Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9B4B625A678B4368E18095C962431764F4875B3.cer
File:                     E9B4B625A678B4368E18095C962431764F4875B3.cer (raw, json)
Hash identifier:          xd+2NTpnu/cMX5EkjoJqqp8vGOSv4XNP+7n++ztK1rE=
Subject key identifier:   E9:B4:B6:25:A6:78:B4:36:8E:18:09:5C:96:24:31:76:4F:48:75:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A5F62394E610E6FA3C1DE6A9BE1EC17626B89FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/E9B4B625A678B4368E18095C962431764F4875B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 17:31:51 +0000
Certificate not after:    Thu 14 Aug 2025 17:36:51 +0000
Subordinate resources:    AS: 263473
                          IP: 191.242.64.0/21
                          IP: 2804:1260::/32

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 22:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5f:62:39:4e:61:0e:6f:a3:c1:de:6a:9b:e1:ec:17:62:6b:89:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 17:31:51 2024 GMT
            Not After : Aug 14 17:36:51 2025 GMT
        Subject: CN=E9B4B625A678B4368E18095C962431764F4875B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:ed:4a:31:8e:e2:20:da:fa:95:f2:93:01:
                    dd:19:54:8c:06:d4:ad:88:07:51:16:62:77:b0:c3:
                    26:eb:af:c7:4e:18:42:78:2f:e3:99:57:5d:be:23:
                    bf:b6:31:e9:17:52:b8:09:3f:7f:39:a9:74:c1:c8:
                    f8:37:5d:53:0c:5d:a6:48:68:33:5c:c5:f2:b0:6a:
                    52:0d:af:46:65:c8:c8:8f:c2:2c:00:92:1b:4f:40:
                    2c:2f:01:04:c2:14:7d:89:ad:91:c6:b4:7b:d9:e5:
                    f2:28:20:77:67:a0:e6:d6:2c:17:a6:d8:1c:b5:c0:
                    56:63:5c:db:73:9f:1e:e7:c9:53:6b:6d:56:7f:a0:
                    da:1b:da:8e:12:c1:2d:6e:1e:1e:49:6e:51:f1:7c:
                    fd:14:25:84:45:fe:94:6e:b4:72:71:ab:27:8f:a3:
                    fe:b2:a7:85:e4:9b:f0:5b:01:8e:48:ac:3e:90:e2:
                    c2:c6:7c:11:97:7c:4d:d8:af:24:06:88:31:c4:73:
                    c0:d2:48:8c:e7:bb:a9:8c:7f:db:63:07:ed:17:a3:
                    e3:07:fd:f2:9e:d9:1b:28:5d:4c:54:d3:2d:37:6a:
                    87:54:b2:21:5d:4e:18:9b:2c:0e:e2:93:2e:cc:62:
                    8e:92:0d:e2:3a:76:39:8d:7b:8a:ca:49:78:72:c2:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:B4:B6:25:A6:78:B4:36:8E:18:09:5C:96:24:31:76:4F:48:75:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/E9B4B625A678B4368E18095C962431764F4875B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.64.0/21
                IPv6:
                  2804:1260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263473

    Signature Algorithm: sha256WithRSAEncryption
         52:09:a7:36:3d:57:b4:7b:cd:46:42:e9:c0:19:27:14:aa:f5:
         68:19:04:f2:ce:6d:aa:ff:7f:ca:42:14:c0:4c:4c:b7:b4:55:
         62:1e:4e:a1:85:01:9b:38:de:80:47:a4:cc:43:a1:61:b5:b0:
         1e:76:32:03:af:08:bb:ce:2d:1c:93:44:41:74:82:34:ce:88:
         f0:68:df:b3:8a:a9:66:f0:76:9c:8b:4a:b1:d1:e6:51:ff:ca:
         7a:95:49:28:90:63:02:02:be:6f:d6:7b:dc:75:95:e9:99:06:
         44:83:20:0d:1c:b1:12:15:de:33:e1:38:1b:3f:d5:0b:a5:fc:
         ce:d0:7c:dc:24:a5:f2:d0:0e:0a:54:31:bd:97:ee:e8:1c:5e:
         08:55:46:29:fb:77:9e:60:f4:32:7b:58:0f:35:0e:d1:f4:ff:
         08:00:50:d1:4d:df:ae:56:54:86:80:e1:d3:f8:dd:3c:e2:1c:
         a6:83:c4:34:dc:a2:9e:2b:a4:9f:78:87:8e:89:ce:5a:50:18:
         57:ed:3e:27:72:d4:67:29:4f:9c:4e:f2:2b:7e:5b:92:f5:e6:
         22:82:38:30:28:79:05:33:5d:17:b9:fd:4e:f0:2a:ef:ec:c2:
         3e:d4:83:91:68:dd:35:07:41:51:5f:a3:0a:25:e9:91:17:5c:
         98:7d:7c:b1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOl9iOU5hDm+jwd5qm+HsF2Jrif8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTUxNzMxNTFaFw0yNTA4MTQxNzM2NTFaMDMxMTAvBgNV
BAMTKEU5QjRCNjI1QTY3OEI0MzY4RTE4MDk1Qzk2MjQzMTc2NEY0ODc1QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLae1KMY7iINr6lfKTAd0ZVIwG
1K2IB1EWYnewwybrr8dOGEJ4L+OZV12+I7+2MekXUrgJP385qXTByPg3XVMMXaZI
aDNcxfKwalINr0ZlyMiPwiwAkhtPQCwvAQTCFH2JrZHGtHvZ5fIoIHdnoObWLBem
2By1wFZjXNtznx7nyVNrbVZ/oNob2o4SwS1uHh5JblHxfP0UJYRF/pRutHJxqyeP
o/6yp4Xkm/BbAY5IrD6Q4sLGfBGXfE3YryQGiDHEc8DSSIznu6mMf9tjB+0Xo+MH
/fKe2RsoXUxU0y03aodUsiFdThibLA7iky7MYo6SDeI6djmNe4rKSXhywnPFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTptLYlpni0No4Y
CVyWJDF2T0h1szAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUQ0
VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZiVEUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FE
NFRodnVCc0JZR0VqSktIWEpIdDYzMlhMYTU2VG1YZ3hwdEpZZmc2YlRFLzAvRTlC
NEI2MjVBNjc4QjQzNjhFMTgwOTVDOTYyNDMxNzY0RjQ4NzVCMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDv/JAMA0EAgACMAcDBQAoBBJgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFMTANBgkqhkiG9w0BAQsFAAOCAQEAUgmnNj1XtHvNRkLp
wBknFKr1aBkE8s5tqv9/ykIUwExMt7RVYh5OoYUBmzjegEekzEOhYbWwHnYyA68I
u84tHJNEQXSCNM6I8Gjfs4qpZvB2nItKsdHmUf/KepVJKJBjAgK+b9Z73HWV6ZkG
RIMgDRyxEhXeM+E4Gz/VC6X8ztB83CSl8tAOClQxvZfu6BxeCFVGKft3nmD0MntY
DzUO0fT/CABQ0U3frlZUhoDh0/jdPOIcpoPENNyiniukn3iHjonOWlAYV+0+J3LU
ZylPnE7yK35bkvXmIoI4MCh5BTNdF7n9TvAq7+zCPtSDkWjdNQdBUV+jCiXpkRdc
mH18sQ==
-----END CERTIFICATE-----
Generated at Wed Sep 4 00:33:19 2024 by rpki-client on console-fra.rpki-client.org