Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/814B19EAFD5E8EE554D1B495B802D2731707D61E.cer
File:                     814B19EAFD5E8EE554D1B495B802D2731707D61E.cer (raw, json)
Hash identifier:          a5xYKIfslpCtnSj4gizePDtOt9gDger+0B9y5I10fDU=
Subject key identifier:   81:4B:19:EA:FD:5E:8E:E5:54:D1:B4:95:B8:02:D2:73:17:07:D6:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B1B3F2AA6B5C137CC393650D388D16ABF39DA86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/814B19EAFD5E8EE554D1B495B802D2731707D61E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jul 2024 19:52:02 +0000
Certificate not after:    Fri 11 Jul 2025 19:57:02 +0000
Subordinate resources:    AS: 264899
                          IP: 168.228.4.0/22
                          IP: 2804:2f90::/32

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 23:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:3f:2a:a6:b5:c1:37:cc:39:36:50:d3:88:d1:6a:bf:39:da:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 12 19:52:02 2024 GMT
            Not After : Jul 11 19:57:02 2025 GMT
        Subject: CN=814B19EAFD5E8EE554D1B495B802D2731707D61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:2a:88:ae:6e:e0:52:88:77:02:c3:a1:05:
                    88:53:7d:ed:8a:3a:48:06:46:f3:b9:33:6a:4a:dd:
                    9e:b3:4e:7e:4a:4e:b8:cb:ea:14:04:79:00:ac:52:
                    c1:1b:1d:78:a7:96:4a:5c:7e:2c:b5:c7:9f:05:c4:
                    fa:3d:62:8c:99:5f:ca:66:e4:6c:24:bb:32:8a:a3:
                    4c:18:ac:c6:f9:ae:17:01:fc:04:8a:18:88:ee:a7:
                    76:b4:bc:13:7b:42:01:aa:59:82:e2:96:3b:a1:9a:
                    07:25:c9:e0:22:7c:d2:f8:79:53:d5:6b:bb:eb:2b:
                    71:96:fc:84:f5:5d:c5:71:70:f6:6e:dd:2d:4a:90:
                    23:f1:2f:0f:c6:83:ff:54:e1:5f:82:90:65:c9:4f:
                    20:99:19:24:e0:15:45:0f:a4:8b:f7:9e:10:b0:cd:
                    95:cb:70:9f:ea:f2:6d:1c:41:6f:b2:7c:a2:07:5b:
                    ea:d4:03:a7:bf:6e:3f:d0:02:e7:81:ad:d7:02:fa:
                    53:a3:23:29:74:ea:33:ee:5c:9a:cc:a7:b6:a5:94:
                    73:3d:e4:23:f0:ef:63:24:6d:e0:34:47:9b:55:ed:
                    33:6c:cf:ac:68:4a:4a:cb:a1:a8:b7:07:f4:76:94:
                    23:a6:c4:6b:ea:2e:34:b9:5a:58:f5:4b:ac:1e:b8:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:4B:19:EA:FD:5E:8E:E5:54:D1:B4:95:B8:02:D2:73:17:07:D6:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/814B19EAFD5E8EE554D1B495B802D2731707D61E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/22
                IPv6:
                  2804:2f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264899

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:19:22:6a:77:6f:f2:5d:6e:d8:11:80:70:b1:e9:7c:01:
         d5:54:5b:40:13:1b:d7:79:15:19:ba:10:cc:ae:ad:40:ae:07:
         d9:af:f1:a9:0b:4f:14:4a:6d:94:61:79:0f:ce:63:a5:71:44:
         19:1f:c3:65:89:52:c1:81:86:f9:e1:a0:f5:6d:1f:b9:87:d2:
         2c:2b:cb:d0:f5:41:03:43:f1:f7:54:38:49:ea:34:52:1c:2f:
         c6:d8:2e:08:48:0e:19:69:07:d8:cc:01:32:e5:34:3d:5b:fb:
         c7:4c:27:42:98:03:c2:cd:5c:24:62:7f:e9:a8:94:ad:63:32:
         3c:51:27:1c:97:23:47:fe:07:6d:a1:c2:07:bb:fd:a5:4d:dd:
         43:af:c6:60:c6:74:a3:60:d6:6b:d2:cc:59:a2:9a:d3:c5:d5:
         c5:3b:fc:73:ee:c8:49:21:4a:1c:a9:8c:62:65:2a:a2:b6:f0:
         11:06:bf:ed:32:a6:f0:a9:60:68:cb:72:78:5f:11:c1:a2:3a:
         f2:a1:cf:1e:5c:8f:52:4a:97:e0:26:19:87:57:9c:16:02:88:
         a3:dc:a3:a7:f6:a0:29:9f:dc:40:4c:5e:f5:c0:01:49:a2:1f:
         a7:ea:cf:9f:39:fe:17:9d:eb:9c:4d:31:c2:27:d6:ef:99:6a:
         c3:2c:53:fc
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWxs/Kqa1wTfMOTZQ04jRar852oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTIxOTUyMDJaFw0yNTA3MTExOTU3MDJaMDMxMTAvBgNV
BAMTKDgxNEIxOUVBRkQ1RThFRTU1NEQxQjQ5NUI4MDJEMjczMTcwN0Q2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5yqIrm7gUoh3AsOhBYhTfe2K
OkgGRvO5M2pK3Z6zTn5KTrjL6hQEeQCsUsEbHXinlkpcfiy1x58FxPo9YoyZX8pm
5GwkuzKKo0wYrMb5rhcB/ASKGIjup3a0vBN7QgGqWYLiljuhmgclyeAifNL4eVPV
a7vrK3GW/IT1XcVxcPZu3S1KkCPxLw/Gg/9U4V+CkGXJTyCZGSTgFUUPpIv3nhCw
zZXLcJ/q8m0cQW+yfKIHW+rUA6e/bj/QAueBrdcC+lOjIyl06jPuXJrMp7allHM9
5CPw72MkbeA0R5tV7TNsz6xoSkrLoai3B/R2lCOmxGvqLjS5Wlj1S6weuEljAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBSxnq/V6O5VTR
tJW4AtJzFwfWHjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXZh
cWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNraW0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V2
YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAvODE0
QjE5RUFGRDVFOEVFNTU0RDFCNDk1QjgwMkQyNzMxNzA3RDYxRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqOQEMA0EAgACMAcDBQAoBC+QMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQKwzANBgkqhkiG9w0BAQsFAAOCAQEAs4cZImp3b/JdbtgR
gHCx6XwB1VRbQBMb13kVGboQzK6tQK4H2a/xqQtPFEptlGF5D85jpXFEGR/DZYlS
wYGG+eGg9W0fuYfSLCvL0PVBA0Px91Q4Seo0UhwvxtguCEgOGWkH2MwBMuU0PVv7
x0wnQpgDws1cJGJ/6aiUrWMyPFEnHJcjR/4HbaHCB7v9pU3dQ6/GYMZ0o2DWa9LM
WaKa08XVxTv8c+7ISSFKHKmMYmUqorbwEQa/7TKm8KlgaMtyeF8RwaI68qHPHlyP
UkqX4CYZh1ecFgKIo9yjp/agKZ/cQExe9cABSaIfp+rPnzn+F53rnE0xwifW75lq
wyxT/A==
-----END CERTIFICATE-----
Generated at Thu Sep 12 01:17:28 2024 by rpki-client on console-ams.rpki-client.org