Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer
File:                     E43F929F1A53246574F0400683594164F34379B9.cer (raw, json)
Hash identifier:          NABw5JsEct2gFYqfGNZLIGYFy5r89tFhSlQMAWHiwdY=
Subject key identifier:   E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34933C73B3A52277AFEED685F87B32A5580A6809
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 05:53:16 +0000
Certificate not after:    Fri 04 Apr 2025 05:58:16 +0000
Subordinate resources:    AS: 268333
                          IP: 45.237.252.0/22
                          IP: 2804:4f8c::/32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 13:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:93:3c:73:b3:a5:22:77:af:ee:d6:85:f8:7b:32:a5:58:0a:68:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 05:53:16 2024 GMT
            Not After : Apr  4 05:58:16 2025 GMT
        Subject: CN=E43F929F1A53246574F0400683594164F34379B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:68:93:10:67:6e:62:c2:ce:36:14:bb:30:
                    e5:df:c0:e8:99:43:dc:16:12:09:ef:56:97:cf:c3:
                    ad:63:cf:d5:53:53:0c:42:7a:6b:ed:e0:76:48:ef:
                    94:9f:01:f4:72:96:1a:14:9c:73:af:fa:82:51:03:
                    50:8c:be:84:84:7e:53:74:e9:cf:56:5d:ae:15:36:
                    e5:dd:82:19:9c:10:db:09:89:ff:4d:be:c7:b4:f8:
                    db:c1:84:76:da:63:6a:4e:7b:e4:36:47:f9:54:d6:
                    9a:2a:81:a4:54:7d:bf:80:ec:d6:16:89:d1:c1:2d:
                    23:64:b4:fd:67:c7:aa:b3:e1:0f:f9:48:4e:46:a0:
                    91:c7:0f:8c:1c:a7:f4:47:a4:34:a3:fd:9e:7a:a6:
                    62:96:8a:e2:9a:02:e1:76:e9:ac:18:97:30:71:27:
                    59:17:ab:a6:f8:a0:cf:98:4b:e6:a6:4e:53:5c:14:
                    11:34:22:6e:26:33:5b:43:da:96:da:44:24:f0:9b:
                    9d:7a:78:2a:83:8f:dc:b2:92:dc:08:ea:79:f4:01:
                    83:52:1e:31:65:49:e9:82:86:4e:74:52:62:85:e0:
                    24:da:8d:ed:59:32:f3:ab:59:5e:65:8e:28:08:36:
                    7e:d7:7f:4b:f6:de:11:f2:ff:f2:43:d6:60:27:e1:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.252.0/22
                IPv6:
                  2804:4f8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268333

    Signature Algorithm: sha256WithRSAEncryption
         d9:8b:37:fb:76:7b:98:39:d2:26:62:1b:89:9f:f1:d7:5b:4d:
         5a:5c:f2:42:8f:9a:87:9f:ea:cc:be:c0:63:51:72:e4:e1:dc:
         1d:0b:38:88:af:ce:fa:2f:78:ff:5e:f1:9c:12:62:7c:d4:73:
         87:44:3f:91:4c:24:60:bf:f7:78:62:d5:d3:8b:04:1e:8a:3b:
         ef:53:eb:d4:2f:a1:19:f3:e2:98:58:35:5b:e3:9f:83:af:ea:
         25:b1:3a:6c:c5:37:6e:e0:20:ed:03:b2:9a:b5:71:54:c3:24:
         ac:cb:13:b2:b8:89:23:aa:1b:9d:ca:ec:a3:fa:d9:c4:6a:2e:
         d1:9a:18:92:1e:1d:94:a3:7f:c6:c8:9d:07:e0:9d:e5:f7:d0:
         ca:1a:af:f8:00:c6:30:fa:30:a8:62:93:10:70:81:3e:7d:a0:
         44:c1:bc:69:cd:55:d4:54:ec:81:13:4b:c8:49:b6:ab:0a:55:
         40:20:e7:1f:7b:07:9a:09:0a:40:66:a9:95:68:ba:57:b7:91:
         0d:4b:1e:dc:2e:9d:d8:df:8c:3c:c1:75:66:49:05:68:58:87:
         c0:6f:2b:71:fb:24:1f:20:dc:80:cc:5a:e5:0c:54:5e:8a:5c:
         c9:1c:06:93:e8:a0:84:4b:68:c8:ed:ff:27:49:e8:cd:1b:bd:
         6e:16:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 19:41:54 2024 by rpki-client on console-fra.rpki-client.org