Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
File:                     4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer (raw, json)
Hash identifier:          /SVXiH8QyBNYa+WW+NOOCfQt/Bxv9uO1KQBCco/m9mw=
Subject key identifier:   49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5622F42B0769E1492AFBAA0CBB4B1128D621E7D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 16:33:25 +0000
Certificate not after:    Mon 21 Jul 2025 16:38:25 +0000
Subordinate resources:    AS: 265942
                          IP: 131.196.152.0/22
                          IP: 2804:402c::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 23:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:22:f4:2b:07:69:e1:49:2a:fb:aa:0c:bb:4b:11:28:d6:21:e7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 16:33:25 2024 GMT
            Not After : Jul 21 16:38:25 2025 GMT
        Subject: CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:b4:dc:e6:e1:76:1a:c2:11:34:9b:44:0c:
                    ef:d5:f8:12:4e:e7:03:af:94:38:33:15:3e:fd:98:
                    28:da:38:89:46:ba:58:df:12:cc:89:dd:a0:42:57:
                    c4:f9:45:a7:4c:5d:15:c3:c4:17:b5:58:06:ab:7d:
                    62:be:7f:fc:96:9e:a6:19:bf:e0:42:a9:f2:e7:7e:
                    8b:f4:58:7a:4e:d9:cb:37:1f:e5:85:be:6d:1e:e9:
                    a5:5d:a1:77:67:03:1c:5c:c8:cd:54:cb:d3:85:95:
                    00:85:a6:bb:ff:ce:66:74:2d:d4:35:ed:03:e0:dc:
                    09:7d:9b:22:01:ab:ac:ff:cd:51:c3:e7:8d:9e:5f:
                    df:38:d7:bf:f5:38:f5:e3:38:8e:4b:d2:9b:1b:f2:
                    be:36:34:db:10:d2:ed:e0:7e:3f:df:e7:ff:f4:f1:
                    84:56:e3:76:d6:30:d5:f3:05:3b:e8:9d:ff:d8:84:
                    82:c5:79:6a:e0:8a:e9:24:bd:f2:df:ab:c1:d5:9e:
                    85:ff:53:b1:74:35:52:36:5c:fa:54:98:ce:71:75:
                    83:58:e7:3c:f1:94:b3:4a:ba:fa:1c:28:74:55:9d:
                    5f:7d:f8:cd:a0:70:04:fb:bf:71:6d:29:b1:26:8b:
                    1b:55:b1:23:1f:0b:63:27:bc:da:33:29:0e:45:02:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.152.0/22
                IPv6:
                  2804:402c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265942

    Signature Algorithm: sha256WithRSAEncryption
         1d:11:14:5d:7f:a1:6c:40:e5:db:54:32:de:cd:ac:5c:2e:18:
         ca:2d:16:42:a3:8f:ff:02:20:42:f9:ef:31:be:de:a9:91:19:
         cf:f2:1f:64:43:b6:3f:28:81:2b:a5:1c:dc:30:f4:66:c4:b5:
         ae:97:61:53:f0:41:f4:41:3e:4f:11:cd:cf:36:05:b0:aa:e0:
         b7:85:21:83:ee:da:d0:f9:de:c4:66:8f:6c:48:6c:42:49:7f:
         5f:2a:96:22:d6:1d:63:f0:5e:b7:f9:ca:1d:38:91:c3:e4:1f:
         d0:0c:1e:65:84:c3:ee:17:b9:75:83:83:ba:8a:75:01:75:fd:
         51:c0:80:b8:e8:b4:55:3c:67:3f:85:18:97:c0:ad:b3:f4:04:
         4a:4b:db:90:7b:8e:13:46:4c:d1:54:48:e1:07:97:93:9f:e8:
         23:3e:e1:60:02:09:b6:63:72:b6:a5:97:69:d0:10:69:f9:9c:
         f1:29:6c:29:6b:3a:6d:20:12:81:82:b3:f1:3a:05:20:f5:8f:
         9c:57:a3:d8:a0:07:80:18:5f:66:a4:51:67:b1:87:12:f7:94:
         57:21:df:4d:d8:06:f1:f1:a0:82:d0:fa:9b:69:bd:de:f8:f1:
         3a:7c:67:b9:57:c7:45:b4:3c:20:c2:ea:e3:ae:3a:e0:46:48:
         a9:b2:a4:a4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUViL0Kwdp4Ukq+6oMu0sRKNYh59EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjIxNjMzMjVaFw0yNTA3MjExNjM4MjVaMDMxMTAvBgNV
BAMTKDQ5MzZEM0QzMzIwMjUzMkIyN0FEQ0Q3QjQ0MzU5QkNGOEFCQ0JDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyY7Tc5uF2GsIRNJtEDO/V+BJO
5wOvlDgzFT79mCjaOIlGuljfEsyJ3aBCV8T5RadMXRXDxBe1WAarfWK+f/yWnqYZ
v+BCqfLnfov0WHpO2cs3H+WFvm0e6aVdoXdnAxxcyM1Uy9OFlQCFprv/zmZ0LdQ1
7QPg3Al9myIBq6z/zVHD542eX98417/1OPXjOI5L0psb8r42NNsQ0u3gfj/f5//0
8YRW43bWMNXzBTvonf/YhILFeWrgiukkvfLfq8HVnoX/U7F0NVI2XPpUmM5xdYNY
5zzxlLNKuvocKHRVnV99+M2gcAT7v3FtKbEmixtVsSMfC2MnvNozKQ5FAlrLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJNtPTMgJTKyet
zXtENZvPiry8ODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRh
ekViY1Y2Z3lyWHpGdkIxUDhDWVIyV1dMYTluZFRvSHd4WVY3WHNNQVAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M0
YXpFYmNWNmd5clh6RnZCMVA4Q1lSMldXTGE5bmRUb0h3eFlWN1hzTUFQLzAvNDkz
NkQzRDMzMjAyNTMyQjI3QURDRDdCNDQzNTlCQ0Y4QUJDQkMzOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg8SYMA0EAgACMAcDBQAoBEAsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQO1jANBgkqhkiG9w0BAQsFAAOCAQEAHREUXX+hbEDl21Qy
3s2sXC4Yyi0WQqOP/wIgQvnvMb7eqZEZz/IfZEO2PyiBK6Uc3DD0ZsS1rpdhU/BB
9EE+TxHNzzYFsKrgt4Uhg+7a0PnexGaPbEhsQkl/XyqWItYdY/Bet/nKHTiRw+Qf
0AweZYTD7he5dYODuop1AXX9UcCAuOi0VTxnP4UYl8Cts/QESkvbkHuOE0ZM0VRI
4QeXk5/oIz7hYAIJtmNytqWXadAQafmc8SlsKWs6bSASgYKz8ToFIPWPnFej2KAH
gBhfZqRRZ7GHEveUVyHfTdgG8fGggtD6m2m93vjxOnxnuVfHRbQ8IMLq46464EZI
qbKkpA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 01:37:40 2024 by rpki-client on console-fra.rpki-client.org