Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82DF1307485B5A94318FF70456FD40F6F95D1B94.cer
File:                     82DF1307485B5A94318FF70456FD40F6F95D1B94.cer (raw, json)
Hash identifier:          c49Fvrnrodl4ED3ZmynGA+wA18uwSRBd7ppxWwxgt2U=
Subject key identifier:   82:DF:13:07:48:5B:5A:94:31:8F:F7:04:56:FD:40:F6:F9:5D:1B:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11AE93B51C70F9BBF4C31D4FD3D589936C754510
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/1/82DF1307485B5A94318FF70456FD40F6F95D1B94.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:11 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:11 +0000
Subordinate resources:    AS: 271195
                          IP: 179.49.152.0/22
                          IP: 2804:77b8::/32

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ae:93:b5:1c:70:f9:bb:f4:c3:1d:4f:d3:d5:89:93:6c:75:45:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:11 2024 GMT
            Not After : Apr  2 19:03:11 2025 GMT
        Subject: CN=82DF1307485B5A94318FF70456FD40F6F95D1B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:5f:2f:39:81:cf:1a:9f:8a:57:cb:d6:a9:
                    f9:77:83:b6:1e:22:a9:9f:3c:35:fe:ed:c9:33:d3:
                    ef:61:57:a9:c2:da:17:90:62:07:14:78:9c:86:80:
                    d9:d9:18:e6:fb:a5:60:39:12:df:a3:b9:09:a5:71:
                    e2:34:cf:d3:d1:e6:da:cf:89:ae:16:b8:01:58:dd:
                    73:c5:79:e7:c2:d0:69:6d:0c:d0:45:0a:e0:ac:de:
                    43:0b:75:e3:89:0b:c2:b9:a4:bb:3c:d1:1e:46:91:
                    89:79:d7:68:0e:35:a5:8a:50:f6:a5:57:ae:5a:8e:
                    62:56:ce:2b:aa:d5:89:79:82:08:0d:c9:5e:35:23:
                    9a:92:e6:03:12:68:96:a7:04:0a:55:22:98:51:9b:
                    99:f5:21:e7:af:6c:8f:74:b7:45:36:7e:1c:01:57:
                    92:9a:ce:2e:de:31:7a:fa:be:ff:a3:b5:94:57:f4:
                    6e:cc:69:fd:87:53:0a:6d:d4:59:e8:3f:4b:70:50:
                    95:c1:cb:b7:ae:f3:24:c7:15:50:ce:21:ad:ff:8f:
                    e7:cd:aa:7e:42:8a:81:8b:a3:2c:a0:aa:ac:1e:f2:
                    31:ed:e4:e4:16:69:dd:ce:31:fd:52:58:f9:b6:94:
                    7c:98:68:a9:d7:8c:7c:15:8a:ef:d5:bc:92:87:a8:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:DF:13:07:48:5B:5A:94:31:8F:F7:04:56:FD:40:F6:F9:5D:1B:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/1/82DF1307485B5A94318FF70456FD40F6F95D1B94.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.152.0/22
                IPv6:
                  2804:77b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271195

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:88:79:91:0b:a4:ba:81:e5:4a:f3:89:be:86:f5:c3:13:
         b8:3a:8e:84:1b:18:ac:90:37:9b:b8:c5:2e:53:15:59:ff:d6:
         b2:77:46:b0:67:f1:99:cb:d2:36:e2:de:8f:8d:3f:e7:99:50:
         57:20:a0:e8:00:ac:0a:79:c8:a2:11:68:ce:c1:ff:19:f8:6a:
         ed:c2:e2:55:78:b7:d9:ae:fa:62:4d:36:4d:6e:43:28:69:b0:
         3b:15:42:60:38:c2:47:30:04:62:aa:2b:e6:45:86:6e:02:9c:
         8f:f0:00:d0:94:4b:b7:e0:50:8f:92:8e:41:2d:6b:16:58:ec:
         98:fd:07:87:f6:d6:b4:77:3a:ce:8a:b6:dc:ec:42:0c:28:24:
         4f:53:78:fb:d7:b0:0a:c2:50:60:08:cf:7c:c9:fa:ce:ce:0b:
         7a:a6:62:26:b2:00:f9:9b:89:f3:84:46:29:c4:9d:b9:f3:0d:
         f0:13:2f:61:8e:17:8a:f3:50:75:a6:ef:2a:8c:23:46:0b:cc:
         8f:61:d6:91:b9:04:7d:3b:74:90:fd:aa:f8:f7:00:06:29:e3:
         77:d9:c0:63:54:14:51:44:f6:6f:00:74:90:b4:79:12:28:13:
         f8:64:13:d2:1d:bd:e2:53:42:6c:02:bb:b1:58:34:df:e6:e8:
         54:85:d6:dc
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEa6TtRxw+bv0wx1P09WJk2x1RRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODU4MTFaFw0yNTA0MDIxOTAzMTFaMDMxMTAvBgNV
BAMTKDgyREYxMzA3NDg1QjVBOTQzMThGRjcwNDU2RkQ0MEY2Rjk1RDFCOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmn18vOYHPGp+KV8vWqfl3g7Ye
IqmfPDX+7ckz0+9hV6nC2heQYgcUeJyGgNnZGOb7pWA5Et+juQmlceI0z9PR5trP
ia4WuAFY3XPFeefC0GltDNBFCuCs3kMLdeOJC8K5pLs80R5GkYl512gONaWKUPal
V65ajmJWziuq1Yl5gggNyV41I5qS5gMSaJanBApVIphRm5n1IeevbI90t0U2fhwB
V5Kazi7eMXr6vv+jtZRX9G7Maf2HUwpt1FnoP0twUJXBy7eu8yTHFVDOIa3/j+fN
qn5CioGLoyygqqwe8jHt5OQWad3OMf1SWPm2lHyYaKnXjHwViu/VvJKHqKrlAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSC3xMHSFtalDGP
9wRW/UD2+V0blDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM040
ZllyRzl0RTlYclFQenBLbXN5dzh3THFkZ3pxNG5ZN3Zzb0RLemNFd0UvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNO
NGZZckc5dEU5WHJRUHpwS21zeXc4d0xxZGd6cTRuWTd2c29ES3pjRXdFLzEvODJE
RjEzMDc0ODVCNUE5NDMxOEZGNzA0NTZGRDQwRjZGOTVEMUI5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCszGYMA0EAgACMAcDBQAoBHe4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjWzANBgkqhkiG9w0BAQsFAAOCAQEAkEuIeZELpLqB5Urz
ib6G9cMTuDqOhBsYrJA3m7jFLlMVWf/WsndGsGfxmcvSNuLej40/55lQVyCg6ACs
CnnIohFozsH/Gfhq7cLiVXi32a76Yk02TW5DKGmwOxVCYDjCRzAEYqor5kWGbgKc
j/AA0JRLt+BQj5KOQS1rFljsmP0Hh/bWtHc6zoq23OxCDCgkT1N4+9ewCsJQYAjP
fMn6zs4LeqZiJrIA+ZuJ84RGKcSdufMN8BMvYY4XivNQdabvKowjRgvMj2HWkbkE
fTt0kP2q+PcABinjd9nAY1QUUUT2bwB0kLR5EigT+GQT0h294lNCbAK7sVg03+bo
VIXW3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org