Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BDE455A8390B48AC436773E700196629C99675E.cer
File:                     9BDE455A8390B48AC436773E700196629C99675E.cer (raw, json)
Hash identifier:          3w4E1O4mwNf/fxIdakc/ISzqcUs4/kbp76sZUj6uu4I=
Subject key identifier:   9B:DE:45:5A:83:90:B4:8A:C4:36:77:3E:70:01:96:62:9C:99:67:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       38EFEAF6639D2E6787B5CCA9370FE022A060FD24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/9BDE455A8390B48AC436773E700196629C99675E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:25:40 +0000
Certificate not after:    Thu 03 Apr 2025 04:30:40 +0000
Subordinate resources:    AS: 269090
                          IP: 45.178.76.0/22
                          IP: 2804:5f4c::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 03:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ef:ea:f6:63:9d:2e:67:87:b5:cc:a9:37:0f:e0:22:a0:60:fd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:25:40 2024 GMT
            Not After : Apr  3 04:30:40 2025 GMT
        Subject: CN=9BDE455A8390B48AC436773E700196629C99675E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:3e:e7:64:97:5e:89:a4:31:c4:ef:3a:b2:
                    fa:1e:3f:16:c0:a0:47:f2:17:05:fd:09:9d:d7:ec:
                    d2:8f:bf:e3:51:a8:ab:50:f3:c4:a4:4f:a1:55:fa:
                    8e:1d:b6:6a:fa:9d:92:6a:5f:94:fc:2e:7a:11:c3:
                    47:8c:31:e2:70:90:00:5a:a3:e2:64:fc:82:e4:cb:
                    a2:4b:8c:63:b3:a7:77:36:d8:98:c5:d8:e0:51:3c:
                    b0:ee:0f:65:e9:78:7e:2e:fd:02:a0:f4:98:91:90:
                    06:e2:b8:fb:b1:fb:e3:6c:3e:6d:ee:7a:f8:5a:e7:
                    4c:3b:62:a3:c6:4b:17:de:cb:fb:25:13:b2:c9:e6:
                    81:29:81:fe:74:6b:8c:2f:d1:ae:63:39:e2:f6:77:
                    9e:c9:8e:47:cf:23:de:84:56:25:d4:74:0e:36:dc:
                    98:f7:54:62:bd:ba:c8:4d:66:d3:0b:60:ea:73:39:
                    4c:2e:39:86:25:95:ee:13:99:8b:fe:dd:d8:fd:78:
                    a8:6c:35:a8:5a:bf:8e:ce:43:b5:b2:0f:63:6d:fc:
                    a7:36:48:ce:d9:cd:42:99:b8:b6:98:c2:9c:51:d4:
                    f6:a9:71:be:5d:2e:8b:32:86:fc:4b:35:27:4f:3d:
                    4b:4b:77:9f:41:8c:a2:c6:ef:a2:b4:b1:c5:1a:02:
                    ec:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:DE:45:5A:83:90:B4:8A:C4:36:77:3E:70:01:96:62:9C:99:67:5E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/9BDE455A8390B48AC436773E700196629C99675E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.76.0/22
                IPv6:
                  2804:5f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269090

    Signature Algorithm: sha256WithRSAEncryption
         50:53:84:5b:e4:8a:e0:a1:c3:ab:4a:ef:2b:ca:09:d0:6c:9e:
         3c:89:60:be:ab:e1:39:80:ab:be:84:8a:04:5a:a5:c2:b5:2c:
         1d:c3:59:6a:ce:e5:d1:ae:31:65:67:03:16:08:fd:64:fd:2d:
         08:4e:3a:45:14:8f:8b:f5:b3:2b:78:56:0e:ff:33:44:86:0f:
         c5:29:20:9f:9b:7b:e3:31:dc:39:dc:97:b5:20:02:ae:4e:7b:
         a6:be:71:b2:86:24:96:27:51:60:a6:78:b3:13:3c:e8:22:f1:
         f1:13:48:07:b2:69:69:32:9e:11:ee:52:9c:d9:fd:63:fe:e8:
         06:37:8f:6f:44:49:f2:06:6b:a9:d4:4d:56:29:98:37:f1:cd:
         d0:39:eb:a0:b5:55:0d:a4:81:03:55:83:10:ce:65:db:4f:bc:
         48:5e:59:09:ce:47:72:f9:77:96:2e:4c:0e:bd:14:0f:d3:5c:
         9e:27:a5:9b:d2:4d:88:13:47:f0:62:55:c2:b5:0e:e7:06:c1:
         b6:0a:4f:31:34:a9:92:57:62:74:55:1f:52:3b:b3:c8:0f:61:
         fc:69:85:17:c1:5d:d0:49:66:87:a6:34:f1:ba:ab:b3:9a:16:
         89:1e:7e:ae:60:32:30:db:81:31:ab:86:a3:f6:06:df:9e:9c:
         ad:51:8b:4c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOO/q9mOdLmeHtcypNw/gIqBg/SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNDI1NDBaFw0yNTA0MDMwNDMwNDBaMDMxMTAvBgNV
BAMTKDlCREU0NTVBODM5MEI0OEFDNDM2NzczRTcwMDE5NjYyOUM5OTY3NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcz7nZJdeiaQxxO86svoePxbA
oEfyFwX9CZ3X7NKPv+NRqKtQ88SkT6FV+o4dtmr6nZJqX5T8LnoRw0eMMeJwkABa
o+Jk/ILky6JLjGOzp3c22JjF2OBRPLDuD2XpeH4u/QKg9JiRkAbiuPux++NsPm3u
evha50w7YqPGSxfey/slE7LJ5oEpgf50a4wv0a5jOeL2d57JjkfPI96EViXUdA42
3Jj3VGK9ushNZtMLYOpzOUwuOYYlle4TmYv+3dj9eKhsNahav47OQ7WyD2Nt/Kc2
SM7ZzUKZuLaYwpxR1Papcb5dLosyhvxLNSdPPUtLd59BjKLG76K0scUaAuzDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSb3kVag5C0isQ2
dz5wAZZinJlnXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFRL
ODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFva2UvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RU
SzgzclQ3MXJmWGpOOER6VDdBS3Q4cUZYdXZ1NUhlS0todHpnMzlRb2tlLzEvOUJE
RTQ1NUE4MzkwQjQ4QUM0MzY3NzNFNzAwMTk2NjI5Qzk5Njc1RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbJMMA0EAgACMAcDBQAoBF9MMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbIjANBgkqhkiG9w0BAQsFAAOCAQEAUFOEW+SK4KHDq0rv
K8oJ0GyePIlgvqvhOYCrvoSKBFqlwrUsHcNZas7l0a4xZWcDFgj9ZP0tCE46RRSP
i/WzK3hWDv8zRIYPxSkgn5t74zHcOdyXtSACrk57pr5xsoYklidRYKZ4sxM86CLx
8RNIB7JpaTKeEe5SnNn9Y/7oBjePb0RJ8gZrqdRNVimYN/HN0DnroLVVDaSBA1WD
EM5l20+8SF5ZCc5Hcvl3li5MDr0UD9Ncnielm9JNiBNH8GJVwrUO5wbBtgpPMTSp
kldidFUfUjuzyA9h/GmFF8Fd0Elmh6Y08bqrs5oWiR5+rmAyMNuBMauGo/YG356c
rVGLTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org