Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
File:                     E16D74041965C3729D5552BEFB00E767BB091F4E.cer (raw, json)
Hash identifier:          WrfIFDITGoNsdaTZhS8tr12S0zg+8rCf49NklQBlwRo=
Subject key identifier:   E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37E2D3B57D0312A6CDAE09452641585FD4386A6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:16:07 +0000
Certificate not after:    Thu 03 Apr 2025 07:21:07 +0000
Subordinate resources:    AS: 268678
                          IP: 45.165.148.0/22
                          IP: 2804:54ec::/32

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 12:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e2:d3:b5:7d:03:12:a6:cd:ae:09:45:26:41:58:5f:d4:38:6a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:16:07 2024 GMT
            Not After : Apr  3 07:21:07 2025 GMT
        Subject: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:6f:4e:c2:9e:55:d9:13:6a:a3:a0:b3:9a:
                    da:f2:99:d9:4c:76:9d:b0:ea:55:60:7f:82:b9:69:
                    75:ce:13:44:00:6d:e7:69:b3:69:f8:c1:4f:a8:8b:
                    27:f0:36:19:c3:63:d2:8a:7c:03:4e:f4:7a:55:ae:
                    0f:56:19:89:bb:69:e6:5f:57:78:33:47:45:29:4e:
                    05:3a:96:49:50:63:85:80:b4:a3:bd:e1:95:cb:55:
                    12:91:c6:fb:94:41:6d:e0:a8:50:1b:8e:3d:2b:f1:
                    16:ec:04:65:79:94:76:b3:33:c8:87:37:6b:0b:0c:
                    b2:b2:bd:8f:66:fc:7d:f5:7d:c0:16:71:4b:4d:fe:
                    2e:c1:3a:ef:14:b7:a8:1d:d2:45:89:16:7d:97:d7:
                    0e:65:74:17:35:49:1e:d3:76:fd:30:ba:be:15:12:
                    0f:44:e7:ba:55:a5:b4:d1:f4:fc:df:c7:9e:db:4f:
                    85:aa:d8:02:fa:4a:07:53:a1:54:0c:54:64:57:27:
                    90:af:74:f0:31:33:b4:56:df:0d:dd:63:bc:25:2d:
                    d9:69:7c:39:8a:db:e8:c9:db:74:26:f8:93:dc:5d:
                    a3:a1:f9:ca:ad:6e:df:f3:dc:99:22:9d:bb:fb:58:
                    fc:0d:74:ce:75:8e:e8:1b:a0:19:0e:05:10:d9:8a:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22
                IPv6:
                  2804:54ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268678

    Signature Algorithm: sha256WithRSAEncryption
         be:60:60:fd:b8:f3:99:a0:0e:6a:cb:1a:f9:9a:0b:8e:2f:85:
         e5:05:56:70:13:cc:ac:4d:af:f2:c1:11:1b:02:0a:59:24:9f:
         7a:66:81:17:cd:3a:8a:66:db:9d:99:8d:36:6d:5b:94:c9:19:
         5d:97:e9:ac:86:c9:a4:22:5f:a3:36:a1:5e:c8:95:69:c7:c8:
         f8:85:98:bb:1e:40:9d:22:83:fd:2a:c5:a0:4f:0f:29:d6:7b:
         de:6c:10:cd:87:4a:0c:7f:ca:01:13:bf:59:e6:f4:4f:21:83:
         b7:33:3b:2c:c8:e3:7c:fb:76:d6:45:bd:73:bf:12:13:50:82:
         99:42:3e:e5:99:a3:69:1b:9e:d8:82:cd:c9:04:af:2f:81:7f:
         d0:32:53:b1:b1:3f:fd:ae:01:f1:d9:04:ae:7c:8e:86:c2:39:
         99:94:29:e7:32:cf:16:fe:df:71:4f:9a:d8:4f:9b:8b:0b:95:
         01:bb:7c:a4:44:2b:6e:16:6b:0e:05:1d:ce:22:cc:65:67:ba:
         f3:64:99:a0:40:ee:59:ef:3f:80:19:14:47:6b:e7:af:65:09:
         70:3e:6c:42:dc:17:e4:f2:cb:d7:32:67:d9:1c:88:aa:07:00:
         c2:88:e6:8d:49:6a:10:5b:f8:2e:86:2e:fa:b3:8a:f0:cb:6c:
         1f:40:fc:50
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUN+LTtX0DEqbNrglFJkFYX9Q4amswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzE2MDdaFw0yNTA0MDMwNzIxMDdaMDMxMTAvBgNV
BAMTKEUxNkQ3NDA0MTk2NUMzNzI5RDU1NTJCRUZCMDBFNzY3QkIwOTFGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5G9Owp5V2RNqo6CzmtrymdlM
dp2w6lVgf4K5aXXOE0QAbedps2n4wU+oiyfwNhnDY9KKfANO9HpVrg9WGYm7aeZf
V3gzR0UpTgU6lklQY4WAtKO94ZXLVRKRxvuUQW3gqFAbjj0r8RbsBGV5lHazM8iH
N2sLDLKyvY9m/H31fcAWcUtN/i7BOu8Ut6gd0kWJFn2X1w5ldBc1SR7Tdv0wur4V
Eg9E57pVpbTR9Pzfx57bT4Wq2AL6SgdToVQMVGRXJ5CvdPAxM7RW3w3dY7wlLdlp
fDmK2+jJ23Qm+JPcXaOh+cqtbt/z3Jkinbv7WPwNdM51jugboBkOBRDZihAhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThbXQEGWXDcp1V
Ur77AOdnuwkfTjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUdy
Z2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3YyVHovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVH
cmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzEvRTE2
RDc0MDQxOTY1QzM3MjlENTU1MkJFRkIwMEU3NjdCQjA5MUY0RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaWUMA0EAgACMAcDBQAoBFTsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZhjANBgkqhkiG9w0BAQsFAAOCAQEAvmBg/bjzmaAOassa
+ZoLji+F5QVWcBPMrE2v8sERGwIKWSSfemaBF806imbbnZmNNm1blMkZXZfprIbJ
pCJfozahXsiVacfI+IWYux5AnSKD/SrFoE8PKdZ73mwQzYdKDH/KARO/Web0TyGD
tzM7LMjjfPt21kW9c78SE1CCmUI+5ZmjaRue2ILNyQSvL4F/0DJTsbE//a4B8dkE
rnyOhsI5mZQp5zLPFv7fcU+a2E+biwuVAbt8pEQrbhZrDgUdziLMZWe682SZoEDu
We8/gBkUR2vnr2UJcD5sQtwX5PLL1zJn2RyIqgcAwojmjUlqEFv4LoYu+rOK8Mts
H0D8UA==
-----END CERTIFICATE-----
Generated at Tue Jul 30 14:42:35 2024 by rpki-client on console-ams.rpki-client.org