Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.cer
File:                     F1DC10146AE41B5B301E7E56D55637701B6D2E90.cer (raw, json)
Hash identifier:          MqKl20bb2CmakhMTyTmXxsEdxoWRsZV7st1Gkp5qYBs=
Subject key identifier:   F1:DC:10:14:6A:E4:1B:5B:30:1E:7E:56:D5:56:37:70:1B:6D:2E:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D890276227A1359B9EAAEAF53F7FFD7031EE158
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:11:13 +0000
Certificate not after:    Thu 03 Apr 2025 01:16:13 +0000
Subordinate resources:    AS: 273791
                          IP: 2804:8c40::/32

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 19:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:89:02:76:22:7a:13:59:b9:ea:ae:af:53:f7:ff:d7:03:1e:e1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:11:13 2024 GMT
            Not After : Apr  3 01:16:13 2025 GMT
        Subject: CN=F1DC10146AE41B5B301E7E56D55637701B6D2E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:95:0b:36:8b:15:36:3b:43:60:89:57:28:
                    7e:2e:cf:a1:4b:85:a4:3c:c9:f7:12:48:26:08:bd:
                    c3:dd:a7:33:6a:27:41:80:09:e7:90:ba:cc:5a:a8:
                    8b:27:50:a5:60:f9:9b:97:48:8c:6c:5f:f3:7a:ba:
                    51:e4:30:96:61:6a:4a:8b:d0:1f:34:7b:2e:de:68:
                    42:a8:89:06:c0:33:d0:f6:0b:02:3b:0c:06:b3:9c:
                    0e:65:9b:2a:ca:ff:82:a8:03:de:f3:cd:03:7c:3e:
                    be:1e:14:4e:f0:b2:a3:db:79:56:b6:c2:8a:8d:7c:
                    8f:9b:d8:df:e7:79:95:a5:47:0d:a2:7f:42:67:13:
                    d9:5d:9c:20:9e:93:76:57:14:62:43:9f:15:a8:63:
                    4f:cf:2b:21:c6:f9:5b:99:d6:2f:d9:d2:5a:22:3b:
                    c8:39:75:1d:51:62:13:7e:c5:9b:1a:63:73:f2:53:
                    7a:8c:1c:c5:48:76:a5:99:7f:28:b6:39:10:35:6a:
                    a2:dc:37:45:12:ae:23:ec:65:96:1a:86:67:51:96:
                    60:04:6d:c8:a8:70:f1:a3:b1:22:79:01:ec:f2:86:
                    e5:2b:a4:a4:f0:4c:4c:f5:c1:29:d4:65:c8:f5:da:
                    66:94:1e:62:06:57:2c:ad:25:7f:9d:22:7f:00:e0:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:DC:10:14:6A:E4:1B:5B:30:1E:7E:56:D5:56:37:70:1B:6D:2E:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273791

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:01:05:09:0e:e3:45:ed:ff:4e:26:37:b6:fc:f6:77:b5:
         dd:c6:73:dd:93:81:ca:be:8f:b4:b1:37:ac:c1:32:a6:d0:d6:
         59:e3:0a:1e:fc:43:7e:cb:88:f1:33:30:b2:45:74:ba:f2:d3:
         85:d6:c6:6b:86:fc:1b:89:7d:e4:dd:38:8c:26:6e:89:67:bc:
         be:a8:91:d4:ac:8a:d7:75:97:95:15:8d:b4:e1:cd:69:61:5d:
         f5:50:c6:0c:93:f0:82:19:48:36:a7:b0:f9:e7:c5:fb:03:31:
         90:05:41:c4:a5:f3:0a:86:1c:09:7d:93:9e:60:be:8b:c3:38:
         0e:98:0e:ca:7c:83:ca:ce:88:b3:b3:0c:69:e1:2c:ab:d6:cc:
         b5:5a:8a:2b:b1:03:91:8e:bf:de:50:9e:0d:6f:9b:1c:ca:61:
         11:80:6b:2b:b7:bb:cc:57:7a:45:c6:bd:0c:f5:9d:24:fb:50:
         fd:bc:60:79:c9:18:6c:2a:24:ac:17:49:43:0c:67:13:e7:64:
         8d:ed:f1:c2:da:8c:20:a5:4a:db:55:fa:c9:68:60:68:7a:a1:
         32:71:d0:ae:7b:ed:2d:85:ab:d2:e2:84:ef:5f:65:6f:1c:0a:
         13:4f:1d:d2:c7:90:88:52:9f:96:91:c6:23:1c:58:cc:56:29:
         12:1a:90:1d
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUPYkCdiJ6E1m56q6vU/f/1wMe4VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMTExMTNaFw0yNTA0MDMwMTE2MTNaMDMxMTAvBgNV
BAMTKEYxREMxMDE0NkFFNDFCNUIzMDFFN0U1NkQ1NTYzNzcwMUI2RDJFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbJULNosVNjtDYIlXKH4uz6FL
haQ8yfcSSCYIvcPdpzNqJ0GACeeQusxaqIsnUKVg+ZuXSIxsX/N6ulHkMJZhakqL
0B80ey7eaEKoiQbAM9D2CwI7DAaznA5lmyrK/4KoA97zzQN8Pr4eFE7wsqPbeVa2
woqNfI+b2N/neZWlRw2if0JnE9ldnCCek3ZXFGJDnxWoY0/PKyHG+VuZ1i/Z0loi
O8g5dR1RYhN+xZsaY3PyU3qMHMVIdqWZfyi2ORA1aqLcN0USriPsZZYahmdRlmAE
bciocPGjsSJ5AezyhuUrpKTwTEz1wSnUZcj12maUHmIGVyytJX+dIn8A4MwLAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTx3BAUauQbWzAe
flbVVjdwG20ukDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0tn
QzZUaHN1b3J5NGNiTUVGcGJGN1JSeEhrN1JmV1RDdkV1UDd1bTRUYnAvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NL
Z0M2VGhzdW9yeTRjYk1FRnBiRjdSUnhIazdSZldUQ3ZFdVA3dW00VGJwLzEvRjFE
QzEwMTQ2QUU0MUI1QjMwMUU3RTU2RDU1NjM3NzAxQjZEMkU5MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LX8wDQYJKoZIhvcNAQELBQADggEBAEWwAQUJDuNF7f9OJje2/PZ3td3Gc92Tgcq+
j7SxN6zBMqbQ1lnjCh78Q37LiPEzMLJFdLry04XWxmuG/BuJfeTdOIwmbolnvL6o
kdSsitd1l5UVjbThzWlhXfVQxgyT8IIZSDansPnnxfsDMZAFQcSl8wqGHAl9k55g
vovDOA6YDsp8g8rOiLOzDGnhLKvWzLVaiiuxA5GOv95Qng1vmxzKYRGAayu3u8xX
ekXGvQz1nST7UP28YHnJGGwqJKwXSUMMZxPnZI3t8cLajCClSttV+sloYGh6oTJx
0K577S2Fq9LihO9fZW8cChNPHdLHkIhSn5aRxiMcWMxWKRIakB0=
-----END CERTIFICATE-----
Generated at Mon Jun 17 21:59:59 2024 by rpki-client on console-fra.rpki-client.org