Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/972694EE1DF12271C4816B3ED5C698153BA29B20.cer
File:                     972694EE1DF12271C4816B3ED5C698153BA29B20.cer (raw, json)
Hash identifier:          Q5z1L/zhsS5zV6xXa/IHiaObxfY1PiwYZUkZBDpInIw=
Subject key identifier:   97:26:94:EE:1D:F1:22:71:C4:81:6B:3E:D5:C6:98:15:3B:A2:9B:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F1ACB31F612DB1C85C211902F1CA81021891802
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/1/972694EE1DF12271C4816B3ED5C698153BA29B20.mft
caRepository:             rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:46:42 +0000
Certificate not after:    Thu 03 Apr 2025 07:51:42 +0000
Subordinate resources:    AS: 271673
                          IP: 131.255.130.0/24
                          IP: 190.9.127.0/24
                          IP: 201.218.190.0/23
                          IP: 2804:7f34::/32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 11:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1a:cb:31:f6:12:db:1c:85:c2:11:90:2f:1c:a8:10:21:89:18:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:46:42 2024 GMT
            Not After : Apr  3 07:51:42 2025 GMT
        Subject: CN=972694EE1DF12271C4816B3ED5C698153BA29B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:15:63:b5:c5:2c:7b:72:95:1d:00:8a:1c:
                    41:b4:25:25:ff:84:57:4c:3a:cc:46:e5:7a:3e:5f:
                    62:a5:e5:ae:66:b7:f0:f1:46:41:92:cc:53:ed:61:
                    b1:54:44:b8:b4:16:72:24:ab:32:23:f3:30:02:70:
                    68:ec:a6:d0:5e:c9:da:99:19:81:fd:ec:af:5b:b5:
                    f0:1e:2e:07:06:fc:75:2a:25:da:20:fc:cd:6a:84:
                    57:37:09:f9:a0:88:09:31:4b:15:ad:d6:8b:51:8e:
                    2f:f8:9e:98:1a:9d:01:68:d6:8d:43:16:78:25:4a:
                    90:47:9f:96:cb:8a:4e:21:9e:4d:e8:8c:d5:fc:34:
                    d2:7a:bd:b3:f1:9c:45:d0:11:67:ca:c3:8c:69:e4:
                    ea:fc:75:5e:00:b3:8c:8e:6b:59:4c:06:8e:32:85:
                    a6:bf:76:a4:b9:ab:44:52:1f:82:66:94:9e:81:70:
                    31:81:36:40:8c:99:03:d1:a8:be:14:a3:b1:26:c5:
                    2f:5a:33:36:03:14:e7:29:28:d3:eb:85:d1:1c:83:
                    79:57:3e:40:32:7f:dc:8c:5a:be:82:82:93:cc:a7:
                    a3:98:cf:ea:17:de:5a:7c:4d:24:5d:18:29:17:63:
                    e1:0d:1f:c0:dd:d2:45:18:82:d2:b3:d5:25:67:02:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:26:94:EE:1D:F1:22:71:C4:81:6B:3E:D5:C6:98:15:3B:A2:9B:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/1/972694EE1DF12271C4816B3ED5C698153BA29B20.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.130.0/24
                  190.9.127.0/24
