Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A0DC6A582EF526F76B96943FFD72B2305D83D85.cer
File:                     4A0DC6A582EF526F76B96943FFD72B2305D83D85.cer (raw, json)
Hash identifier:          c98Upx2pz6+DR6r6qaiWKaYkx8leKposbAVeyujMs4w=
Subject key identifier:   4A:0D:C6:A5:82:EF:52:6F:76:B9:69:43:FF:D7:2B:23:05:D8:3D:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D3C7FF722366157D1A36A1C147E66433EB610A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/4A0DC6A582EF526F76B96943FFD72B2305D83D85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 23:35:51 +0000
Certificate not after:    Wed 28 May 2025 23:40:51 +0000
Subordinate resources:    AS: 53049
                          IP: 200.142.184.0/22
                          IP: 2804:18c4::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3c:7f:f7:22:36:61:57:d1:a3:6a:1c:14:7e:66:43:3e:b6:10:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 23:35:51 2024 GMT
            Not After : May 28 23:40:51 2025 GMT
        Subject: CN=4A0DC6A582EF526F76B96943FFD72B2305D83D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:bb:f7:93:26:b3:bd:8d:d8:65:78:e2:4c:
                    5a:92:ed:61:3f:c1:36:16:27:d5:41:4b:a4:89:0b:
                    5b:59:44:f4:e4:cc:f5:0f:7a:58:d6:f1:a5:b5:1b:
                    62:09:87:ee:e9:3f:3b:c3:cb:98:97:e2:33:c0:27:
                    6d:f2:c6:2c:c6:c6:e5:2c:7c:01:29:6f:e2:72:26:
                    00:ae:6e:d6:58:c5:8a:49:8a:6f:ee:8c:b2:40:d2:
                    7c:a0:00:03:a7:54:0e:a9:d8:e9:f8:96:83:cb:c3:
                    bf:4f:85:be:96:ab:ae:61:ef:ac:1a:3b:df:20:4b:
                    4c:ae:ed:4e:01:d2:49:e9:28:99:d8:d7:e8:6f:d8:
                    f1:44:7f:3c:5f:f6:bf:79:86:7d:0d:9a:27:d4:95:
                    2e:4d:ff:be:eb:36:ea:76:bd:f6:4e:7d:fa:7b:24:
                    67:0c:0a:b8:4c:7e:6c:01:97:d0:5f:44:90:fa:80:
                    93:8e:88:95:f9:c4:15:7b:8d:25:7d:16:3c:d3:31:
                    02:39:cf:67:dc:ac:2a:c5:f9:4e:82:c5:9d:73:ee:
                    0b:e3:18:27:f3:4c:9b:c2:21:f8:8f:3a:ba:a0:44:
                    3d:b2:69:78:3d:88:48:7b:d8:d2:96:5c:26:15:81:
                    0c:5d:b1:27:55:08:07:91:90:65:a9:4c:90:4b:32:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:0D:C6:A5:82:EF:52:6F:76:B9:69:43:FF:D7:2B:23:05:D8:3D:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/4A0DC6A582EF526F76B96943FFD72B2305D83D85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.184.0/22
                IPv6:
                  2804:18c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53049

