Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.cer
File:                     9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.cer (raw, json)
Hash identifier:          pWYanFD+OSTebidHCaBrmZhV9xVtJk+JuMmTU048k80=
Subject key identifier:   9D:01:09:BC:B2:50:87:20:AD:7A:2E:A1:B5:08:AA:24:7A:2D:7B:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46A589C2DFA3DAC49C975879005C073A53F06A71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 22:56:18 +0000
Certificate not after:    Mon 29 Sep 2025 23:01:18 +0000
Subordinate resources:    AS: 270404
                          IP: 190.107.168.0/22
                          IP: 2804:6b80::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 15:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a5:89:c2:df:a3:da:c4:9c:97:58:79:00:5c:07:3a:53:f0:6a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 22:56:18 2024 GMT
            Not After : Sep 29 23:01:18 2025 GMT
        Subject: CN=9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:2c:b6:f4:e0:bf:55:9e:f6:47:d6:3b:29:
                    08:1d:5f:e2:a5:9a:a9:42:78:d1:8a:c7:44:73:51:
                    2c:af:7f:5f:d1:1f:f4:19:a1:04:37:5a:01:d6:35:
                    c5:7c:0f:8c:7f:76:01:0a:b5:19:68:9a:62:ae:d8:
                    50:16:48:67:56:2b:4e:37:df:71:7d:49:7a:e9:81:
                    9f:86:63:38:30:03:a4:30:e2:22:e4:8a:66:12:9d:
                    08:91:8b:bb:0e:07:58:65:15:68:1a:65:a2:c1:37:
                    b1:9a:d6:88:d3:9b:ab:70:88:db:ed:26:da:da:1b:
                    cb:b4:4c:23:b1:b1:22:2c:94:49:f4:a2:8c:b8:e9:
                    94:9d:1b:18:07:45:cf:9e:97:df:65:dc:e1:5a:0a:
                    fd:c7:90:18:38:18:95:e6:54:76:de:de:22:4e:12:
                    c7:e0:6c:3e:87:09:5c:02:d2:3b:fc:7a:63:0b:3e:
                    6c:52:7f:52:bc:0e:a3:5b:bd:c0:0d:93:03:6a:60:
                    87:16:1b:98:b1:bd:4a:bd:8c:72:d1:17:3b:4a:bd:
                    c1:39:58:d6:ce:f7:64:ff:e6:f4:32:63:e8:d0:d4:
                    55:45:81:ea:3c:66:f4:c2:8f:a9:b7:1c:4a:23:3f:
                    dc:5c:2c:32:82:4c:8f:db:c3:81:25:15:e4:fc:71:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:01:09:BC:B2:50:87:20:AD:7A:2E:A1:B5:08:AA:24:7A:2D:7B:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.168.0/22
                IPv6:
                  2804:6b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270404

    Signature Algorithm: sha256WithRSAEncryption
         47:47:f1:be:29:85:77:4c:88:da:e5:7a:2b:59:3a:35:ba:2f:
         e0:07:65:71:2a:ce:8e:b1:57:5c:ed:31:83:b9:e3:c6:df:fe:
         71:46:5a:39:03:77:e9:a7:d0:01:62:52:25:d7:b9:04:af:d2:
         ba:33:8c:9b:a0:b0:c6:8b:2d:44:9c:fe:b1:3d:d6:44:22:59:
         4a:96:4b:52:d5:4b:27:c2:21:9f:7d:02:93:f3:9e:b0:6d:17:
         0d:8d:4f:a1:69:58:cd:59:e7:50:40:89:9a:7f:fe:08:5d:65:
         0f:fc:9d:64:9a:1e:7c:fc:d9:a3:e2:5a:92:1d:2f:f1:7a:0c:
         de:41:5c:eb:8b:d4:2e:ea:39:c7:49:cf:7f:03:13:93:df:d9:
         c3:fa:53:d4:2b:77:85:a7:15:25:61:be:98:70:9d:8b:ac:98:
         4a:8a:40:b1:4c:be:ff:a8:21:8f:bf:bd:de:5a:48:37:19:f2:
         3a:8a:f6:51:9d:5b:2b:5b:90:ee:1d:8f:79:bc:ec:a1:39:1c:
         0c:84:d2:88:fb:75:72:66:6d:41:99:94:45:56:d1:f6:4d:71:
         b6:23:64:aa:27:51:e6:0f:5a:ad:ca:10:63:5f:0a:97:e2:1f:
         15:08:6d:4c:57:e0:76:dd:0b:22:fc:fb:cd:49:28:92:33:c2:
         ff:f1:eb:c8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURqWJwt+j2sScl1h5AFwHOlPwanEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAyMjU2MThaFw0yNTA5MjkyMzAxMThaMDMxMTAvBgNV
BAMTKDlEMDEwOUJDQjI1MDg3MjBBRDdBMkVBMUI1MDhBQTI0N0EyRDdCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBCy29OC/VZ72R9Y7KQgdX+Kl
mqlCeNGKx0RzUSyvf1/RH/QZoQQ3WgHWNcV8D4x/dgEKtRlommKu2FAWSGdWK043
33F9SXrpgZ+GYzgwA6Qw4iLkimYSnQiRi7sOB1hlFWgaZaLBN7Ga1ojTm6twiNvt
JtraG8u0TCOxsSIslEn0ooy46ZSdGxgHRc+el99l3OFaCv3HkBg4GJXmVHbe3iJO
EsfgbD6HCVwC0jv8emMLPmxSf1K8DqNbvcANkwNqYIcWG5ixvUq9jHLRFztKvcE5
WNbO92T/5vQyY+jQ1FVFgeo8ZvTCj6m3HEojP9xcLDKCTI/bw4ElFeT8cUZhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdAQm8slCHIK16
LqG1CKokei174TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Zv
RzRyMllyQ0xabzg3MVNqS1ZVYk1wY3RIVjMyaWRlS1Y0Q2lFR3lUaTEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dW
b0c0cjJZckNMWm84NzFTaktWVWJNcGN0SFYzMmlkZUtWNENpRUd5VGkxLzAvOUQw
MTA5QkNCMjUwODcyMEFEN0EyRUExQjUwOEFBMjQ3QTJEN0JFMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvmuoMA0EAgACMAcDBQAoBGuAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgRDANBgkqhkiG9w0BAQsFAAOCAQEAR0fxvimFd0yI2uV6
K1k6Nbov4AdlcSrOjrFXXO0xg7njxt/+cUZaOQN36afQAWJSJde5BK/SujOMm6Cw
xostRJz+sT3WRCJZSpZLUtVLJ8Ihn30Ck/OesG0XDY1PoWlYzVnnUECJmn/+CF1l
D/ydZJoefPzZo+Jakh0v8XoM3kFc64vULuo5x0nPfwMTk9/Zw/pT1Ct3hacVJWG+
mHCdi6yYSopAsUy+/6ghj7+93lpINxnyOor2UZ1bK1uQ7h2PebzsoTkcDITSiPt1
cmZtQZmURVbR9k1xtiNkqidR5g9arcoQY18Kl+IfFQhtTFfgdt0LIvz7zUkokjPC
//HryA==
-----END CERTIFICATE-----
Generated at Wed Oct 9 23:14:47 2024 by rpki-client on console-ams.rpki-client.org