Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/34F9F4A4CAAC59248202DBE4090F54B2949C1A48.cer
File:                     34F9F4A4CAAC59248202DBE4090F54B2949C1A48.cer (raw, json)
Hash identifier:          ubtuEilxTAhf0LoTEAOsE/CgNFYlz1IgzkgTWpreCa8=
Subject key identifier:   34:F9:F4:A4:CA:AC:59:24:82:02:DB:E4:09:0F:54:B2:94:9C:1A:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34D0B560C7C235B3185FD54677CE2289A8320284
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/34F9F4A4CAAC59248202DBE4090F54B2949C1A48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:33:09 +0000
Certificate not after:    Thu 03 Apr 2025 03:38:09 +0000
Subordinate resources:    AS: 268183
                          IP: 45.171.24.0/22
                          IP: 45.186.92.0/22
                          IP: 2804:5954::/32

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 12:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d0:b5:60:c7:c2:35:b3:18:5f:d5:46:77:ce:22:89:a8:32:02:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:33:09 2024 GMT
            Not After : Apr  3 03:38:09 2025 GMT
        Subject: CN=34F9F4A4CAAC59248202DBE4090F54B2949C1A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:ff:3b:f7:40:6d:6d:a8:d8:36:c3:44:2d:
                    0a:cf:c3:36:02:49:3e:b4:5e:52:38:05:84:97:b0:
                    92:ff:cc:77:c7:ff:d3:62:e7:7f:be:00:05:ce:00:
                    c1:91:ec:8b:f2:44:80:66:cb:9d:08:1c:0d:d9:5b:
                    5d:5a:e9:45:d8:e5:a1:1e:94:c6:7e:00:ca:43:6e:
                    6c:6b:03:6f:1b:fa:2c:22:45:b1:f2:22:62:57:46:
                    a8:9f:a1:8d:08:ad:c9:d6:b3:7b:3f:56:66:f6:75:
                    f3:cf:bb:ae:c7:3e:18:b5:02:36:22:cf:3d:ab:51:
                    b0:c1:7c:c3:69:70:af:64:f6:ac:4a:b4:fb:01:18:
                    f4:97:b8:c6:30:b9:48:37:67:ae:a9:91:52:a6:2e:
                    bb:b3:82:d7:29:04:3b:ae:65:b3:73:db:71:6c:92:
                    a3:1c:e5:a5:88:62:63:6c:27:f0:fc:bc:a5:cb:03:
                    95:54:71:fb:d3:4f:eb:19:36:d5:5f:e1:2b:84:e1:
                    d1:e3:80:5a:cb:c2:26:10:17:b5:e7:a8:82:da:b5:
                    2a:a6:f9:fa:25:26:94:66:db:f3:89:66:86:18:3c:
                    53:d7:b4:98:f4:5e:75:ba:4e:6d:e4:f9:1b:8d:ce:
                    da:fd:0d:72:b8:a3:ea:ab:b3:5e:d1:2a:74:24:96:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:F9:F4:A4:CA:AC:59:24:82:02:DB:E4:09:0F:54:B2:94:9C:1A:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/1/34F9F4A4CAAC59248202DBE4090F54B2949C1A48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.24.0/22
                  45.186.92.0/22
                IPv6:
