Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.cer
File:                     8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.cer (raw, json)
Hash identifier:          v0FRY08BX8fFunKHpLCegbb1/Mc3OXqeRZU5WacKiFs=
Subject key identifier:   8D:DD:5B:4E:CD:EA:93:0D:3E:92:37:49:0D:72:A4:1D:F4:D9:53:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C4CF82B10B07FC93B8E6FE5B6FAA7631C3A7B83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:08:32 +0000
Certificate not after:    Wed 02 Apr 2025 19:13:32 +0000
Subordinate resources:    AS: 268797
                          IP: 45.172.244.0/22
                          IP: 2804:5acc::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4c:f8:2b:10:b0:7f:c9:3b:8e:6f:e5:b6:fa:a7:63:1c:3a:7b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:08:32 2024 GMT
            Not After : Apr  2 19:13:32 2025 GMT
        Subject: CN=8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:c4:cd:81:5b:77:64:86:21:0f:c4:cb:c2:
                    f2:ac:3f:69:99:f1:ef:34:99:f1:a8:d0:ff:78:eb:
                    f1:8b:9b:cb:7f:7e:a7:d4:68:94:00:03:57:70:2a:
                    69:b4:be:90:44:e3:95:83:d3:c2:b3:0a:e3:60:18:
                    0f:ad:de:d6:33:dd:6d:23:c6:98:31:8b:be:e2:b5:
                    77:de:c2:3a:1c:92:20:06:64:41:c9:f6:b5:79:f0:
                    94:4d:5d:6f:0a:7e:74:57:0a:70:85:46:c9:6a:d3:
                    6b:7d:d5:3c:49:fc:57:1e:f3:eb:74:bb:b8:69:da:
                    fa:3b:35:d7:23:6e:98:f5:98:7d:db:80:12:b9:be:
                    2b:cd:e6:5a:c9:3d:65:d6:f2:31:55:c9:32:e1:29:
                    a9:79:a0:ee:c2:48:45:77:b7:19:e2:b9:39:8c:d6:
                    8a:44:e3:eb:58:0d:70:2c:46:2d:cc:59:71:6f:1e:
                    aa:29:06:6c:67:01:86:e4:fa:e9:de:1f:54:98:36:
                    34:84:09:6e:9b:a7:93:42:3e:48:c8:59:28:4f:99:
                    38:34:57:0a:8f:2e:cd:97:b8:28:47:1c:44:08:e8:
                    b3:20:21:62:6e:88:65:50:4f:5c:1f:07:a4:b1:c4:
                    23:88:4e:c3:6d:0a:7d:1c:83:48:a0:d7:6e:24:aa:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:DD:5B:4E:CD:EA:93:0D:3E:92:37:49:0D:72:A4:1D:F4:D9:53:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.244.0/22
                IPv6:
                  2804:5acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268797

    Signature Algorithm: sha256WithRSAEncryption
         12:46:d7:74:ac:a3:68:a2:c6:f9:5f:67:52:85:42:8b:f9:c9:
         5b:a7:18:ed:7f:3d:8d:02:ca:5e:6d:44:ff:d1:19:4d:9c:f9:
         6c:f5:90:66:18:c3:4c:34:8c:9f:05:42:85:e4:f4:b1:7a:63:
         08:ed:bc:0d:7a:6b:db:1d:03:49:5e:71:d3:b6:db:cc:9d:83:
         90:74:74:74:8b:c2:ab:dc:f3:e5:89:3a:0a:cf:3d:69:30:60:
         f2:96:21:5a:a3:3f:05:e9:92:b3:6e:d8:dc:7c:8e:58:09:fc:
         50:37:d1:76:0c:4f:da:c3:73:ea:2b:17:8c:a6:7f:b8:11:db:
         f4:1a:7f:4f:a6:83:b3:da:c8:64:bc:d5:83:c1:02:f0:dd:db:
         03:6b:0e:f7:f5:af:af:82:e3:ca:4e:56:d0:12:b8:6f:97:0a:
         ed:da:e9:86:6b:52:d8:55:77:e4:2c:f5:68:ee:60:ce:71:7b:
         fd:e4:8d:f7:ac:fd:90:0e:6e:f2:b1:63:e8:64:b3:bd:d1:13:
         69:2c:52:2a:82:c9:4d:3f:66:71:c7:9b:7b:5f:ea:16:45:0f:
         79:49:c8:f5:9e:ac:fd:fd:33:f3:17:61:12:ae:35:5f:39:2c:
         e9:6d:a5:18:62:1b:a8:4b:67:4a:ea:8f:12:6a:f2:4d:16:6d:
         7c:4f:8a:5c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDEz4KxCwf8k7jm/ltvqnYxw6e4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTA4MzJaFw0yNTA0MDIxOTEzMzJaMDMxMTAvBgNV
BAMTKDhEREQ1QjRFQ0RFQTkzMEQzRTkyMzc0OTBENzJBNDFERjREOTUzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nsTNgVt3ZIYhD8TLwvKsP2mZ
8e80mfGo0P946/GLm8t/fqfUaJQAA1dwKmm0vpBE45WD08KzCuNgGA+t3tYz3W0j
xpgxi77itXfewjockiAGZEHJ9rV58JRNXW8KfnRXCnCFRslq02t91TxJ/Fce8+t0
u7hp2vo7Ndcjbpj1mH3bgBK5vivN5lrJPWXW8jFVyTLhKal5oO7CSEV3txniuTmM
1opE4+tYDXAsRi3MWXFvHqopBmxnAYbk+uneH1SYNjSECW6bp5NCPkjIWShPmTg0
VwqPLs2XuChHHEQI6LMgIWJuiGVQT1wfB6SxxCOITsNtCn0cg0ig124kqm8FAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSN3VtOzeqTDT6S
N0kNcqQd9NlTwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODRZ
eDNHckFoN1g1YjdwWFpKUlBQbThMZVRDaHE3cldIOHpmZ2F6NzFNZmUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg0
WXgzR3JBaDdYNWI3cFhaSlJQUG04TGVUQ2hxN3JXSDh6ZmdhejcxTWZlLzEvOERE
RDVCNEVDREVBOTMwRDNFOTIzNzQ5MEQ3MkE0MURGNEQ5NTNDMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaz0MA0EAgACMAcDBQAoBFrMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZ/TANBgkqhkiG9w0BAQsFAAOCAQEAEkbXdKyjaKLG+V9n
UoVCi/nJW6cY7X89jQLKXm1E/9EZTZz5bPWQZhjDTDSMnwVCheT0sXpjCO28DXpr
2x0DSV5x07bbzJ2DkHR0dIvCq9zz5Yk6Cs89aTBg8pYhWqM/BemSs27Y3HyOWAn8
UDfRdgxP2sNz6isXjKZ/uBHb9Bp/T6aDs9rIZLzVg8EC8N3bA2sO9/Wvr4Ljyk5W
0BK4b5cK7drphmtS2FV35Cz1aO5gznF7/eSN96z9kA5u8rFj6GSzvdETaSxSKoLJ
TT9mccebe1/qFkUPeUnI9Z6s/f0z8xdhEq41Xzks6W2lGGIbqEtnSuqPEmryTRZt
fE+KXA==
-----END CERTIFICATE-----
Generated at Tue May 28 18:07:11 2024 by rpki-client on console-ams.rpki-client.org