Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
File:                     41F9151ED2649F5878D0A6F01EEF968AB545A303.cer (raw, json)
Hash identifier:          bJzKr3aw3s49bWZPP8nEXPOGPwjEQ9wgo3gtCtd7k14=
Subject key identifier:   41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       728CFD5B6BB156AA6197ACE835884218D9453A4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:57:57 +0000
Certificate not after:    Thu 03 Apr 2025 00:02:57 +0000
Subordinate resources:    AS: 263144
                          IP: 191.242.220.0/22
                          IP: 2804:1768::/32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 09:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8c:fd:5b:6b:b1:56:aa:61:97:ac:e8:35:88:42:18:d9:45:3a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:57:57 2024 GMT
            Not After : Apr  3 00:02:57 2025 GMT
        Subject: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:3b:03:24:5d:3c:c4:0e:71:41:2d:5e:b3:
                    9b:2b:ea:ed:86:54:19:b5:3d:d7:a9:50:8f:0e:95:
                    59:4a:07:1f:4f:54:12:2b:e0:3c:51:40:4d:6c:1e:
                    c5:48:c9:cb:7b:84:eb:ec:89:eb:bc:bf:7f:ab:ab:
                    85:e6:15:19:90:16:4b:25:88:89:63:ed:60:95:d0:
                    06:87:c5:1a:6a:f6:bd:ea:dc:2d:d3:a5:0a:82:9d:
                    f9:93:73:5c:df:db:26:4b:ea:b4:9a:d4:79:f8:0a:
                    8b:de:da:2f:c3:7d:fd:f7:d4:2f:a3:27:25:92:43:
                    d1:f3:a5:e9:9e:58:0c:6b:41:17:b9:a6:2e:26:fd:
                    dd:84:68:26:98:66:c7:22:f6:92:1c:d4:02:20:49:
                    26:0c:28:30:48:4f:66:03:f4:d1:6f:ae:d3:04:94:
                    34:af:a0:bc:e2:c0:4c:4c:47:eb:48:6e:1f:66:88:
                    cb:39:67:41:54:b6:61:a2:b2:67:77:7b:dc:af:ef:
                    aa:2b:c2:9b:d3:54:f0:4b:26:e4:32:26:cd:a4:7c:
                    ef:c8:ae:99:29:9d:ee:6b:46:49:3c:b2:cc:79:31:
                    c7:ca:f7:35:ce:cb:57:a3:b8:c5:81:ed:5f:83:1c:
                    05:1b:0e:84:39:20:5d:95:a3:99:c6:88:ec:2e:0f:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.220.0/22
                IPv6:
                  2804:1768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263144

    Signature Algorithm: sha256WithRSAEncryption
         c5:4c:b9:2c:54:5c:e3:e4:56:a8:5d:2c:64:53:70:16:9c:68:
         08:dc:82:ae:6f:44:20:78:f6:b9:20:a9:4b:a0:93:55:a6:ea:
         09:e3:40:c2:8d:1b:6b:36:55:86:e6:4f:15:1e:62:f7:b6:91:
         60:9a:81:61:ff:ea:13:72:f9:df:3d:a2:00:23:11:14:ae:04:
         c5:ee:85:a0:ec:db:e2:f1:ca:a5:09:89:e7:0c:47:4f:39:dc:
         d0:52:4e:d6:8d:e4:1c:e5:9a:63:0e:40:bb:9c:23:9a:b9:88:
         00:4e:77:59:cc:5b:e9:fd:a6:54:45:02:24:21:5f:90:82:86:
         e5:e2:ef:4d:01:b3:88:be:2c:f9:97:c7:92:cd:e9:ac:5e:13:
         44:e0:70:51:ce:e2:86:77:36:dc:41:a4:6d:c5:87:2b:03:5f:
         fe:69:43:c6:2c:0b:0d:f0:d5:f4:ed:bc:0b:89:0d:03:d1:32:
         3a:ab:1c:3e:19:e0:89:7a:97:88:15:4f:57:ee:e0:d5:6b:7f:
         9d:9b:2d:b1:2f:13:df:44:55:d7:96:47:30:9b:a8:e5:4d:9a:
         8f:ab:d6:71:41:73:13:97:77:80:b1:9f:46:c7:48:ab:31:2d:
         be:49:e4:c0:d9:7d:b1:a5:dd:a3:b1:57:3e:f7:62:ea:42:65:
         8f:a4:2c:b9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUcoz9W2uxVqphl6zoNYhCGNlFOkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMzU3NTdaFw0yNTA0MDMwMDAyNTdaMDMxMTAvBgNV
BAMTKDQxRjkxNTFFRDI2NDlGNTg3OEQwQTZGMDFFRUY5NjhBQjU0NUEzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBTsDJF08xA5xQS1es5sr6u2G
VBm1PdepUI8OlVlKBx9PVBIr4DxRQE1sHsVIyct7hOvsieu8v3+rq4XmFRmQFksl
iIlj7WCV0AaHxRpq9r3q3C3TpQqCnfmTc1zf2yZL6rSa1Hn4Cove2i/Dff331C+j
JyWSQ9HzpemeWAxrQRe5pi4m/d2EaCaYZsci9pIc1AIgSSYMKDBIT2YD9NFvrtME
lDSvoLziwExMR+tIbh9miMs5Z0FUtmGismd3e9yv76orwpvTVPBLJuQyJs2kfO/I
rpkpne5rRkk8ssx5McfK9zXOy1ejuMWB7V+DHAUbDoQ5IF2Vo5nGiOwuDyFTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRB+RUe0mSfWHjQ
pvAe75aKtUWjAzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXJS
MVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1b29VRHJDNndOUWIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy
UjFTQmdNWDFDdnpFWDFpaVFzMzN5U2RuZEIyM1VHdW9vVURyQzZ3TlFiLzEvNDFG
OTE1MUVEMjY0OUY1ODc4RDBBNkYwMUVFRjk2OEFCNTQ1QTMwMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCv/LcMA0EAgACMAcDBQAoBBdoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQD6DANBgkqhkiG9w0BAQsFAAOCAQEAxUy5LFRc4+RWqF0s
ZFNwFpxoCNyCrm9EIHj2uSCpS6CTVabqCeNAwo0bazZVhuZPFR5i97aRYJqBYf/q
E3L53z2iACMRFK4Exe6FoOzb4vHKpQmJ5wxHTznc0FJO1o3kHOWaYw5Au5wjmrmI
AE53Wcxb6f2mVEUCJCFfkIKG5eLvTQGziL4s+ZfHks3prF4TROBwUc7ihnc23EGk
bcWHKwNf/mlDxiwLDfDV9O28C4kNA9EyOqscPhngiXqXiBVPV+7g1Wt/nZstsS8T
30RV15ZHMJuo5U2aj6vWcUFzE5d3gLGfRsdIqzEtvknkwNl9saXdo7FXPvdi6kJl
j6QsuQ==
-----END CERTIFICATE-----
Generated at Thu Oct 31 13:43:42 2024 by rpki-client on console-ams.rpki-client.org