:e1:8b:9a:f0:4d:ab:7f:ce:c8:57:4f:62:
         79:03:65:17:8d:67:d7:34:b8:0f:1f:a6:cc:aa:ca:6e:b5:23:
         df:31:71:c4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUewZhsr+1XTVyqNBME3hYkFF0YAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjgxMzM4MjJaFw0yNTA2MjcxMzQzMjJaMDMxMTAvBgNV
BAMTKDM0RjdDMkVEQjkwODBERjlDQjgxNjkwMzU1MjkwNDVCRTE0RkM2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ijVujdTmc0IhLEjzXVhamjVa
YDllydEALPBwsha//OcAsLzciDFRUT5CbzXMbQUn+0QwVv5pp++0cxLRnHgfpNJE
5YweFCe1EtZW1jv4O06FD/SbWOhV6SSr0UXS7Vc0GZb0HlJlBumIZ3BBlaZ0Cuak
Vw455o1JGhfqekhZ+tcOLip6iAPVHP+A91YjfNseQ7zU3vtnHiQHdemEkxN8AwR2
azT8Ej7hXYUQTwoazc1BcYLgifiSyl1520gi5Nwr4LqHv6VobP+cr/GtwQJ0avL5
wMttGeRYj6Qax4eDbWz5+yq5CB99YBHOVQbmMWCgIWKbmc9TfMw6CiLxlEx3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ098LtuQgN+cuB
aQNVKQRb4U/G7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXV1
RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RKWXovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1
dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAvMzRG
N0MyRURCOTA4MERGOUNCODE2OTAzNTUyOTA0NUJFMTRGQzZFRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeOoMA0EAgACMAcDBQAoBEcIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTEzANBgkqhkiG9w0BAQsFAAOCAQEAMYUR/r6CGTq1LVps
kVur1GFbiuTrlO1NdqQR6JZKAGTpZRMJpSJdqC+3cCV+PwFsaV0oa3dL+PZk1X8X
Jzqk8QccqR2h1UKkpY8dpX4tylY+ZBWzzkaC3SSShSmLlBUm5Mu37C4grCMqS4AN
SsYznUXTE+k/dKQCpBBHShCebFo983a9v18/O8mpuNM/ZXV543+jFGHe8x4XmUoI
XrKhfTzil66x2xUM/X5lwc6Ep01MCioPXaYsyycqEv8ylMHzGFfz8bgC9ZHx2pT4
s6jPrSzDF4U4InwVECIzDhdB4Yua8E2rf87IV09ieQNlF41n1zS4Dx+mzKrKbrUj
3zFxxA==
-----END CERTIFICATE-----
Generated at Thu Nov 7 21:39:20 2024 by rpki-client on console-ams.rpki-client.org