Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6343D595EA29EDA5B18517E166FE497D296FE89F.cer
File:                     6343D595EA29EDA5B18517E166FE497D296FE89F.cer (raw, json)
Hash identifier:          lrSNHgJphsywzbu8pUjnvq4q+AynHjJsbsQVoycgseM=
Subject key identifier:   63:43:D5:95:EA:29:ED:A5:B1:85:17:E1:66:FE:49:7D:29:6F:E8:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66D829903CCDC750C2D4F2630CF3C62640D8F556
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/1/6343D595EA29EDA5B18517E166FE497D296FE89F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:24:56 +0000
Certificate not after:    Wed 02 Apr 2025 18:29:56 +0000
Subordinate resources:    AS: 52910
                          IP: 186.251.38.0/24
                          IP: 2804:1f3c::/36

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 13:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d8:29:90:3c:cd:c7:50:c2:d4:f2:63:0c:f3:c6:26:40:d8:f5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:24:56 2024 GMT
            Not After : Apr  2 18:29:56 2025 GMT
        Subject: CN=6343D595EA29EDA5B18517E166FE497D296FE89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:cc:95:16:f2:1e:75:e7:b0:bc:fa:5d:80:
                    61:70:80:cc:c0:e9:05:04:f7:64:15:a6:1f:26:e7:
                    02:f3:3f:dc:d1:de:8f:23:58:7f:ed:e6:09:a1:d4:
                    92:0d:64:45:70:ca:4b:5f:68:49:44:bb:23:dd:61:
                    76:a3:fb:20:77:35:f6:e0:14:1f:3c:d6:7b:59:55:
                    57:bc:fd:b6:07:f9:9e:10:01:d1:84:17:14:ac:9f:
                    55:79:94:6f:68:25:55:18:12:36:33:4d:fb:73:5b:
                    0e:bd:8e:d3:30:ca:81:72:ea:e6:52:bd:ab:d5:3f:
                    65:6b:ff:f6:6d:da:10:a0:ba:5a:4b:3b:f2:a0:c5:
                    ca:c3:a2:9f:36:18:0f:1f:37:b8:1a:55:f9:d8:9f:
                    7c:58:56:7a:b4:c5:bb:7b:26:19:12:71:89:50:12:
                    ae:25:ea:c4:54:42:aa:ff:c1:68:f3:a7:ad:d0:4a:
                    18:b5:63:57:b3:fc:9f:b3:a6:67:b3:04:04:60:cc:
                    74:8a:33:d8:37:6c:5c:0b:2a:b9:a8:60:76:c6:22:
                    d6:66:c2:2b:52:82:b5:ee:85:4b:97:67:8d:dc:3c:
                    0b:3c:31:b3:f1:f4:5c:cc:3a:27:92:eb:c3:e5:be:
                    28:8e:d2:d4:ae:52:98:89:c5:f7:5c:69:26:32:b2:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:43:D5:95:EA:29:ED:A5:B1:85:17:E1:66:FE:49:7D:29:6F:E8:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/1/6343D595EA29EDA5B18517E166FE497D296FE89F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24
                IPv6:
                  2804:1f3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52910

    Signature Algorithm: sha256WithRSAEncryption
         92:12:51:5e:f7:71:2c:f1:1b:17:d0:b2:03:a4:e6:a0:b3:a5:
         b5:47:c7:b7:60:33:90:a5:5f:49:5a:b0:d7:eb:50:fe:1a:4f:
         1c:4e:fd:75:40:2a:e5:92:ce:e4:cc:e8:db:27:e7:e9:6c:81:
         a5:22:98:de:62:2b:eb:97:d6:1d:e0:cf:e4:9e:59:b5:95:3e:
         59:23:90:cf:72:cf:dc:a2:11:f0:02:d0:b3:94:5b:12:2f:82:
         11:75:a4:6e:9f:8c:cb:51:d3:bf:58:51:a6:82:6e:42:1e:e3:
         16:d4:53:63:0d:8d:49:95:e0:7e:d9:29:fd:7c:51:3f:e4:63:
         b3:65:67:85:f6:86:3f:ba:85:70:97:46:ec:17:25:be:7b:e0:
         f5:0c:a7:4e:c5:18:03:15:80:eb:ad:01:95:35:ee:25:6d:d7:
         ce:91:9a:59:f8:50:ee:c8:15:dc:28:72:8b:b1:39:05:05:ed:
         54:42:a2:dc:df:3e:aa:c7:ba:1d:1e:a5:02:1c:93:a8:c1:d8:
         9b:8c:42:04:71:19:ba:4d:07:a6:32:cb:28:b4:69:da:04:ca:
         0f:3a:ce:8c:09:63:12:d5:c4:12:3c:5f:9f:9a:cd:b4:7c:6a:
         4f:16:b5:1f:f0:c0:7d:ec:42:7f:a6:4f:77:f1:0a:68:59:9d:
         2a:4c:aa:05
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUZtgpkDzNx1DC1PJjDPPGJkDY9VYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI0NTZaFw0yNTA0MDIxODI5NTZaMDMxMTAvBgNV
BAMTKDYzNDNENTk1RUEyOUVEQTVCMTg1MTdFMTY2RkU0OTdEMjk2RkU4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrMyVFvIedeewvPpdgGFwgMzA
6QUE92QVph8m5wLzP9zR3o8jWH/t5gmh1JINZEVwyktfaElEuyPdYXaj+yB3Nfbg
FB881ntZVVe8/bYH+Z4QAdGEFxSsn1V5lG9oJVUYEjYzTftzWw69jtMwyoFy6uZS
vavVP2Vr//Zt2hCgulpLO/KgxcrDop82GA8fN7gaVfnYn3xYVnq0xbt7JhkScYlQ
Eq4l6sRUQqr/wWjzp63QShi1Y1ez/J+zpmezBARgzHSKM9g3bFwLKrmoYHbGItZm
witSgrXuhUuXZ43cPAs8MbPx9FzMOieS68PlviiO0tSuUpiJxfdcaSYyso/jAgMB
AAGjggM7MIIDNzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjQ9WV6intpbGF
F+Fm/kl9KW/onzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREJu
Rm1zRW5WcGhmSm1pYUNiYko2ZktSVEs3TFBCRmtCcEFSTE51OVhLTVAvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RC
bkZtc0VuVnBoZkptaWFDYmJKNmZLUlRLN0xQQkZrQnBBUkxOdTlYS01QLzEvNjM0
M0Q1OTVFQTI5RURBNUIxODUxN0UxNjZGRTQ5N0QyOTZGRTg5Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEH
AQH/BCAwHjAMBAIAATAGAwQAuvsmMA4EAgACMAgDBgQoBB88ADAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMAzq4wDQYJKoZIhvcNAQELBQADggEBAJISUV73cSzxGxfQ
sgOk5qCzpbVHx7dgM5ClX0lasNfrUP4aTxxO/XVAKuWSzuTM6Nsn5+lsgaUimN5i
K+uX1h3gz+SeWbWVPlkjkM9yz9yiEfAC0LOUWxIvghF1pG6fjMtR079YUaaCbkIe
4xbUU2MNjUmV4H7ZKf18UT/kY7NlZ4X2hj+6hXCXRuwXJb574PUMp07FGAMVgOut
AZU17iVt186Rmln4UO7IFdwocouxOQUF7VRCotzfPqrHuh0epQIck6jB2JuMQgRx
GbpNB6Yyyyi0adoEyg86zowJYxLVxBI8X5+azbR8ak8WtR/wwH3sQn+mT3fxCmhZ
nSpMqgU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org