Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/940F864B37A260D51E351FD01EC732BF673D1B30.cer
File:                     940F864B37A260D51E351FD01EC732BF673D1B30.cer (raw, json)
Hash identifier:          e+G2SIntYyZnqvAwJ4sMiI4KagznYrEzMD5e4IyL3+o=
Subject key identifier:   94:0F:86:4B:37:A2:60:D5:1E:35:1F:D0:1E:C7:32:BF:67:3D:1B:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B748B36952D27D4091590B1DD70A429FC9EA37B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/1/940F864B37A260D51E351FD01EC732BF673D1B30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:57:31 +0000
Certificate not after:    Thu 03 Apr 2025 20:02:31 +0000
Subordinate resources:    AS: 61755
                          IP: 131.100.44.0/22
                          IP: 2804:1be4::/32

Validation:               Failed, certificate revoked on Thu 02 May 2024 14:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:74:8b:36:95:2d:27:d4:09:15:90:b1:dd:70:a4:29:fc:9e:a3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:57:31 2024 GMT
            Not After : Apr  3 20:02:31 2025 GMT
        Subject: CN=940F864B37A260D51E351FD01EC732BF673D1B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:8f:7e:e4:cb:ea:2e:ab:02:94:6a:db:e9:
                    17:68:32:4d:1b:60:96:b1:8b:97:61:de:1b:dd:12:
                    05:0b:30:e3:3c:48:35:3a:63:46:3b:d8:3e:e7:0e:
                    0b:23:33:aa:91:3f:be:5f:8b:06:74:de:a5:ff:12:
                    2d:f7:be:aa:9a:3a:74:a9:41:c9:51:43:7d:1d:80:
                    bb:c7:b4:28:82:ba:c1:d3:bf:7e:0b:de:33:1d:38:
                    a8:66:5a:52:e8:b6:7a:1d:bd:21:86:d5:ac:10:60:
                    7d:19:1e:73:d5:1a:48:ca:c7:ce:94:ce:1e:6e:01:
                    f7:10:4d:80:1c:73:aa:94:c4:d5:dc:7a:d7:1b:6c:
                    0e:7e:d5:23:c4:b8:f4:23:3a:db:14:09:a3:cc:78:
                    dd:a5:ce:35:41:58:00:0a:d4:ac:2a:5d:dd:d3:fc:
                    f0:07:26:e0:8c:d6:57:b9:65:66:26:14:e9:9a:9b:
                    aa:ed:8c:63:06:b0:8b:3f:00:f3:62:94:be:ba:17:
                    6b:c8:e0:51:ae:ab:e1:a5:6f:dd:5e:ae:e8:d9:95:
                    22:fb:9d:67:33:c2:a2:37:35:d6:80:a6:eb:b1:71:
                    3b:ad:53:9a:23:6f:48:bd:b1:8e:85:23:9a:65:0f:
                    ea:73:46:dc:a2:93:1c:a7:96:c5:69:ed:f6:91:76:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:0F:86:4B:37:A2:60:D5:1E:35:1F:D0:1E:C7:32:BF:67:3D:1B:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/1/940F864B37A260D51E351FD01EC732BF673D1B30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.44.0/22
                IPv6:
                  2804:1be4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61755

    Signature Algorithm: sha256WithRSAEncryption
         d0:48:5b:93:9f:31:0f:29:60:46:18:6a:1e:2a:16:43:e2:f6:
         2a:65:ce:a4:9f:a2:45:30:03:4c:9a:8d:ca:7d:b8:8e:0b:64:
         db:67:ed:6f:19:a4:b3:26:a3:e1:7c:06:08:e6:60:fb:bd:22:
         3c:80:99:61:a3:32:a8:87:03:20:f4:2e:67:c4:53:ac:ba:2e:
         65:6d:2a:73:86:a1:15:dc:24:b8:fb:64:c9:e5:06:d1:81:d3:
         15:d0:9b:c0:00:58:85:7f:8e:e8:b0:1a:56:95:d7:27:32:e5:
         5d:25:73:33:67:57:93:3e:66:21:a0:84:18:51:b1:f8:73:ae:
         1e:59:64:c9:73:10:f1:2e:e2:11:4a:f2:b9:d0:b1:78:37:5c:
         ea:57:4b:f8:62:17:a3:27:41:66:2f:33:68:19:db:c8:41:7a:
         48:b0:f9:75:04:ba:ab:8f:59:67:cc:7e:37:60:f0:d9:e3:cf:
         5c:4f:0b:86:5c:c8:fa:5f:99:dc:bf:1e:7a:9b:92:3a:aa:61:
         de:63:67:73:5a:64:a4:8e:2d:37:5a:0e:e1:63:3e:ad:58:1c:
         df:d5:02:52:f2:57:88:1c:1e:12:1f:7a:71:4a:71:10:12:aa:
         92:59:fb:ea:0c:3d:ed:f9:1a:75:8b:f2:e7:c3:6d:32:26:04:
         42:63:99:ce
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUe3SLNpUtJ9QJFZCx3XCkKfyeo3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxOTU3MzFaFw0yNTA0MDMyMDAyMzFaMDMxMTAvBgNV
BAMTKDk0MEY4NjRCMzdBMjYwRDUxRTM1MUZEMDFFQzczMkJGNjczRDFCMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41o9+5MvqLqsClGrb6RdoMk0b
YJaxi5dh3hvdEgULMOM8SDU6Y0Y72D7nDgsjM6qRP75fiwZ03qX/Ei33vqqaOnSp
QclRQ30dgLvHtCiCusHTv34L3jMdOKhmWlLotnodvSGG1awQYH0ZHnPVGkjKx86U
zh5uAfcQTYAcc6qUxNXcetcbbA5+1SPEuPQjOtsUCaPMeN2lzjVBWAAK1KwqXd3T
/PAHJuCM1le5ZWYmFOmam6rtjGMGsIs/APNilL66F2vI4FGuq+Glb91erujZlSL7
nWczwqI3NdaApuuxcTutU5ojb0i9sY6FI5plD+pzRtyikxynlsVp7faRdp4hAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUD4ZLN6Jg1R41
H9AexzK/Zz0bMDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkNv
MWk4SFhyTms3M2ZZdWFTcHFOYVNwbTFSQk54THVQZ2FhRnQ2N1pUZmMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZD
bzFpOEhYck5rNzNmWXVhU3BxTmFTcG0xUkJOeEx1UGdhYUZ0NjdaVGZjLzEvOTQw
Rjg2NEIzN0EyNjBENTFFMzUxRkQwMUVDNzMyQkY2NzNEMUIzMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg2QsMA0EAgACMAcDBQAoBBvkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxOzANBgkqhkiG9w0BAQsFAAOCAQEA0Ehbk58xDylgRhhq
HioWQ+L2KmXOpJ+iRTADTJqNyn24jgtk22ftbxmksyaj4XwGCOZg+70iPICZYaMy
qIcDIPQuZ8RTrLouZW0qc4ahFdwkuPtkyeUG0YHTFdCbwABYhX+O6LAaVpXXJzLl
XSVzM2dXkz5mIaCEGFGx+HOuHllkyXMQ8S7iEUryudCxeDdc6ldL+GIXoydBZi8z
aBnbyEF6SLD5dQS6q49ZZ8x+N2Dw2ePPXE8LhlzI+l+Z3L8eepuSOqph3mNnc1pk
pI4tN1oO4WM+rVgc39UCUvJXiBweEh96cUpxEBKqkln76gw97fkadYvy58NtMiYE
QmOZzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org