Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer
File:                     AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer (raw, json)
Hash identifier:          Dyp+ubctQ3PXIjQ3WxQ1lEwUKOw59WePIb0QxFR/8ZY=
Subject key identifier:   AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C1AC80FD17CBD67A7B71EE13256056E90E4D888
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Apr 2024 19:19:07 +0000
Certificate not after:    Tue 15 Apr 2025 19:24:07 +0000
Subordinate resources:    AS: 267469
                          IP: 192.141.156.0/22
                          IP: 2804:41f8::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 00:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1a:c8:0f:d1:7c:bd:67:a7:b7:1e:e1:32:56:05:6e:90:e4:d8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 19:19:07 2024 GMT
            Not After : Apr 15 19:24:07 2025 GMT
        Subject: CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:b4:4d:a2:f5:e2:e9:53:a6:6b:f0:14:8a:
                    b4:16:0a:7f:02:ae:a8:5a:24:99:49:22:4e:10:82:
                    ef:98:60:5b:0b:e6:aa:c5:77:07:84:32:85:8b:5a:
                    48:8a:ed:13:20:cb:c0:f2:b7:e9:fe:38:1d:3d:36:
                    cd:ad:02:2d:95:59:1b:00:29:a0:11:6e:5d:ff:0c:
                    94:24:42:b9:23:56:c0:c6:40:0c:86:76:3f:18:93:
                    17:b7:22:92:f9:c5:ab:b8:73:fc:7d:7c:37:dc:b0:
                    9c:05:42:2d:2a:60:ef:d1:0b:1f:98:fa:b9:f5:ee:
                    28:ab:53:c8:99:2d:21:c5:fa:66:eb:99:08:79:79:
                    cf:5e:54:9e:d8:20:05:80:c4:59:82:a9:a4:79:cb:
                    68:95:14:29:df:e5:16:83:4a:a1:b3:7c:05:ae:5b:
                    f4:f8:4d:cf:9c:c1:f1:54:ac:d0:af:4a:9b:3d:6b:
                    e6:c6:98:d6:97:5b:e0:3f:ef:da:f3:8d:1f:3f:32:
                    fe:fb:dc:dd:03:ba:64:24:25:7d:5e:0f:ac:0b:9f:
                    ac:74:53:36:8b:5c:38:79:3e:f5:98:0b:3d:30:d2:
                    4d:5d:ee:c4:96:38:3f:9f:98:8c:e6:22:30:af:85:
                    0d:db:64:2d:32:ab:85:7e:a2:43:30:31:c0:6d:72:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.156.0/22
                IPv6:
                  2804:41f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267469

    Signature Algorithm: sha256WithRSAEncryption
         35:20:00:5a:18:0d:1a:08:fc:62:b0:d3:da:97:d1:db:8b:6d:
         cc:7f:d5:d7:2c:b3:44:4d:c9:cf:e7:74:74:24:9b:e5:b5:92:
         ff:7f:f9:e6:60:25:b2:22:51:2d:36:c5:30:3f:42:c4:f2:b5:
         9e:84:36:2f:56:91:a7:ee:e5:71:13:cd:6d:9f:7d:2c:3d:26:
         c0:12:3e:ec:84:8f:33:e3:2c:1c:85:b9:32:6d:86:7e:b9:87:
         5c:7b:39:7d:01:e9:40:7c:29:c2:7b:36:da:da:27:c4:4a:8a:
         04:c2:d5:77:83:0c:21:3c:39:e9:cb:f3:31:0e:e0:fd:3b:ee:
         3a:3f:59:17:1c:18:ba:b8:01:16:fc:22:d4:e2:c8:1a:5d:a2:
         94:24:a1:98:f6:62:2a:17:1d:b9:b0:63:35:6a:6a:e1:06:8d:
         30:68:dc:d7:d4:bf:73:6e:2c:c5:b1:9d:24:28:da:0a:ef:82:
         59:73:df:d1:ac:91:55:bc:1d:09:4e:e0:60:bd:3b:42:a2:3a:
         6b:76:73:96:4f:15:50:ae:39:77:4d:53:7a:bf:38:4b:4e:8a:
         d7:f6:d6:e0:3c:1a:36:f3:e2:d1:08:f4:66:87:95:5c:40:3f:
         aa:2f:1b:e2:20:01:f4:6c:f7:1b:0b:25:43:58:4a:f0:81:26:
         8c:3a:87:3a
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUHBrID9F8vWentx7hMlYFbpDk2IgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTYxOTE5MDdaFw0yNTA0MTUxOTI0MDdaMDMxMTAvBgNV
BAMTKEFFNDBFOTgyMTRFQ0JEQUMwRjNBNzU5QUVEMkRENzZCMUJBNTZCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSbRNovXi6VOma/AUirQWCn8C
rqhaJJlJIk4Qgu+YYFsL5qrFdweEMoWLWkiK7RMgy8Dyt+n+OB09Ns2tAi2VWRsA
KaARbl3/DJQkQrkjVsDGQAyGdj8Ykxe3IpL5xau4c/x9fDfcsJwFQi0qYO/RCx+Y
+rn17iirU8iZLSHF+mbrmQh5ec9eVJ7YIAWAxFmCqaR5y2iVFCnf5RaDSqGzfAWu
W/T4Tc+cwfFUrNCvSps9a+bGmNaXW+A/79rzjR8/Mv773N0DumQkJX1eD6wLn6x0
UzaLXDh5PvWYCz0w0k1d7sSWOD+fmIzmIjCvhQ3bZC0yq4V+okMwMcBtcs8zAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuQOmCFOy9rA86
dZrtLddrG6VrSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vclZr
aXo2eUNiNGJTTjUyNXphYUdDVnVDZTdnUzVrbUZkTjhQY2tneWtrbi8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vclZr
aXo2eUNiNGJTTjUyNXphYUdDVnVDZTdnUzVrbUZkTjhQY2tneWtrbi8wL0FFNDBF
OTgyMTRFQ0JEQUMwRjNBNzU5QUVEMkRENzZCMUJBNTZCNDkubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAsCNnDANBAIAAjAHAwUAKARB+DAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEFM0wDQYJKoZIhvcNAQELBQADggEBADUgAFoYDRoI/GKw09qX
0duLbcx/1dcss0RNyc/ndHQkm+W1kv9/+eZgJbIiUS02xTA/QsTytZ6ENi9Wkafu
5XETzW2ffSw9JsASPuyEjzPjLByFuTJthn65h1x7OX0B6UB8KcJ7NtraJ8RKigTC
1XeDDCE8OenL8zEO4P077jo/WRccGLq4ARb8ItTiyBpdopQkoZj2YioXHbmwYzVq
auEGjTBo3NfUv3NuLMWxnSQo2grvgllz39GskVW8HQlO4GC9O0KiOmt2c5ZPFVCu
OXdNU3q/OEtOitf21uA8Gjbz4tEI9GaHlVxAP6ovG+IgAfRs9xsLJUNYSvCBJow6
hzo=
-----END CERTIFICATE-----
Generated at Sun Oct 20 03:30:48 2024 by rpki-client on console-ams.rpki-client.org