Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.cer
File:                     4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.cer (raw, json)
Hash identifier:          bw46Tbjq+ICiWAVMxRjVF1P9wuJD7zwbAsrWFjiGSYs=
Subject key identifier:   40:73:FA:1C:2A:2E:47:32:C9:C4:BE:93:01:B3:6F:18:01:D3:90:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2058F3D21767D43E083299280A2B12F15D81176B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:56:06 +0000
Certificate not after:    Thu 03 Apr 2025 15:01:06 +0000
Subordinate resources:    AS: 271133
                          IP: 131.0.124.0/22
                          IP: 2804:76c4::/32

Validation:               Failed, certificate revoked on Sat 25 May 2024 06:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:58:f3:d2:17:67:d4:3e:08:32:99:28:0a:2b:12:f1:5d:81:17:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:56:06 2024 GMT
            Not After : Apr  3 15:01:06 2025 GMT
        Subject: CN=4073FA1C2A2E4732C9C4BE9301B36F1801D3904E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:1f:02:88:8c:8d:41:90:c8:e7:f3:57:b8:
                    c3:78:8b:81:3d:7c:84:6f:b0:8b:0a:3d:3f:30:f3:
                    b7:93:19:a1:78:1f:b3:97:62:98:15:ae:8c:41:99:
                    88:52:00:9c:71:c5:82:83:d6:3f:81:24:2d:c2:2e:
                    24:fa:1d:c5:d1:da:88:fb:98:ab:de:15:2b:95:26:
                    26:1e:e4:5b:2f:3b:da:aa:0f:af:93:86:30:f5:22:
                    22:43:af:e3:06:11:49:59:85:89:04:75:8a:36:a7:
                    dd:65:09:9d:04:2a:5d:b5:d7:bf:30:58:c1:2b:6c:
                    ae:77:10:ce:f9:6b:44:1b:74:cc:14:f3:7d:ec:60:
                    f7:dc:62:f4:30:21:d3:4b:0d:21:ef:9e:0a:da:c8:
                    8b:23:1a:93:8f:38:dd:f4:a5:d0:42:d1:ca:b6:bf:
                    41:8a:e0:af:72:3e:b4:63:57:37:6c:d3:9b:43:ed:
                    75:21:70:fe:31:89:1f:67:fe:dd:61:b5:e7:bd:69:
                    68:ed:0a:c4:9a:e7:3e:ac:0b:64:ea:29:7b:10:e0:
                    43:62:61:96:34:2a:f3:e1:ec:12:44:e5:c0:79:e3:
                    27:19:61:d0:3e:62:06:a6:99:78:f2:83:dc:28:a5:
                    03:60:f4:f6:cd:f6:b8:a6:38:7e:fd:00:13:87:2a:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:73:FA:1C:2A:2E:47:32:C9:C4:BE:93:01:B3:6F:18:01:D3:90:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.124.0/22
                IPv6:
                  2804:76c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271133

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:98:c1:f1:7d:24:d8:d6:44:26:0d:30:09:16:fa:a3:ef:
         05:c2:29:40:f0:f6:c1:e0:f0:d3:97:43:55:6d:15:48:1e:72:
         a2:38:d8:22:e1:34:21:49:78:e2:a4:43:d4:50:c5:98:1a:c2:
         d4:40:08:65:96:16:45:6a:8b:50:64:14:55:26:f0:ee:f4:e8:
         3f:a3:84:1c:e3:04:d6:96:47:3f:ae:58:b9:5e:95:7f:d9:4e:
         3a:43:87:04:e2:b9:2b:f9:51:dc:e6:59:37:51:d7:7b:49:53:
         c4:53:f5:ae:8e:20:3f:81:a9:40:aa:54:50:2b:8a:14:b2:93:
         3a:b5:4e:e8:84:99:79:dc:9d:b4:3e:70:e6:2a:6f:ac:c8:47:
         d1:f9:39:0b:aa:d1:d3:ae:05:2d:96:19:98:2a:49:d7:0a:cf:
         bc:a9:11:67:e8:6a:87:64:94:d0:41:92:49:4e:05:5c:6d:ef:
         13:38:8b:5c:dc:0d:2b:db:78:2d:cd:01:20:be:7e:29:03:c6:
         0e:9c:59:d7:d0:5d:96:38:16:bd:ef:f8:35:72:54:77:98:20:
         de:55:77:59:1e:4e:41:a8:0a:4c:d6:b6:bc:c6:46:fc:a2:9a:
         3b:63:99:8e:18:9c:42:c9:9f:a5:3a:ff:94:3a:81:b1:f1:8a:
         7c:aa:aa:c6
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIFjz0hdn1D4IMpkoCisS8V2BF2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNDU2MDZaFw0yNTA0MDMxNTAxMDZaMDMxMTAvBgNV
BAMTKDQwNzNGQTFDMkEyRTQ3MzJDOUM0QkU5MzAxQjM2RjE4MDFEMzkwNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8B8CiIyNQZDI5/NXuMN4i4E9
fIRvsIsKPT8w87eTGaF4H7OXYpgVroxBmYhSAJxxxYKD1j+BJC3CLiT6HcXR2oj7
mKveFSuVJiYe5FsvO9qqD6+ThjD1IiJDr+MGEUlZhYkEdYo2p91lCZ0EKl21178w
WMErbK53EM75a0QbdMwU833sYPfcYvQwIdNLDSHvngrayIsjGpOPON30pdBC0cq2
v0GK4K9yPrRjVzds05tD7XUhcP4xiR9n/t1htee9aWjtCsSa5z6sC2TqKXsQ4ENi
YZY0KvPh7BJE5cB54ycZYdA+YgammXjyg9wopQNg9PbN9rimOH79ABOHKkOxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAc/ocKi5HMsnE
vpMBs28YAdOQTjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnl3
TFlwNm9oa1NldWNyd250RzNDNHE2bTlMaWJKYjRLeFBQZGJLc1hlRzUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ5
d0xZcDZvaGtTZXVjcndudEczQzRxNm05TGliSmI0S3hQUGRiS3NYZUc1LzEvNDA3
M0ZBMUMyQTJFNDczMkM5QzRCRTkzMDFCMzZGMTgwMUQzOTA0RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCgwB8MA0EAgACMAcDBQAoBHbEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjHTANBgkqhkiG9w0BAQsFAAOCAQEAjlOYwfF9JNjWRCYN
MAkW+qPvBcIpQPD2weDw05dDVW0VSB5yojjYIuE0IUl44qRD1FDFmBrC1EAIZZYW
RWqLUGQUVSbw7vToP6OEHOME1pZHP65YuV6Vf9lOOkOHBOK5K/lR3OZZN1HXe0lT
xFP1ro4gP4GpQKpUUCuKFLKTOrVO6ISZedydtD5w5ipvrMhH0fk5C6rR064FLZYZ
mCpJ1wrPvKkRZ+hqh2SU0EGSSU4FXG3vEziLXNwNK9t4Lc0BIL5+KQPGDpxZ19Bd
ljgWve/4NXJUd5gg3lV3WR5OQagKTNa2vMZG/KKaO2OZjhicQsmfpTr/lDqBsfGK
fKqqxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org