Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.cer
File:                     540962CBF5A6938F04BFA3344E3804D30CB723D7.cer (raw, json)
Hash identifier:          z5+HN7QNuUNORx952dgvfXFfYf+g7lW7ypKN3b/zwNk=
Subject key identifier:   54:09:62:CB:F5:A6:93:8F:04:BF:A3:34:4E:38:04:D3:0C:B7:23:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EF26482B054DDDA288DA402078C0141A4BCA091
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:17:08 +0000
Certificate not after:    Wed 02 Apr 2025 19:22:08 +0000
Subordinate resources:    AS: 262827
                          IP: 187.84.176.0/20
                          IP: 2804:ccc::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 05:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f2:64:82:b0:54:dd:da:28:8d:a4:02:07:8c:01:41:a4:bc:a0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:17:08 2024 GMT
            Not After : Apr  2 19:22:08 2025 GMT
        Subject: CN=540962CBF5A6938F04BFA3344E3804D30CB723D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:af:b5:c1:37:cf:39:d3:28:81:85:7b:e1:
                    cb:fe:d6:63:1a:8e:23:77:cf:d4:e3:92:59:b9:ce:
                    a7:4e:d2:52:f6:80:5e:0c:75:6f:bc:9b:ec:1c:b6:
                    05:ce:41:5b:98:61:5a:76:49:4a:89:17:e0:67:a1:
                    91:c3:56:ec:35:73:df:de:a4:d0:29:8f:b9:ee:01:
                    83:a1:09:6e:64:c6:60:10:dd:38:d0:83:59:1d:2d:
                    e8:c7:60:87:79:97:54:a4:0a:b3:49:b7:77:dd:7b:
                    ae:4b:e6:17:e3:2c:4a:6d:e2:03:22:1d:88:d0:a6:
                    2a:5f:d0:32:2f:14:dc:75:8a:9e:35:48:21:2d:ac:
                    6e:3e:a5:35:0d:83:46:24:c2:c9:fc:8d:ae:29:50:
                    e4:75:4f:4a:5e:a5:e3:cd:32:3c:7c:da:71:e3:2f:
                    12:4b:24:ac:ad:68:81:cb:2e:13:7b:45:df:6d:9f:
                    db:04:07:e5:35:55:d8:c8:03:84:af:a0:f4:0d:e6:
                    5c:e5:b5:fd:27:df:8b:0d:2f:17:eb:2d:36:ec:e8:
                    3c:94:27:5a:74:d3:10:7a:b5:7a:09:07:8b:42:db:
                    bf:6f:8d:eb:72:f3:c7:05:0f:e4:ae:52:41:2d:55:
                    ec:3a:13:c7:66:09:bc:4b:35:13:cf:a9:64:5c:2f:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:09:62:CB:F5:A6:93:8F:04:BF:A3:34:4E:38:04:D3:0C:B7:23:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/20
                IPv6:
                  2804:ccc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262827

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:d0:37:0b:75:37:94:4c:50:1d:8d:06:11:20:da:16:87:
         22:a3:e9:04:75:28:bb:d9:26:b3:43:c6:5f:64:95:cd:58:81:
         43:58:e7:c1:8f:f9:d2:7c:1a:ca:33:f6:16:b6:5a:db:05:b4:
         21:0b:28:cf:0b:d9:f7:fd:2b:8a:06:b3:b5:fd:ed:3f:89:b3:
         5e:da:a3:96:f4:e5:f1:1c:24:d2:f4:1e:f6:56:7b:75:20:38:
         cc:d5:c9:d4:04:44:da:6f:88:cb:2a:c9:c1:22:87:11:e0:a7:
         9d:6f:26:4a:df:1e:a3:c4:2b:a0:b3:05:ee:15:87:51:c1:16:
         a1:ce:bc:7c:ad:9c:1f:fa:14:0a:9a:2c:04:71:99:a4:fd:d6:
         2b:55:9a:f4:fa:96:77:97:95:88:6e:33:94:79:6d:f0:ba:65:
         e0:87:25:90:69:73:c8:83:6d:90:34:ea:75:55:0d:fc:e8:e4:
         fc:17:8b:80:7f:8a:67:33:fb:4e:ce:88:99:61:b2:fb:e1:99:
         03:e6:ff:e2:6b:86:e9:14:de:49:71:5e:01:85:23:2c:29:6f:
         12:c8:63:4a:41:97:6f:5d:ea:19:6f:f8:96:86:cd:3d:66:bb:
         74:71:53:4a:ab:60:fb:27:55:c7:9b:18:27:f8:1f:c6:aa:0e:
         f0:54:33:e5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDvJkgrBU3doojaQCB4wBQaS8oJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTE3MDhaFw0yNTA0MDIxOTIyMDhaMDMxMTAvBgNV
BAMTKDU0MDk2MkNCRjVBNjkzOEYwNEJGQTMzNDRFMzgwNEQzMENCNzIzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAa+1wTfPOdMogYV74cv+1mMa
jiN3z9Tjklm5zqdO0lL2gF4MdW+8m+wctgXOQVuYYVp2SUqJF+BnoZHDVuw1c9/e
pNApj7nuAYOhCW5kxmAQ3TjQg1kdLejHYId5l1SkCrNJt3fde65L5hfjLEpt4gMi
HYjQpipf0DIvFNx1ip41SCEtrG4+pTUNg0Ykwsn8ja4pUOR1T0pepePNMjx82nHj
LxJLJKytaIHLLhN7Rd9tn9sEB+U1VdjIA4SvoPQN5lzltf0n34sNLxfrLTbs6DyU
J1p00xB6tXoJB4tC279vjety88cFD+SuUkEtVew6E8dmCbxLNRPPqWRcL17nAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUCWLL9aaTjwS/
ozROOATTDLcj1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUFV
UVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1puM2MvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB
VVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzEvNTQw
OTYyQ0JGNUE2OTM4RjA0QkZBMzM0NEUzODA0RDMwQ0I3MjNENy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEu1SwMA0EAgACMAcDBQAoBAzMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCqzANBgkqhkiG9w0BAQsFAAOCAQEAT63QNwt1N5RMUB2N
BhEg2haHIqPpBHUou9kms0PGX2SVzViBQ1jnwY/50nwayjP2FrZa2wW0IQsozwvZ
9/0rigaztf3tP4mzXtqjlvTl8Rwk0vQe9lZ7dSA4zNXJ1ARE2m+IyyrJwSKHEeCn
nW8mSt8eo8QroLMF7hWHUcEWoc68fK2cH/oUCposBHGZpP3WK1Wa9PqWd5eViG4z
lHlt8Lpl4IclkGlzyINtkDTqdVUN/Ojk/BeLgH+KZzP7Ts6ImWGy++GZA+b/4muG
6RTeSXFeAYUjLClvEshjSkGXb13qGW/4lobNPWa7dHFTSqtg+ydVx5sYJ/gfxqoO
8FQz5Q==
-----END CERTIFICATE-----
Generated at Mon Jul 15 07:09:29 2024 by rpki-client on console-fra.rpki-client.org