Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/626981E9FEDC2900347DBAD74639C61FA4957F20.cer
File:                     626981E9FEDC2900347DBAD74639C61FA4957F20.cer (raw, json)
Hash identifier:          tCbmlCvXFcUCqK6QGWKc1QkkD5MErdg0IVHv0RHn2EU=
Subject key identifier:   62:69:81:E9:FE:DC:29:00:34:7D:BA:D7:46:39:C6:1F:A4:95:7F:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DE6F45AE7819EE0975BDA6718C73CE046400304
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/626981E9FEDC2900347DBAD74639C61FA4957F20.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 20:17:03 +0000
Certificate not after:    Wed 09 Apr 2025 20:22:03 +0000
Subordinate resources:    AS: 268328
                          IP: 45.238.72.0/22
                          IP: 2804:4f74::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 12:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e6:f4:5a:e7:81:9e:e0:97:5b:da:67:18:c7:3c:e0:46:40:03:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 20:17:03 2024 GMT
            Not After : Apr  9 20:22:03 2025 GMT
        Subject: CN=626981E9FEDC2900347DBAD74639C61FA4957F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:e1:04:44:15:6a:37:44:d8:dc:3e:30:11:
                    91:78:60:da:b1:30:e0:b9:0f:38:0b:0f:36:aa:68:
                    4d:46:f1:d2:08:96:da:60:3f:c7:f3:d9:32:87:76:
                    fd:c7:c1:35:a4:ac:79:0f:b5:4b:de:73:f9:dc:2d:
                    75:41:61:b3:d2:99:84:32:45:05:38:de:62:3c:2c:
                    57:0e:cb:8d:93:98:d9:90:db:f8:eb:e8:2f:53:3c:
                    70:78:09:f7:8d:9b:e5:10:07:94:1c:05:10:63:4c:
                    7c:bf:d9:07:31:c4:63:ae:9e:0c:8c:9b:d7:fe:cb:
                    b6:1c:7e:3b:bc:89:07:46:ef:34:02:72:aa:02:59:
                    b3:eb:86:b3:9f:79:b1:ce:b9:34:05:4b:35:d4:30:
                    f1:bb:d5:13:1c:77:b5:e9:96:e6:9a:94:6f:11:8c:
                    7e:ee:c7:30:b6:fa:1c:35:b5:a7:a7:56:65:19:28:
                    1d:de:f9:f2:b2:d6:e6:85:61:8c:9b:a9:b0:ce:7b:
                    b5:15:24:db:dd:70:72:4b:89:c3:e8:de:86:f5:e2:
                    39:40:37:0b:0c:af:bb:20:24:48:5b:25:09:c3:0f:
                    15:f1:fe:ac:db:a0:3c:1e:49:cf:a3:4b:95:6a:8f:
                    a2:c1:34:dd:3f:b8:f0:0c:50:00:a7:2c:f5:30:d3:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:69:81:E9:FE:DC:29:00:34:7D:BA:D7:46:39:C6:1F:A4:95:7F:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/626981E9FEDC2900347DBAD74639C61FA4957F20.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.72.0/22
                IPv6:
                  2804:4f74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268328

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:5d:40:b3:be:0b:00:cc:81:1e:5c:af:b0:1a:a0:3b:79:
         c4:07:1e:0d:00:f0:7a:2a:5e:ba:55:cf:50:c8:1e:b6:e7:72:
         28:f3:15:88:ff:91:b7:57:45:c4:b3:b1:92:f9:38:3c:18:ca:
         be:81:7d:8f:e6:89:fe:08:98:e4:9c:fc:04:40:37:28:d3:52:
         d6:6f:f0:c3:e4:e6:58:83:78:35:5b:18:9b:17:46:70:f4:30:
         75:2e:4b:5c:77:22:ee:fa:0b:fc:4b:0c:f6:ae:23:2a:e0:b6:
         ef:fb:d2:9f:e5:8d:f3:6b:36:a7:71:93:23:39:db:45:cb:12:
         5a:6d:41:16:bf:e5:bd:eb:54:f9:75:5c:f2:c3:1d:c2:95:2d:
         51:ca:37:4e:e2:4d:5f:13:fd:8e:46:e8:6e:d0:3a:32:91:52:
         9f:b3:57:f4:b0:f7:8e:22:f7:5b:70:e1:25:70:a7:44:9f:d8:
         2b:f1:82:8a:43:25:54:66:33:47:b1:f9:c2:f6:4f:2e:cb:8e:
         26:34:30:23:24:73:ea:ad:12:f5:7b:52:53:ad:b5:f0:0d:16:
         4f:90:75:16:a5:2a:3d:af:8f:de:2c:d5:f8:54:5a:d9:5b:1a:
         04:19:49:05:64:03:0c:24:0a:3b:69:dc:3c:6a:83:d9:69:c7:
         ee:ad:15:ac
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXeb0WueBnuCXW9pnGMc84EZAAwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTAyMDE3MDNaFw0yNTA0MDkyMDIyMDNaMDMxMTAvBgNV
BAMTKDYyNjk4MUU5RkVEQzI5MDAzNDdEQkFENzQ2MzlDNjFGQTQ5NTdGMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwOEERBVqN0TY3D4wEZF4YNqx
MOC5DzgLDzaqaE1G8dIIltpgP8fz2TKHdv3HwTWkrHkPtUvec/ncLXVBYbPSmYQy
RQU43mI8LFcOy42TmNmQ2/jr6C9TPHB4CfeNm+UQB5QcBRBjTHy/2QcxxGOungyM
m9f+y7Ycfju8iQdG7zQCcqoCWbPrhrOfebHOuTQFSzXUMPG71RMcd7XpluaalG8R
jH7uxzC2+hw1taenVmUZKB3e+fKy1uaFYYybqbDOe7UVJNvdcHJLicPo3ob14jlA
NwsMr7sgJEhbJQnDDxXx/qzboDweSc+jS5Vqj6LBNN0/uPAMUACnLPUw02XZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiaYHp/twpADR9
utdGOcYfpJV/IDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOW9l
c3RnZEpXTnBUZXBIRGIxRXc0U3ZSa3BRWXU2QVFvS3JIc1Z0OVYyTFgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlv
ZXN0Z2RKV05wVGVwSERiMUV3NFN2UmtwUVl1NkFRb0tySHNWdDlWMkxYLzAvNjI2
OTgxRTlGRURDMjkwMDM0N0RCQUQ3NDYzOUM2MUZBNDk1N0YyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLe5IMA0EAgACMAcDBQAoBE90MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQYKDANBgkqhkiG9w0BAQsFAAOCAQEARLFdQLO+CwDMgR5c
r7AaoDt5xAceDQDweipeulXPUMgetudyKPMViP+Rt1dFxLOxkvk4PBjKvoF9j+aJ
/giY5Jz8BEA3KNNS1m/ww+TmWIN4NVsYmxdGcPQwdS5LXHci7voL/EsM9q4jKuC2
7/vSn+WN82s2p3GTIznbRcsSWm1BFr/lvetU+XVc8sMdwpUtUco3TuJNXxP9jkbo
btA6MpFSn7NX9LD3jiL3W3DhJXCnRJ/YK/GCikMlVGYzR7H5wvZPLsuOJjQwIyRz
6q0S9XtSU6218A0WT5B1FqUqPa+P3izV+FRa2VsaBBlJBWQDDCQKO2ncPGqD2WnH
7q0VrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org