                  2804:5954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268183

    Signature Algorithm: sha256WithRSAEncryption
         39:ff:3c:80:b8:0b:f5:80:0d:33:37:3f:e5:52:b5:96:20:94:
         65:94:1e:e1:72:92:ae:7d:9a:62:16:39:f3:6b:79:a1:39:04:
         79:90:55:65:c7:10:86:22:35:d6:db:81:26:88:51:e4:2c:06:
         f4:6f:3f:2b:5a:b8:4f:13:c4:bc:76:cc:ba:d4:3f:43:a4:e9:
         73:37:d3:fe:f9:d3:5c:b8:fb:8c:77:6c:3b:94:5c:7e:50:79:
         e9:a2:f5:24:94:57:63:2a:34:5c:cb:19:cb:5c:ab:6e:79:0a:
         dc:b3:44:2e:b1:24:54:7c:e4:6b:0f:b0:8f:1c:82:d7:a7:09:
         2a:1f:85:0b:b4:f0:2f:4b:99:3f:71:72:5a:ea:95:4e:ec:0c:
         37:94:d5:a6:c9:2a:bd:d7:8f:c3:26:43:ad:32:e7:48:44:2e:
         8c:09:8d:12:f3:cf:41:99:ab:2c:4e:b1:d2:cc:21:21:24:e9:
         17:26:73:67:76:fd:34:60:06:99:93:5e:a5:31:89:8e:6e:02:
         a8:31:a6:a2:88:55:46:b9:b8:1c:ca:23:e1:8f:7f:76:3e:f7:
         8b:5b:fc:dc:df:0d:92:c0:66:2b:ba:a2:5a:ce:10:11:95:98:
         8b:89:f7:95:93:f2:37:2c:2a:4d:b1:bd:26:36:d6:95:f7:60:
         11:61:60:48
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIUNNC1YMfCNbMYX9VGd84iiagyAoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMzMzMDlaFw0yNTA0MDMwMzM4MDlaMDMxMTAvBgNV
BAMTKDM0RjlGNEE0Q0FBQzU5MjQ4MjAyREJFNDA5MEY1NEIyOTQ5QzFBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZv8790BtbajYNsNELQrPwzYC
ST60XlI4BYSXsJL/zHfH/9Ni53++AAXOAMGR7IvyRIBmy50IHA3ZW11a6UXY5aEe
lMZ+AMpDbmxrA28b+iwiRbHyImJXRqifoY0IrcnWs3s/Vmb2dfPPu67HPhi1AjYi
zz2rUbDBfMNpcK9k9qxKtPsBGPSXuMYwuUg3Z66pkVKmLruzgtcpBDuuZbNz23Fs
kqMc5aWIYmNsJ/D8vKXLA5VUcfvTT+sZNtVf4SuE4dHjgFrLwiYQF7XnqILatSqm
+folJpRm2/OJZoYYPFPXtJj0XnW6Tm3k+RuNztr9DXK4o+qrs17RKnQklvI5AgMB
AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0+fSkyqxZJIIC
2+QJD1SylJwaSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQURR
d1lBdnd1RXliWENjb2d5N1VMbXE1YmZhQUJENmhqUnhUWndxdGNhdS8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQURR
d1lBdnd1RXliWENjb2d5N1VMbXE1YmZhQUJENmhqUnhUWndxdGNhdS8xLzM0RjlG
NEE0Q0FBQzU5MjQ4MjAyREJFNDA5MEY1NEIyOTQ5QzFBNDgubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB
/wQlMCMwEgQCAAEwDAMEAi2rGAMEAi26XDANBAIAAjAHAwUAKARZVDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMEF5cwDQYJKoZIhvcNAQELBQADggEBADn/PIC4C/WA
DTM3P+VStZYglGWUHuFykq59mmIWOfNreaE5BHmQVWXHEIYiNdbbgSaIUeQsBvRv
PytauE8TxLx2zLrUP0Ok6XM30/7501y4+4x3bDuUXH5Qeemi9SSUV2MqNFzLGctc
q255CtyzRC6xJFR85GsPsI8cgtenCSofhQu08C9LmT9xclrqlU7sDDeU1abJKr3X
j8MmQ60y50hELowJjRLzz0GZqyxOsdLMISEk6Rcmc2d2/TRgBpmTXqUxiY5uAqgx
pqKIVUa5uBzKI+GPf3Y+94tb/NzfDZLAZiu6olrOEBGVmIuJ95WT8jcsKk2xvSY2
1pX3YBFhYEg=
-----END CERTIFICATE-----
Generated at Wed Aug 7 14:39:50 2024 by rpki-client on console-fra.rpki-client.org