    Signature Algorithm: sha256WithRSAEncryption
         ae:7c:e2:37:16:ff:ab:b4:60:d8:9f:7f:45:cc:52:02:4b:0c:
         0d:23:64:31:ef:be:7d:a8:8e:7e:a7:96:fc:51:08:83:d8:b6:
         2f:d3:9d:c5:17:49:b8:19:aa:3b:37:9e:12:51:00:b5:eb:b9:
         2f:22:1b:b8:61:24:b0:dd:ad:18:12:06:c3:f0:5f:98:ea:42:
         a5:e5:78:b1:a3:f8:c2:2d:d5:ab:46:af:b9:66:b6:93:86:58:
         9c:72:3e:b0:c5:07:4e:6d:dc:cf:72:5d:3d:af:bf:18:82:b6:
         77:ee:3e:cb:f3:df:b9:db:63:9a:e7:ef:f4:4c:f3:af:f9:6f:
         02:09:f3:bb:6d:56:87:f4:ac:8a:5a:ed:67:57:ca:e1:d9:5c:
         25:e1:ee:23:b4:79:1d:14:f4:38:57:ba:27:b8:d4:d5:aa:61:
         66:f0:7f:b2:b0:8a:7a:b2:71:6c:22:4f:93:6b:6e:f4:8e:48:
         05:d1:ef:2e:9e:70:ec:04:c7:b4:06:47:69:44:89:2d:7b:23:
         01:34:5a:9f:0b:cb:fc:68:83:6a:9b:5e:77:ec:ab:3f:ee:1a:
         23:bb:00:14:43:49:56:a1:c4:47:b8:3e:52:99:2c:8f:b9:c0:
         55:ee:c5:7a:a0:4d:a9:34:f3:14:95:34:68:4b:2a:25:3c:41:
         bd:51:a5:dd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDTx/9yI2YVfRo2ocFH5mQz62EKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjkyMzM1NTFaFw0yNTA1MjgyMzQwNTFaMDMxMTAvBgNV
BAMTKDRBMERDNkE1ODJFRjUyNkY3NkI5Njk0M0ZGRDcyQjIzMDVEODNEODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTt7v3kyazvY3YZXjiTFqS7WE/
wTYWJ9VBS6SJC1tZRPTkzPUPeljW8aW1G2IJh+7pPzvDy5iX4jPAJ23yxizGxuUs
fAEpb+JyJgCubtZYxYpJim/ujLJA0nygAAOnVA6p2On4loPLw79Phb6Wq65h76wa
O98gS0yu7U4B0knpKJnY1+hv2PFEfzxf9r95hn0NmifUlS5N/77rNup2vfZOffp7
JGcMCrhMfmwBl9BfRJD6gJOOiJX5xBV7jSV9FjzTMQI5z2fcrCrF+U6CxZ1z7gvj
GCfzTJvCIfiPOrqgRD2yaXg9iEh72NKWXCYVgQxdsSdVCAeRkGWpTJBLMkPhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKDcalgu9Sb3a5
aUP/1ysjBdg9hTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGli
dUZTZFV2akphYnRWRHFjb2pXV1FVQ0tYTlJGNmpuU2ZNTUZxQ0d6TG0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rp
YnVGU2RVdmpKYWJ0VkRxY29qV1dRVUNLWE5SRjZqblNmTU1GcUNHekxtLzAvNEEw
REM2QTU4MkVGNTI2Rjc2Qjk2OTQzRkZENzJCMjMwNUQ4M0Q4NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyI64MA0EAgACMAcDBQAoBBjEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDPOTANBgkqhkiG9w0BAQsFAAOCAQEArnziNxb/q7Rg2J9/
RcxSAksMDSNkMe++faiOfqeW/FEIg9i2L9OdxRdJuBmqOzeeElEAteu5LyIbuGEk
sN2tGBIGw/BfmOpCpeV4saP4wi3Vq0avuWa2k4ZYnHI+sMUHTm3cz3JdPa+/GIK2
d+4+y/Pfudtjmufv9Ezzr/lvAgnzu21Wh/SsilrtZ1fK4dlcJeHuI7R5HRT0OFe6
J7jU1aphZvB/srCKerJxbCJPk2tu9I5IBdHvLp5w7ATHtAZHaUSJLXsjATRanwvL
/GiDapted+yrP+4aI7sAFENJVqHER7g+Upksj7nAVe7FeqBNqTTzFJU0aEsqJTxB
vVGl3Q==
-----END CERTIFICATE-----
Generated at Thu Jul 25 21:18:57 2024 by rpki-client on console-ams.rpki-client.org