Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/610FA580591423BC36D2EE3D16B968E308782571.cer
File:                     610FA580591423BC36D2EE3D16B968E308782571.cer (raw, json)
Hash identifier:          lUIriu0f7xfbNarLsoCryMilUkHZXwyq5IOzSluvZuU=
Subject key identifier:   61:0F:A5:80:59:14:23:BC:36:D2:EE:3D:16:B9:68:E3:08:78:25:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BCC5D48077DA61951EF3D0376264BEF24236E7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/610FA580591423BC36D2EE3D16B968E308782571.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 14:49:40 +0000
Certificate not after:    Mon 08 Sep 2025 14:54:40 +0000
Subordinate resources:    AS: 28220
                          IP: 45.4.64.0/22
                          IP: 138.0.100.0/22
                          IP: 168.227.108.0/22
                          IP: 168.228.68.0/22
                          IP: 170.82.92.0/22
                          IP: 177.89.0.0/16
                          IP: 177.137.192.0/20
                          IP: 179.96.192.0/21
                          IP: 179.96.240.0/20
                          IP: 179.190.128.0/17
                          IP: 186.192.16.0/20
                          IP: 186.193.96.0/20
                          IP: 186.208.208.0/21
                          IP: 186.235.0.0/20
                          IP: 186.236.192.0/19
                          IP: 186.251.112.0/21
                          IP: 187.49.192.0/20
                          IP: 187.60.64.0/19
                          IP: 187.61.128.0/17
                          IP: 187.86.96.0/20
                          IP: 187.87.112.0/20
                          IP: 187.108.64.0/20
                          IP: 187.109.176.0/20
                          IP: 187.111.224.0/19
                          IP: 189.45.16.0/20
                          IP: 189.124.128.0/17
                          IP: 191.241.40.0/21
                          IP: 200.233.80.0/20
                          IP: 201.148.188.0/22
                          IP: 2804:54::/32
                          IP: 2804:2140::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 14:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cc:5d:48:07:7d:a6:19:51:ef:3d:03:76:26:4b:ef:24:23:6e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 14:49:40 2024 GMT
            Not After : Sep  8 14:54:40 2025 GMT
        Subject: CN=610FA580591423BC36D2EE3D16B968E308782571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:8e:89:b2:76:3a:e2:0f:09:73:b0:02:57:
                    57:ab:8b:08:92:ce:97:2c:12:5a:76:20:29:4a:09:
                    2f:45:67:e6:b7:a8:61:0b:5e:43:41:cc:08:4c:c6:
                    60:4b:08:49:34:d6:cb:d8:d7:58:1e:ac:4e:09:61:
                    27:dd:dc:0d:eb:26:01:e0:02:53:0f:d6:d9:6f:c1:
                    e8:d8:3f:88:f8:9d:a2:5c:58:a8:3c:e4:ce:0e:6c:
                    90:0e:5f:95:91:ff:b3:6c:92:d5:97:58:97:ed:cb:
                    2f:66:d7:a5:84:4b:a1:5b:af:49:a1:32:0c:a4:ad:
                    3e:14:a7:40:bb:c9:aa:a2:18:6e:40:1e:64:f3:3b:
                    2b:bd:6e:37:05:e1:5a:52:30:c9:dd:93:cb:f4:bc:
                    c8:1c:d3:ff:d2:27:5c:fe:19:b2:64:9f:11:24:09:
                    1c:0d:58:e6:95:84:f9:b0:9d:a7:ff:94:77:ef:78:
                    4f:48:5a:3e:08:e7:e2:06:dc:1f:80:a7:6a:f4:ec:
                    c3:46:bc:25:5c:5e:fe:17:c6:7f:8c:f4:f6:39:2e:
                    35:75:d6:e6:91:27:a9:96:f1:8c:a1:84:d8:d4:28:
                    bc:5d:b1:18:4f:ed:26:e0:cc:cc:96:93:64:e3:e7:
                    40:02:0d:d6:00:2f:9a:0e:6a:12:f3:e4:a9:22:3f:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:0F:A5:80:59:14:23:BC:36:D2:EE:3D:16:B9:68:E3:08:78:25:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/610FA580591423BC36D2EE3D16B968E308782571.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22
                  138.0.100.0/22
