Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer
File:                     478E2899036889EA4A713455340EF1FCB5B880A7.cer (raw, json)
Hash identifier:          MwtH3JJxknEL6UH6E9YVfaDOl79Zvjr7XLBBCqT7odk=
Subject key identifier:   47:8E:28:99:03:68:89:EA:4A:71:34:55:34:0E:F1:FC:B5:B8:80:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FD2CF2FB773145030B24D3A5028B81E2856D00D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 12:37:16 +0000
Certificate not after:    Thu 17 Apr 2025 12:42:16 +0000
Subordinate resources:    AS: 267669
                          IP: 45.224.192.0/22
                          IP: 2804:450c::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 12:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:cf:2f:b7:73:14:50:30:b2:4d:3a:50:28:b8:1e:28:56:d0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 12:37:16 2024 GMT
            Not After : Apr 17 12:42:16 2025 GMT
        Subject: CN=478E2899036889EA4A713455340EF1FCB5B880A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0a:bf:55:3e:97:b2:45:bc:80:e6:08:8f:43:
                    c9:61:d1:14:dc:df:b8:1c:73:c4:ec:e1:f0:52:a8:
                    40:7f:36:39:fc:17:dd:97:ed:54:a3:f5:ad:16:c8:
                    f7:84:f8:1b:45:d7:3e:5c:ed:de:6b:e7:e3:d9:f7:
                    15:99:26:1c:03:3e:0c:29:ba:0f:60:b9:22:26:ca:
                    b6:b2:ac:d2:21:b6:b0:1f:6c:71:a1:e5:87:0c:04:
                    9a:90:3b:3a:c4:2a:f4:a5:21:a5:97:98:5f:f9:10:
                    b8:35:8b:73:83:04:4d:c6:f6:22:be:51:c0:31:31:
                    3a:47:43:46:a6:d9:b8:a5:c2:ea:bb:4a:82:0a:bb:
                    c8:fe:b5:9f:c2:29:6d:71:82:da:8e:0e:4a:b1:0d:
                    29:ac:c1:51:85:d2:1a:00:96:dd:9e:08:0d:23:30:
                    2c:c6:59:94:f4:dc:7e:67:52:8a:21:34:b8:52:35:
                    74:e3:58:fe:0c:cb:9f:2c:23:82:51:8c:c3:be:43:
                    f5:60:c5:2f:46:3c:68:ef:25:ad:b1:f9:f1:72:cd:
                    f1:9a:3c:b2:6a:dc:a6:44:b5:36:03:d8:50:35:04:
                    99:59:49:9f:fa:df:38:0c:cf:1b:1c:2f:f5:ea:e4:
                    89:f0:c2:f3:4e:45:37:df:4e:1a:11:2d:ca:95:73:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:8E:28:99:03:68:89:EA:4A:71:34:55:34:0E:F1:FC:B5:B8:80:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.192.0/22
                IPv6:
                  2804:450c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267669

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:d6:ba:5f:1e:8f:3e:49:4a:d9:2f:92:ef:df:d8:cd:41:
         cf:27:fe:a1:a1:ac:26:cb:fa:fa:87:f8:2d:b4:68:2f:6c:29:
         99:b9:a6:c6:c5:98:6c:1e:1d:7c:ea:ba:c8:3d:e3:74:e5:b8:
         fd:ea:b4:ec:ff:74:05:7c:f1:83:15:23:72:c9:c2:43:bd:a0:
         f4:58:c9:1a:fc:44:20:10:e5:19:c9:8e:1e:86:29:34:a7:9b:
         99:61:ee:e7:ed:c3:0b:7d:0e:77:92:23:b9:75:23:10:65:a2:
         87:d5:cd:61:cc:b2:47:3a:7d:80:aa:61:cd:d9:1f:07:cf:a4:
         43:aa:82:20:87:d5:47:15:e2:cd:ad:c7:d8:26:ac:37:62:79:
         28:2d:0e:30:34:0b:dc:96:9d:61:7d:3b:fc:6c:ce:5b:f8:91:
         67:40:fc:f9:dc:b2:94:f9:e3:73:2d:3f:1c:25:71:b1:9f:e1:
         cc:ab:a8:f7:10:e6:2d:a6:13:38:2a:35:bb:73:93:fd:46:4b:
         d7:8a:4a:bc:84:e5:e2:78:0e:38:60:68:d6:2a:d3:e2:f0:dc:
         49:db:7d:47:79:91:08:f7:97:8a:6e:50:04:08:61:74:02:43:
         b9:6e:be:57:cd:59:9b:af:14:90:f6:ea:c7:d3:84:57:19:22:
         a2:72:b4:7e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUP9LPL7dzFFAwsk06UCi4HihW0A0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTgxMjM3MTZaFw0yNTA0MTcxMjQyMTZaMDMxMTAvBgNV
BAMTKDQ3OEUyODk5MDM2ODg5RUE0QTcxMzQ1NTM0MEVGMUZDQjVCODgwQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCr9VPpeyRbyA5giPQ8lh0RTc
37gcc8Ts4fBSqEB/Njn8F92X7VSj9a0WyPeE+BtF1z5c7d5r5+PZ9xWZJhwDPgwp
ug9guSImyrayrNIhtrAfbHGh5YcMBJqQOzrEKvSlIaWXmF/5ELg1i3ODBE3G9iK+
UcAxMTpHQ0am2bilwuq7SoIKu8j+tZ/CKW1xgtqODkqxDSmswVGF0hoAlt2eCA0j
MCzGWZT03H5nUoohNLhSNXTjWP4My58sI4JRjMO+Q/VgxS9GPGjvJa2x+fFyzfGa
PLJq3KZEtTYD2FA1BJlZSZ/63zgMzxscL/Xq5InwwvNORTffThoRLcqVcykTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHjiiZA2iJ6kpx
NFU0DvH8tbiApzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3NC
Nlk1OWNpWUoyOHFaZWYzN1hDYkpqZDVxcWdwdFFSd3hrdUR3Mnppb3UvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nz
QjZZNTljaVlKMjhxWmVmMzdYQ2JKamQ1cXFncHRRUnd4a3VEdzJ6aW91LzAvNDc4
RTI4OTkwMzY4ODlFQTRBNzEzNDU1MzQwRUYxRkNCNUI4ODBBNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeDAMA0EAgACMAcDBQAoBEUMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQVlTANBgkqhkiG9w0BAQsFAAOCAQEAMLjWul8ejz5JStkv
ku/f2M1Bzyf+oaGsJsv6+of4LbRoL2wpmbmmxsWYbB4dfOq6yD3jdOW4/eq07P90
BXzxgxUjcsnCQ72g9FjJGvxEIBDlGcmOHoYpNKebmWHu5+3DC30Od5IjuXUjEGWi
h9XNYcyyRzp9gKphzdkfB8+kQ6qCIIfVRxXiza3H2CasN2J5KC0OMDQL3JadYX07
/GzOW/iRZ0D8+dyylPnjcy0/HCVxsZ/hzKuo9xDmLaYTOCo1u3OT/UZL14pKvITl
4ngOOGBo1irT4vDcSdt9R3mRCPeXim5QBAhhdAJDuW6+V81Zm68UkPbqx9OEVxki
onK0fg==
-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:49 2024 by rpki-client on console-fra.rpki-client.org