Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/359EDF7F87A0A0443D3E04432527D623FF673D05.cer
File:                     359EDF7F87A0A0443D3E04432527D623FF673D05.cer (raw, json)
Hash identifier:          krLzelOk+DhvdM+M5UW2mwaeZleyK1fvQ0rPQWOnXCM=
Subject key identifier:   35:9E:DF:7F:87:A0:A0:44:3D:3E:04:43:25:27:D6:23:FF:67:3D:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D69EAEC3B5CBE2F1A67B93367E6FDA4F35215DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/359EDF7F87A0A0443D3E04432527D623FF673D05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:05:13 +0000
Certificate not after:    Wed 02 Apr 2025 19:10:13 +0000
Subordinate resources:    AS: 265161
                          IP: 143.255.212.0/22
                          IP: 2804:2b94::/32

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 17:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:69:ea:ec:3b:5c:be:2f:1a:67:b9:33:67:e6:fd:a4:f3:52:15:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:05:13 2024 GMT
            Not After : Apr  2 19:10:13 2025 GMT
        Subject: CN=359EDF7F87A0A0443D3E04432527D623FF673D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:8f:af:7b:2b:d7:63:50:87:71:5f:b4:d9:
                    a9:a2:d0:2e:f6:4b:d2:af:81:33:91:98:f7:b1:d9:
                    a2:f2:fa:2b:8b:82:53:9f:56:de:81:14:da:d1:1a:
                    71:38:c5:db:1b:0b:c9:8d:79:e9:72:be:d9:10:40:
                    1b:fe:4e:fc:bc:e6:89:1f:fc:b8:b0:69:46:34:e5:
                    a4:51:a5:7d:48:2f:b3:6a:81:c0:c0:7e:09:23:e1:
                    e6:b7:e6:6e:a6:67:88:2a:0c:3a:c2:70:b3:9c:91:
                    dd:ff:4a:7e:a1:c5:f0:ec:35:7c:75:7c:17:94:8c:
                    7d:c0:5c:4f:ab:ff:59:61:48:94:a7:2b:ce:fd:2a:
                    61:d0:cc:4e:82:23:30:bd:c7:95:54:48:29:25:a8:
                    cd:a4:f4:21:0e:a4:94:10:73:8b:c4:28:72:ba:94:
                    a1:29:7d:0f:d4:f8:23:40:8a:b7:da:2a:92:1a:2c:
                    7b:31:92:8f:53:19:74:22:83:9c:21:a5:0e:1e:18:
                    d1:1a:78:e6:37:4a:ae:8f:2b:81:29:e6:28:17:90:
                    7d:7f:69:86:12:30:6c:80:b8:2a:62:49:47:ae:a4:
                    97:42:86:18:af:f0:2c:9d:65:6f:fa:77:e4:a3:5d:
                    4b:4c:07:15:13:e1:57:ec:48:c9:42:92:f0:8a:c1:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:9E:DF:7F:87:A0:A0:44:3D:3E:04:43:25:27:D6:23:FF:67:3D:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/359EDF7F87A0A0443D3E04432527D623FF673D05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.212.0/22
                IPv6:
                  2804:2b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265161

    Signature Algorithm: sha256WithRSAEncryption
         0c:64:77:38:a0:5d:0a:f1:55:51:db:c3:fe:cf:72:f0:7a:a2:
         92:23:04:27:04:0b:67:71:2e:cb:93:e0:b4:b4:2c:2b:5d:73:
         52:e7:8d:2b:30:7d:f3:c4:13:06:13:e3:9e:4e:a2:b3:7e:6f:
         58:77:3c:e6:49:0d:01:64:bc:d0:ad:55:aa:5c:8c:55:e1:c2:
         f2:5b:74:7a:4c:32:f4:7e:c9:0e:ac:dc:1f:a1:2c:18:cc:38:
         cb:27:a1:05:c2:66:05:d8:4a:e2:58:fa:16:a9:f9:e6:64:e4:
         91:4c:00:e2:ac:93:4e:1b:58:a3:81:b7:64:79:80:6c:c9:df:
         f0:41:16:ff:81:87:af:b5:c0:b7:96:ed:64:7b:93:2d:83:05:
         8b:da:71:3d:af:29:5a:f6:59:59:5f:44:1a:7f:38:42:13:00:
         bf:2d:de:dc:8b:8b:18:7b:57:53:c1:87:cd:05:76:7c:e9:34:
         06:dd:ce:04:28:3b:c8:7e:f0:84:05:0f:0c:01:65:4c:0d:dc:
         4e:c6:c9:5f:8d:98:1b:9f:4b:98:d9:c2:e9:e1:c2:20:c9:4a:
         62:97:ec:45:3b:7b:61:a3:4a:2e:8f:0c:f2:b1:16:ab:46:18:
         66:b0:83:9c:4e:f7:4a:80:7f:00:ce:70:88:a4:5a:44:61:b1:
         65:c1:99:0e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPWnq7Dtcvi8aZ7kzZ+b9pPNSFd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTA1MTNaFw0yNTA0MDIxOTEwMTNaMDMxMTAvBgNV
BAMTKDM1OUVERjdGODdBMEEwNDQzRDNFMDQ0MzI1MjdENjIzRkY2NzNEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfN4+veyvXY1CHcV+02ami0C72
S9KvgTORmPex2aLy+iuLglOfVt6BFNrRGnE4xdsbC8mNeelyvtkQQBv+Tvy85okf
/LiwaUY05aRRpX1IL7NqgcDAfgkj4ea35m6mZ4gqDDrCcLOckd3/Sn6hxfDsNXx1
fBeUjH3AXE+r/1lhSJSnK879KmHQzE6CIzC9x5VUSCklqM2k9CEOpJQQc4vEKHK6
lKEpfQ/U+CNAirfaKpIaLHsxko9TGXQig5whpQ4eGNEaeOY3Sq6PK4Ep5igXkH1/
aYYSMGyAuCpiSUeupJdChhiv8CydZW/6d+SjXUtMBxUT4VfsSMlCkvCKwbFnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1nt9/h6CgRD0+
BEMlJ9Yj/2c9BTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHk4
YXF3OHJidzhOVnRNejRYQWNXWnYzeW9BbXY2cWIxQm9ZdkJLdkdiaEgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h5
OGFxdzhyYnc4TlZ0TXo0WEFjV1p2M3lvQW12NnFiMUJvWXZCS3ZHYmhILzEvMzU5
RURGN0Y4N0EwQTA0NDNEM0UwNDQzMjUyN0Q2MjNGRjY3M0QwNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCj//UMA0EAgACMAcDBQAoBCuUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLyTANBgkqhkiG9w0BAQsFAAOCAQEADGR3OKBdCvFVUdvD
/s9y8HqikiMEJwQLZ3Euy5PgtLQsK11zUueNKzB988QTBhPjnk6is35vWHc85kkN
AWS80K1VqlyMVeHC8lt0ekwy9H7JDqzcH6EsGMw4yyehBcJmBdhK4lj6Fqn55mTk
kUwA4qyTThtYo4G3ZHmAbMnf8EEW/4GHr7XAt5btZHuTLYMFi9pxPa8pWvZZWV9E
Gn84QhMAvy3e3IuLGHtXU8GHzQV2fOk0Bt3OBCg7yH7whAUPDAFlTA3cTsbJX42Y
G59LmNnC6eHCIMlKYpfsRTt7YaNKLo8M8rEWq0YYZrCDnE73SoB/AM5wiKRaRGGx
ZcGZDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org