                  168.227.108.0/22
                  168.228.68.0/22
                  170.82.92.0/22
                  177.89.0.0/16
                  177.137.192.0/20
                  179.96.192.0/21
                  179.96.240.0/20
                  179.190.128.0/17
                  186.192.16.0/20
                  186.193.96.0/20
                  186.208.208.0/21
                  186.235.0.0/20
                  186.236.192.0/19
                  186.251.112.0/21
                  187.49.192.0/20
                  187.60.64.0/19
                  187.61.128.0/17
                  187.86.96.0/20
                  187.87.112.0/20
                  187.108.64.0/20
                  187.109.176.0/20
                  187.111.224.0/19
                  189.45.16.0/20
                  189.124.128.0/17
                  191.241.40.0/21
                  200.233.80.0/20
                  201.148.188.0/22
                IPv6:
                  2804:54::/32
                  2804:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28220

    Signature Algorithm: sha256WithRSAEncryption
         18:87:90:bf:e8:5c:85:3a:0b:ba:0f:e0:8c:89:e2:fa:34:bd:
         68:e9:e9:a4:97:d0:07:cf:53:46:84:e7:d1:8f:42:a6:fc:67:
         ca:3d:f3:eb:dd:88:eb:b2:3e:52:27:72:46:55:5e:e6:89:2d:
         69:75:fb:d3:f5:0d:a3:64:2e:80:5c:af:0d:d9:20:fd:06:ed:
         7f:e7:c7:13:b3:9e:fe:fc:85:1d:9d:d5:04:bd:76:9c:3d:1a:
         7f:59:ba:99:f0:48:91:73:c2:46:1d:a6:83:c0:2a:ae:50:8f:
         55:44:60:0b:33:23:2b:71:df:02:3c:7f:83:8a:5f:6d:d2:0c:
         60:81:93:50:b4:bb:59:98:c5:5f:de:00:8b:e7:32:a4:ed:96:
         91:9b:4f:c9:a4:ee:78:c3:89:09:b3:4b:34:56:43:fc:85:44:
         9d:79:b2:17:15:d8:46:4e:08:31:1a:45:11:4e:6f:60:cc:0f:
         13:d1:4b:16:30:b2:e7:d4:4e:56:a9:d2:ac:b8:d0:42:48:9a:
         a4:5a:75:f3:12:e6:f2:a5:f8:0b:4e:53:ad:1a:8f:3f:c0:a1:
         ac:e5:be:d8:ce:36:d8:df:ea:4e:64:a9:55:85:84:81:11:60:
         d1:d2:d1:04:c5:8d:da:e2:e1:f3:51:66:15:79:c1:ba:78:7d:
         a2:d9:4d:8f
-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgIUG8xdSAd9phlR7z0DdiZL7yQjbn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDkxNDQ5NDBaFw0yNTA5MDgxNDU0NDBaMDMxMTAvBgNV
BAMTKDYxMEZBNTgwNTkxNDIzQkMzNkQyRUUzRDE2Qjk2OEUzMDg3ODI1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjo6JsnY64g8Jc7ACV1eriwiS
zpcsElp2IClKCS9FZ+a3qGELXkNBzAhMxmBLCEk01svY11gerE4JYSfd3A3rJgHg
AlMP1tlvwejYP4j4naJcWKg85M4ObJAOX5WR/7NsktWXWJftyy9m16WES6Fbr0mh
MgykrT4Up0C7yaqiGG5AHmTzOyu9bjcF4VpSMMndk8v0vMgc0//SJ1z+GbJknxEk
CRwNWOaVhPmwnaf/lHfveE9IWj4I5+IG3B+Ap2r07MNGvCVcXv4Xxn+M9PY5LjV1
1uaRJ6mW8YyhhNjUKLxdsRhP7SbgzMyWk2Tj50ACDdYAL5oOahLz5KkiP+qVAgMB
AAGjggPsMIID6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhD6WAWRQjvDbS
7j0WuWjjCHglcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH
QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk
R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvNjEw
RkE1ODA1OTE0MjNCQzM2RDJFRTNEMTZCOTY4RTMwODc4MjU3MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEFBQcB
BwEB/wSB0DCBzTCBtAQCAAEwga0DBAItBEADBAKKAGQDBAKo42wDBAKo5EQDBAKq
UlwDAwCxWQMEBLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ
0AMEBLrrAAMEBbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBLtWYAMEBLtX
cAMEBLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmU
vDAUBAIAAjAOAwUAKAQAVAMFACgEIUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
bjwwDQYJKoZIhvcNAQELBQADggEBABiHkL/oXIU6C7oP4IyJ4vo0vWjp6aSX0AfP
U0aE59GPQqb8Z8o98+vdiOuyPlInckZVXuaJLWl1+9P1DaNkLoBcrw3ZIP0G7X/n
xxOznv78hR2d1QS9dpw9Gn9ZupnwSJFzwkYdpoPAKq5Qj1VEYAszIytx3wI8f4OK
X23SDGCBk1C0u1mYxV/eAIvnMqTtlpGbT8mk7njDiQmzSzRWQ/yFRJ15shcV2EZO
CDEaRRFOb2DMDxPRSxYwsufUTlap0qy40EJImqRadfMS5vKl+AtOU60ajz/Aoazl
vtjONtjf6k5kqVWFhIERYNHS0QTFjdri4fNRZhV5wbp4faLZTY8=
-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:13 2024 by rpki-client on console-ams.rpki-client.org