Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/636582609E674E63471883DB8D40527C9F7E57AD.cer
File:                     636582609E674E63471883DB8D40527C9F7E57AD.cer (raw, json)
Hash identifier:          xamt2/MANGMFI1YZkvdy2AFu+cO3UKGQY3YNVz2dro4=
Subject key identifier:   63:65:82:60:9E:67:4E:63:47:18:83:DB:8D:40:52:7C:9F:7E:57:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4509A8A71B11DA0884C5A51BCF0D432B4B6EF08F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/636582609E674E63471883DB8D40527C9F7E57AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Apr 2024 11:41:38 +0000
Certificate not after:    Tue 15 Apr 2025 11:46:38 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 12:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:09:a8:a7:1b:11:da:08:84:c5:a5:1b:cf:0d:43:2b:4b:6e:f0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 11:41:38 2024 GMT
            Not After : Apr 15 11:46:38 2025 GMT
        Subject: CN=636582609E674E63471883DB8D40527C9F7E57AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:1e:7b:fb:51:b7:6b:c6:d8:9d:e4:ef:6f:
                    cc:f1:db:8a:ae:fa:aa:db:4e:d5:61:13:bd:2d:70:
                    ce:43:7a:72:a4:43:e9:3f:3e:20:8e:dd:da:aa:ae:
                    a6:35:9a:00:04:a9:b9:c0:e4:ea:66:71:c7:72:ef:
                    dc:72:26:7d:ba:3f:60:65:4a:94:78:f7:23:1d:e6:
                    a7:69:7b:5f:5b:c6:3f:57:b5:77:38:26:b4:11:d2:
                    2e:66:77:d2:f2:ef:4b:2e:3a:3a:f7:4e:15:b1:df:
                    af:e2:16:6d:41:e0:64:38:d5:c0:11:0b:19:09:c1:
                    a7:93:15:78:ad:a1:02:46:e2:22:de:cf:11:19:9f:
                    ad:22:c0:6a:10:24:40:aa:e6:15:91:db:cc:a5:80:
                    cb:90:4c:99:45:dd:ae:4d:e4:5a:4e:72:f8:2c:b1:
                    c2:0e:ee:e4:da:1d:50:26:be:bd:3d:6f:16:91:da:
                    9a:89:da:5e:3c:51:d3:07:91:f1:c0:c0:f8:8a:64:
                    7e:0e:1e:84:a8:b2:f9:5a:d8:0e:61:3e:a9:13:56:
                    aa:79:5a:0c:57:d2:c9:ba:66:1a:46:4b:b8:40:ae:
                    b2:5b:68:a5:2f:98:19:72:e9:7e:6d:1b:2d:a4:ba:
                    e0:d0:d2:cc:b9:99:b9:61:b2:62:8f:e3:a0:60:1c:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:65:82:60:9E:67:4E:63:47:18:83:DB:8D:40:52:7C:9F:7E:57:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/636582609E674E63471883DB8D40527C9F7E57AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         37:af:97:4a:cc:77:88:70:9c:90:ff:77:c6:e8:d7:8c:36:5f:
         d6:c3:a8:e1:43:5c:54:ea:e1:8b:d3:36:a0:7b:c9:08:db:e5:
         ed:29:df:f0:68:b5:4b:39:bd:0e:51:0c:59:45:d5:30:03:a0:
         97:9a:06:19:45:a4:b4:6b:c6:d7:f4:48:a5:ab:85:ad:9e:01:
         34:5b:f2:f4:6c:8c:86:f4:ee:08:0b:09:f2:2a:15:3a:7b:d1:
         d0:ce:32:f4:10:94:3e:5d:46:67:20:59:d0:59:12:4f:a6:bf:
         1b:c4:e0:5f:e3:10:6c:aa:1e:ba:99:9e:7d:b7:e1:05:d8:a3:
         b7:c7:6c:41:ae:50:35:d7:17:3d:a4:13:85:4a:20:db:8f:4c:
         e7:fa:99:fd:df:97:db:55:73:5e:6f:02:ca:5f:39:e7:91:db:
         76:43:02:5f:8d:09:f8:ac:ed:6b:cc:f1:22:a7:b0:93:1a:15:
         18:6b:09:a9:b6:94:af:39:4a:47:50:87:ce:07:3e:fb:78:8f:
         b6:03:8a:90:16:74:f8:ca:93:03:75:57:3b:1c:95:54:c5:86:
         39:76:06:99:9c:1e:77:f6:c9:29:35:df:89:a2:72:42:57:39:
         da:93:81:f8:8a:70:c4:7c:a2:6b:56:91:91:bc:fe:23:7a:12:
         da:4f:d9:01
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURQmopxsR2giExaUbzw1DK0tu8I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTYxMTQxMzhaFw0yNTA0MTUxMTQ2MzhaMDMxMTAvBgNV
BAMTKDYzNjU4MjYwOUU2NzRFNjM0NzE4ODNEQjhENDA1MjdDOUY3RTU3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUB57+1G3a8bYneTvb8zx24qu
+qrbTtVhE70tcM5DenKkQ+k/PiCO3dqqrqY1mgAEqbnA5Opmccdy79xyJn26P2Bl
SpR49yMd5qdpe19bxj9XtXc4JrQR0i5md9Ly70suOjr3ThWx36/iFm1B4GQ41cAR
CxkJwaeTFXitoQJG4iLezxEZn60iwGoQJECq5hWR28ylgMuQTJlF3a5N5FpOcvgs
scIO7uTaHVAmvr09bxaR2pqJ2l48UdMHkfHAwPiKZH4OHoSosvla2A5hPqkTVqp5
WgxX0sm6ZhpGS7hArrJbaKUvmBly6X5tGy2kuuDQ0sy5mblhsmKP46BgHJKhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjZYJgnmdOY0cY
g9uNQFJ8n35XrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNms4
QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0MlpKZUJSSjVKbjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr
OEEyZVV0QndpNWtBOVBKNnhwYXN6QlNjY3ljck5wdDJaSmVCUko1Sm40LzAvNjM2
NTgyNjA5RTY3NEU2MzQ3MTg4M0RCOEQ0MDUyN0M5RjdFNTdBRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeUYMA0EAgACMAcDBQAoBEgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTWDANBgkqhkiG9w0BAQsFAAOCAQEAN6+XSsx3iHCckP93
xujXjDZf1sOo4UNcVOrhi9M2oHvJCNvl7Snf8Gi1Szm9DlEMWUXVMAOgl5oGGUWk
tGvG1/RIpauFrZ4BNFvy9GyMhvTuCAsJ8ioVOnvR0M4y9BCUPl1GZyBZ0FkST6a/
G8TgX+MQbKoeupmefbfhBdijt8dsQa5QNdcXPaQThUog249M5/qZ/d+X21VzXm8C
yl8555HbdkMCX40J+Kzta8zxIqewkxoVGGsJqbaUrzlKR1CHzgc++3iPtgOKkBZ0
+MqTA3VXOxyVVMWGOXYGmZwed/bJKTXfiaJyQlc52pOB+IpwxHyia1aRkbz+I3oS
2k/ZAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org