Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.cer
File:                     B3745D7D6DC37088A2D46D36D0AD97DAFD030190.cer (raw, json)
Hash identifier:          5uvusnA3JePgJTGC9Ll7HEIxh4S+v+Ml49yU1DFQNao=
Subject key identifier:   B3:74:5D:7D:6D:C3:70:88:A2:D4:6D:36:D0:AD:97:DA:FD:03:01:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       519C259F531F5702909B0C7BBAF3C4CD196A3D63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Aug 2024 13:03:04 +0000
Certificate not after:    Thu 07 Aug 2025 13:08:04 +0000
Subordinate resources:    AS: 266984
                          IP: 45.226.76.0/22
                          IP: 2804:4658::/32

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 05:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9c:25:9f:53:1f:57:02:90:9b:0c:7b:ba:f3:c4:cd:19:6a:3d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  8 13:03:04 2024 GMT
            Not After : Aug  7 13:08:04 2025 GMT
        Subject: CN=B3745D7D6DC37088A2D46D36D0AD97DAFD030190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:c8:0f:05:3f:36:21:7d:7f:95:48:38:03:
                    60:a9:ce:35:33:94:a9:9d:1a:a3:15:be:bf:27:79:
                    9d:b1:f7:e5:7d:08:8a:5d:e1:52:41:e2:dd:be:f0:
                    8c:91:85:a7:e3:7f:10:01:fc:af:1b:17:df:09:94:
                    cc:ee:28:5e:98:b0:63:3f:7a:c0:85:f5:83:5e:99:
                    8a:20:27:9b:31:02:19:7d:1a:f5:43:b3:2e:32:22:
                    f3:0f:94:3d:15:f7:35:d9:6a:2c:a9:f7:9e:ac:56:
                    19:38:b2:e1:8b:58:10:bf:32:74:42:33:d4:78:54:
                    e1:61:a5:e2:88:75:e0:85:61:77:79:72:b0:00:49:
                    6a:56:c6:80:94:a1:ab:f0:24:be:2d:09:87:0c:32:
                    14:e6:ba:88:fc:6d:9e:94:c7:63:a6:bd:df:6d:81:
                    27:da:4c:eb:0b:ee:ac:85:75:a2:c0:4f:40:21:70:
                    a4:d2:ad:ea:f6:73:d6:42:eb:b6:a6:bb:c7:98:71:
                    cb:03:50:7e:8e:e5:ae:4e:a4:58:b3:b2:87:6a:ce:
                    b8:27:d8:ac:7b:ef:eb:f0:24:1c:10:45:72:78:9c:
                    f9:21:86:c2:63:23:9b:3b:62:ef:b4:19:0d:3a:7f:
                    c9:0c:c6:f5:7a:9f:78:73:6e:47:6e:ed:a8:ad:9e:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:74:5D:7D:6D:C3:70:88:A2:D4:6D:36:D0:AD:97:DA:FD:03:01:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22
                IPv6:
                  2804:4658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266984

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:73:05:12:85:3c:68:c2:6d:c7:78:da:69:03:a8:9a:bb:
         90:13:92:7a:48:e1:a1:49:ee:48:2e:cf:ea:88:b2:a5:d5:f9:
         ec:e2:dd:59:17:e3:bf:ae:00:d9:1d:0e:45:b6:e8:3b:78:4b:
         47:20:07:13:42:cc:8c:c2:8d:44:09:e7:d3:b4:c4:09:9d:09:
         32:72:b0:43:dd:89:04:9f:7b:4f:e4:af:38:6d:e5:15:82:58:
         7b:e0:dd:5f:a4:9f:11:64:9f:ad:58:a2:4d:9f:1a:c6:c6:b5:
         ec:0f:5c:1d:84:51:64:d2:05:f4:aa:b1:8c:e5:27:ac:1c:5b:
         9d:f5:c7:55:1a:ae:eb:7a:29:26:14:a6:ca:5c:df:a5:48:0d:
         17:be:25:a8:15:20:3e:cc:87:ff:69:48:c8:b0:7b:88:f5:bc:
         e3:a1:5b:f3:1f:e3:95:0b:52:96:f6:b3:36:4d:70:4d:5e:ca:
         9c:c0:bd:9f:84:d5:5d:8b:59:8b:a7:cf:6f:1b:6d:0b:b6:fb:
         21:f8:ac:a1:d5:1c:8a:3d:25:4e:66:86:fa:bd:2b:76:53:ae:
         28:e3:d8:1d:43:b8:83:8f:7b:b1:72:d0:6e:af:60:72:d2:01:
         8f:1e:d6:f1:b9:7b:af:32:09:ec:54:82:92:9c:8e:ed:6e:13:
         23:e8:65:a6
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUUZwln1MfVwKQmwx7uvPEzRlqPWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDgxMzAzMDRaFw0yNTA4MDcxMzA4MDRaMDMxMTAvBgNV
BAMTKEIzNzQ1RDdENkRDMzcwODhBMkQ0NkQzNkQwQUQ5N0RBRkQwMzAxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHycgPBT82IX1/lUg4A2CpzjUz
lKmdGqMVvr8neZ2x9+V9CIpd4VJB4t2+8IyRhafjfxAB/K8bF98JlMzuKF6YsGM/
esCF9YNemYogJ5sxAhl9GvVDsy4yIvMPlD0V9zXZaiyp956sVhk4suGLWBC/MnRC
M9R4VOFhpeKIdeCFYXd5crAASWpWxoCUoavwJL4tCYcMMhTmuoj8bZ6Ux2Omvd9t
gSfaTOsL7qyFdaLAT0AhcKTSrer2c9ZC67amu8eYccsDUH6O5a5OpFizsodqzrgn
2Kx77+vwJBwQRXJ4nPkhhsJjI5s7Yu+0GQ06f8kMxvV6n3hzbkdu7aitnsg3AgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzdF19bcNwiKLU
bTbQrZfa/QMBkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlJj
Y1k5ajNOTEh5U2JaZmkxRXREbVZqRzVhMnJQS0VVYVB6eU54dGhNdEYvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlJj
Y1k5ajNOTEh5U2JaZmkxRXREbVZqRzVhMnJQS0VVYVB6eU54dGhNdEYvMS9CMzc0
NUQ3RDZEQzM3MDg4QTJENDZEMzZEMEFEOTdEQUZEMDMwMTkwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt4kwwDQQCAAIwBwMFACgERlgwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBLoMA0GCSqGSIb3DQEBCwUAA4IBAQAQ9nMFEoU8aMJtx3ja
aQOomruQE5J6SOGhSe5ILs/qiLKl1fns4t1ZF+O/rgDZHQ5Ftug7eEtHIAcTQsyM
wo1ECefTtMQJnQkycrBD3YkEn3tP5K84beUVglh74N1fpJ8RZJ+tWKJNnxrGxrXs
D1wdhFFk0gX0qrGM5SesHFud9cdVGq7reikmFKbKXN+lSA0XviWoFSA+zIf/aUjI
sHuI9bzjoVvzH+OVC1KW9rM2TXBNXsqcwL2fhNVdi1mLp89vG20Ltvsh+Kyh1RyK
PSVOZob6vSt2U64o49gdQ7iDj3uxctBur2By0gGPHtbxuXuvMgnsVIKSnI7tbhMj
6GWm
-----END CERTIFICATE-----
Generated at Wed Aug 21 07:45:46 2024 by rpki-client on console-ams.rpki-client.org