Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A18EADDA564A5AFA58919635BE82B33C43174020.cer
File:                     A18EADDA564A5AFA58919635BE82B33C43174020.cer (raw, json)
Hash identifier:          Lp8DI1oWuAjmYrfxbegaVDfM6tKcPwIRg4Vq3uD7hDQ=
Subject key identifier:   A1:8E:AD:DA:56:4A:5A:FA:58:91:96:35:BE:82:B3:3C:43:17:40:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67532A1FE570D72FB52A99673E1ED7670AD7FA97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/A18EADDA564A5AFA58919635BE82B33C43174020.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 15:47:01 +0000
Certificate not after:    Mon 29 Sep 2025 15:52:01 +0000
Subordinate resources:    AS: 267155
                          IP: 45.229.144.0/22
                          IP: 2804:48f4::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 11:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:2a:1f:e5:70:d7:2f:b5:2a:99:67:3e:1e:d7:67:0a:d7:fa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 15:47:01 2024 GMT
            Not After : Sep 29 15:52:01 2025 GMT
        Subject: CN=A18EADDA564A5AFA58919635BE82B33C43174020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:04:b3:5f:5d:3e:08:ab:46:30:5a:1f:01:
                    48:fd:27:d2:c0:14:04:ab:dd:bb:b5:2c:66:63:37:
                    9c:e1:7f:e9:59:f7:e1:70:8b:db:6b:c0:ac:2a:d6:
                    1d:0d:bf:59:fc:b0:23:52:a6:5a:c3:c7:d5:90:a3:
                    66:7d:e6:3a:32:ee:c3:cc:4c:4a:05:48:3b:09:22:
                    57:3d:8c:79:69:32:36:d0:90:d0:bc:49:b6:10:d1:
                    a6:d9:5d:98:84:01:0a:c0:b3:2d:57:49:8e:83:72:
                    c8:8d:3f:ae:42:79:95:a3:50:69:0a:7e:36:c8:42:
                    ba:5a:94:e3:fd:78:f2:29:5b:39:86:20:04:a7:be:
                    95:9f:3e:d0:fa:68:64:a1:b0:06:10:5a:85:f8:79:
                    42:a6:ed:ff:9c:d2:0d:5c:fc:3a:4b:da:7c:f3:c6:
                    63:fe:0a:d1:c1:11:75:bb:e8:83:bc:43:28:db:91:
                    bc:e9:0a:45:fb:5f:48:a8:88:25:9f:b7:d0:f1:cb:
                    d8:ba:d8:b1:bb:25:1d:bf:1a:d7:19:30:51:68:74:
                    29:6b:36:a5:c6:cd:75:48:18:74:7b:10:ed:65:89:
                    4e:55:c2:4c:af:60:79:17:82:c6:9f:05:62:1a:7a:
                    a5:4d:dd:b1:9a:2f:87:81:7e:93:3f:2d:45:5a:60:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:8E:AD:DA:56:4A:5A:FA:58:91:96:35:BE:82:B3:3C:43:17:40:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/A18EADDA564A5AFA58919635BE82B33C43174020.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.144.0/22
                IPv6:
                  2804:48f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267155

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:f7:40:38:66:ee:6d:68:7b:5a:45:13:03:c3:b7:bd:0e:
         d9:3d:fb:e4:c0:6a:19:22:32:39:7d:4f:1c:4a:12:fe:24:dd:
         e2:0c:53:68:6b:72:05:2a:e8:1c:b4:6c:e3:9e:cc:d2:90:18:
         cb:e9:b4:64:56:16:d2:b3:f6:e9:fc:8c:3e:5e:0a:65:1a:dc:
         7c:19:3f:d3:26:7c:c2:df:48:04:01:c6:24:e0:0e:8a:a6:c2:
         af:e1:85:83:d4:57:ca:df:ac:3d:f9:90:a7:4e:ce:ed:55:4d:
         8b:58:09:04:4e:b2:74:c6:48:78:4b:02:24:f6:80:31:e6:19:
         75:7d:93:47:de:4d:33:73:a5:d7:fd:5d:1d:cd:83:82:20:1d:
         74:84:19:19:08:58:53:37:33:0e:9a:28:b1:f2:92:9d:47:46:
         53:cc:5f:78:26:51:c4:9f:04:d7:49:5f:14:a9:1a:df:bc:15:
         0d:61:0b:17:e2:14:52:5e:c1:ec:20:85:6b:72:bb:d8:63:e9:
         72:ab:4f:b1:3d:54:ba:39:0f:c7:24:c2:77:f5:fa:73:30:57:
         56:40:9c:52:e6:95:db:4e:ff:00:0c:3a:07:55:74:75:3e:ea:
         1a:4f:22:1c:79:c9:34:81:09:07:b7:40:c2:b5:ac:d4:61:ed:
         8c:b5:86:d1
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUZ1MqH+Vw1y+1KplnPh7XZwrX+pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAxNTQ3MDFaFw0yNTA5MjkxNTUyMDFaMDMxMTAvBgNV
BAMTKEExOEVBRERBNTY0QTVBRkE1ODkxOTYzNUJFODJCMzNDNDMxNzQwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOASzX10+CKtGMFofAUj9J9LA
FASr3bu1LGZjN5zhf+lZ9+Fwi9trwKwq1h0Nv1n8sCNSplrDx9WQo2Z95joy7sPM
TEoFSDsJIlc9jHlpMjbQkNC8SbYQ0abZXZiEAQrAsy1XSY6DcsiNP65CeZWjUGkK
fjbIQrpalOP9ePIpWzmGIASnvpWfPtD6aGShsAYQWoX4eUKm7f+c0g1c/DpL2nzz
xmP+CtHBEXW76IO8QyjbkbzpCkX7X0ioiCWft9Dxy9i62LG7JR2/GtcZMFFodClr
NqXGzXVIGHR7EO1liU5VwkyvYHkXgsafBWIaeqVN3bGaL4eBfpM/LUVaYKQHAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShjq3aVkpa+liR
ljW+grM8QxdAIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0FO
OVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0FO
OVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMS9BMThF
QUREQTU2NEE1QUZBNTg5MTk2MzVCRTgyQjMzQzQzMTc0MDIwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5ZAwDQQCAAIwBwMFACgESPQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBOTMA0GCSqGSIb3DQEBCwUAA4IBAQAPBPdAOGbubWh7WkUT
A8O3vQ7ZPfvkwGoZIjI5fU8cShL+JN3iDFNoa3IFKugctGzjnszSkBjL6bRkVhbS
s/bp/Iw+XgplGtx8GT/TJnzC30gEAcYk4A6KpsKv4YWD1FfK36w9+ZCnTs7tVU2L
WAkETrJ0xkh4SwIk9oAx5hl1fZNH3k0zc6XX/V0dzYOCIB10hBkZCFhTNzMOmiix
8pKdR0ZTzF94JlHEnwTXSV8UqRrfvBUNYQsX4hRSXsHsIIVrcrvYY+lyq0+xPVS6
OQ/HJMJ39fpzMFdWQJxS5pXbTv8ADDoHVXR1PuoaTyIceck0gQkHt0DCtazUYe2M
tYbR
-----END CERTIFICATE-----
Generated at Sun Nov 3 14:28:07 2024 by rpki-client on console-ams.rpki-client.org