                  201.218.190.0/23
                IPv6:
                  2804:7f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271673

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:c9:ca:30:4b:75:27:42:27:a5:11:2b:90:a0:cb:2b:a8:
         a0:c8:8f:b8:55:13:18:04:a5:88:3e:9e:5f:15:2c:3e:6d:c5:
         28:ec:9d:f9:1e:99:c8:42:6f:48:fd:5d:d5:cb:7d:17:63:65:
         c9:c7:75:8a:54:83:59:fc:3a:bf:79:ea:40:ae:98:b8:21:ff:
         37:9a:b3:19:80:82:8e:d5:d3:40:9d:40:ff:49:0e:b1:a8:c2:
         6c:1e:38:05:0c:92:82:a7:e9:dd:83:16:42:bf:43:53:78:75:
         ab:7c:a4:72:66:7e:ca:72:31:60:fb:53:8c:fa:a1:7e:15:5f:
         19:10:15:1d:1b:88:17:3c:99:de:06:81:54:3f:69:8a:1c:43:
         e9:61:5c:6c:4a:01:2d:cd:9a:a8:05:8c:f0:ac:b8:34:9f:9a:
         c9:7c:c7:22:65:b8:2b:9c:04:4d:08:c0:a8:c1:69:44:13:59:
         fc:9a:16:5b:e1:ef:6e:a8:4c:1c:d6:a2:10:14:5b:22:de:f2:
         50:3c:3b:15:2e:bd:95:cf:96:ae:cc:dd:57:c8:70:7e:0e:68:
         b7:33:61:a3:76:ee:da:7a:30:3a:0a:eb:af:a2:63:25:63:3b:
         61:4d:05:2e:a3:e3:46:7a:a5:17:8f:84:5e:66:d1:a2:1a:03:
         0c:2c:38:33
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIUDxrLMfYS2xyFwhGQLxyoECGJGAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzQ2NDJaFw0yNTA0MDMwNzUxNDJaMDMxMTAvBgNV
BAMTKDk3MjY5NEVFMURGMTIyNzFDNDgxNkIzRUQ1QzY5ODE1M0JBMjlCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WRVjtcUse3KVHQCKHEG0JSX/
hFdMOsxG5Xo+X2Kl5a5mt/DxRkGSzFPtYbFURLi0FnIkqzIj8zACcGjsptBeydqZ
GYH97K9btfAeLgcG/HUqJdog/M1qhFc3CfmgiAkxSxWt1otRji/4npganQFo1o1D
FnglSpBHn5bLik4hnk3ojNX8NNJ6vbPxnEXQEWfKw4xp5Or8dV4As4yOa1lMBo4y
haa/dqS5q0RSH4JmlJ6BcDGBNkCMmQPRqL4Uo7EmxS9aMzYDFOcpKNPrhdEcg3lX
PkAyf9yMWr6CgpPMp6OYz+oX3lp8TSRdGCkXY+ENH8Dd0kUYgtKz1SVnAiPjAgMB
AAGjggNEMIIDQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXJpTuHfEiccSB
az7VxpgVO6KbIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdzdS
dTFOQ0NoVGRvUDk1bmpDbmZVWkR3N2VTaW12MzRWenhaMVJvQWJ5TS8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdzdS
dTFOQ0NoVGRvUDk1bmpDbmZVWkR3N2VTaW12MzRWenhaMVJvQWJ5TS8xLzk3MjY5
NEVFMURGMTIyNzFDNDgxNkIzRUQ1QzY5ODE1M0JBMjlCMjAubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB
/wQrMCkwGAQCAAEwEgMEAIP/ggMEAL4JfwMEAcnavjANBAIAAjAHAwUAKAR/NDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJTkwDQYJKoZIhvcNAQELBQADggEBAA+W
ycowS3UnQielESuQoMsrqKDIj7hVExgEpYg+nl8VLD5txSjsnfkemchCb0j9XdXL
fRdjZcnHdYpUg1n8Or956kCumLgh/zeasxmAgo7V00CdQP9JDrGowmweOAUMkoKn
6d2DFkK/Q1N4dat8pHJmfspyMWD7U4z6oX4VXxkQFR0biBc8md4GgVQ/aYocQ+lh
XGxKAS3NmqgFjPCsuDSfmsl8xyJluCucBE0IwKjBaUQTWfyaFlvh726oTBzWohAU
WyLe8lA8OxUuvZXPlq7M3VfIcH4OaLczYaN27tp6MDoK66+iYyVjO2FNBS6j40Z6
pRePhF5m0aIaAwwsODM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org