Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer
File:                     43601DF506C45BF04A33C11D3FD594AC48E74F90.cer (raw, json)
Hash identifier:          pAlJindiQyqYxmDPav9Ige/DQleQ/p2uTJ+K8Le9xI8=
Subject key identifier:   43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44EC27C50303E20101830BBC55AE6F5A0B5434F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:32 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:32 +0000
Subordinate resources:    AS: 267175
                          IP: 45.230.212.0/22
                          IP: 2804:4948::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 03:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:27:c5:03:03:e2:01:01:83:0b:bc:55:ae:6f:5a:0b:54:34:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:32 2024 GMT
            Not After : Apr  2 18:31:32 2025 GMT
        Subject: CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:06:98:81:46:72:fd:c6:8b:ff:00:4a:03:
                    5d:da:ce:0a:02:9e:13:f9:1a:f1:ac:73:e6:d4:8e:
                    d2:df:79:0b:2e:56:92:b3:87:19:14:2e:6b:43:55:
                    0e:94:82:11:8d:9e:96:84:0d:8c:61:8a:e8:a6:77:
                    ad:1e:c9:10:44:81:88:44:0b:9a:cd:51:38:41:c5:
                    c0:a3:26:b6:53:73:09:c6:f2:58:92:e2:3d:32:50:
                    b4:2e:73:d7:2e:15:6c:90:d7:13:14:32:1c:d2:d9:
                    cc:2d:16:39:36:75:35:dd:e8:d5:76:72:a8:a3:a2:
                    4c:1c:e6:c0:74:6d:35:06:24:e7:bb:ad:45:3f:8b:
                    18:af:bd:55:70:af:67:2e:97:9d:c9:d6:de:b7:3e:
                    b7:d0:21:50:7f:26:5f:cd:05:e0:86:e7:e7:b9:49:
                    9a:f5:ae:84:d0:5d:b1:31:d5:5a:25:1f:c1:de:9e:
                    6a:8c:71:b5:5c:c4:3d:3a:2a:f0:4e:68:41:c7:fd:
                    a5:bd:fb:31:21:dd:0e:6b:a2:8d:dc:6e:7f:c6:ee:
                    0d:e4:54:8a:ff:09:df:d7:30:8e:79:bf:ba:b5:d9:
                    8f:08:6c:e0:07:3a:0c:97:3a:ef:b9:b9:09:47:dd:
                    5f:c5:61:59:8f:4f:1f:91:8f:4a:8b:4f:47:68:87:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.212.0/22
                IPv6:
                  2804:4948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267175

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:de:df:d8:0c:b4:b8:b6:0a:c8:50:c6:b0:6b:fc:30:14:
         ab:f8:06:94:4d:7b:ed:8e:80:54:37:5b:31:26:80:dc:2e:76:
         5c:62:b2:05:b8:d0:f5:23:e1:f5:ad:50:a3:57:61:fd:4b:10:
         35:c4:b1:3b:2f:49:77:ca:e0:fc:02:ab:70:62:ee:60:4c:81:
         95:6b:a8:9c:54:fb:f0:98:f2:c6:15:22:39:ba:3d:9c:38:96:
         6b:4d:19:20:d0:97:ba:e6:2f:9e:48:20:f0:3b:d1:e3:9f:3a:
         4b:f1:ff:90:1b:e4:bf:db:bc:64:b3:44:af:b7:3b:92:80:bd:
         6b:af:b3:d9:51:5a:b8:ae:82:e9:b2:3b:da:85:db:0e:f9:fc:
         a7:dc:84:30:e4:cd:46:5d:77:05:72:71:d6:55:43:88:d8:ba:
         51:ef:9d:4f:3b:6c:0e:66:8e:c8:e0:25:22:aa:74:d7:cd:22:
         64:b6:09:c0:1d:c0:fd:3a:a4:83:47:7b:e1:01:15:c6:df:03:
         64:43:72:7a:f9:41:0f:75:bb:7a:2b:95:45:7c:41:36:03:da:
         1f:74:66:f3:5c:d3:36:8d:1d:ff:38:90:00:b3:51:e7:ff:aa:
         89:05:06:21:40:b5:2d:55:62:93:22:a6:43:2c:60:47:01:12:
         d2:92:bb:a7
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUROwnxQMD4gEBgwu8Va5vWgtUNPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MzJaFw0yNTA0MDIxODMxMzJaMDMxMTAvBgNV
BAMTKDQzNjAxREY1MDZDNDVCRjA0QTMzQzExRDNGRDU5NEFDNDhFNzRGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxgaYgUZy/caL/wBKA13azgoC
nhP5GvGsc+bUjtLfeQsuVpKzhxkULmtDVQ6UghGNnpaEDYxhiuimd60eyRBEgYhE
C5rNUThBxcCjJrZTcwnG8liS4j0yULQuc9cuFWyQ1xMUMhzS2cwtFjk2dTXd6NV2
cqijokwc5sB0bTUGJOe7rUU/ixivvVVwr2cul53J1t63PrfQIVB/Jl/NBeCG5+e5
SZr1roTQXbEx1VolH8HenmqMcbVcxD06KvBOaEHH/aW9+zEh3Q5roo3cbn/G7g3k
VIr/Cd/XMI55v7q12Y8IbOAHOgyXOu+5uQlH3V/FYVmPTx+Rj0qLT0doh8vXAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDYB31BsRb8Eoz
wR0/1ZSsSOdPkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQW1I
RUJKV1J6Qk5vY1ZRV1NCVnJoREFFeXhhdlgzeVNVcUp2WUVOdFdYS3kvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQW1I
RUJKV1J6Qk5vY1ZRV1NCVnJoREFFeXhhdlgzeVNVcUp2WUVOdFdYS3kvMS80MzYw
MURGNTA2QzQ1QkYwNEEzM0MxMUQzRkQ1OTRBQzQ4RTc0RjkwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5tQwDQQCAAIwBwMFACgESUgwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBOnMA0GCSqGSIb3DQEBCwUAA4IBAQB2b97f2Ay0uLYKyFDG
sGv8MBSr+AaUTXvtjoBUN1sxJoDcLnZcYrIFuND1I+H1rVCjV2H9SxA1xLE7L0l3
yuD8AqtwYu5gTIGVa6icVPvwmPLGFSI5uj2cOJZrTRkg0Je65i+eSCDwO9HjnzpL
8f+QG+S/27xks0SvtzuSgL1rr7PZUVq4roLpsjvahdsO+fyn3IQw5M1GXXcFcnHW
VUOI2LpR751PO2wOZo7I4CUiqnTXzSJktgnAHcD9OqSDR3vhARXG3wNkQ3J6+UEP
dbt6K5VFfEE2A9ofdGbzXNM2jR3/OJAAs1Hn/6qJBQYhQLUtVWKTIqZDLGBHARLS
krun
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org