Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF48360CD0330B640EA405717F930EC97401A558.cer
File:                     FF48360CD0330B640EA405717F930EC97401A558.cer (raw, json)
Hash identifier:          XWEwFOUkO289JJW/SUKgtxxklUKlbgR9whLFG0r1cyM=
Subject key identifier:   FF:48:36:0C:D0:33:0B:64:0E:A4:05:71:7F:93:0E:C9:74:01:A5:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       441176EDAA203902130188FE1BEB4E996E6BA3FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/FF48360CD0330B640EA405717F930EC97401A558.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 11:41:27 +0000
Certificate not after:    Tue 22 Jul 2025 11:46:27 +0000
Subordinate resources:    AS: 28263
                          IP: 187.17.160.0/20
                          IP: 201.49.64.0/19
                          IP: 2804:4f8::/32

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 09:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:11:76:ed:aa:20:39:02:13:01:88:fe:1b:eb:4e:99:6e:6b:a3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 11:41:27 2024 GMT
            Not After : Jul 22 11:46:27 2025 GMT
        Subject: CN=FF48360CD0330B640EA405717F930EC97401A558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:0c:46:45:b8:da:cf:de:e3:a8:35:82:e4:
                    cf:72:82:3d:41:78:d1:00:e7:83:96:91:24:e9:9c:
                    0b:8a:1e:1c:9a:a6:53:56:f5:39:f7:ec:18:a4:fb:
                    af:4a:45:b3:14:3b:3f:7d:0f:17:0c:a6:96:de:3c:
                    ce:06:c0:1e:dd:5f:56:db:0b:e9:ba:08:1a:57:78:
                    bb:6f:72:4a:58:d2:af:18:e4:d3:ef:51:47:ac:49:
                    a0:c1:4b:5c:04:d1:57:6f:3f:ce:39:4f:f1:35:c4:
                    2e:1c:1c:39:32:1f:86:33:49:df:c1:87:b1:c3:3f:
                    90:a3:16:ef:d5:3c:c7:34:50:7c:1c:d4:b4:27:e3:
                    04:66:a6:85:b8:e1:fe:30:58:05:9d:a1:9c:4c:20:
                    1c:9c:c1:fe:72:d7:0f:44:9b:84:57:bd:19:c6:47:
                    72:1d:93:9a:a9:54:82:7b:db:a8:b3:18:16:59:da:
                    87:d9:0a:e9:a1:8f:c1:d1:55:ba:6c:b6:8c:b1:4e:
                    2b:11:e6:8b:67:0d:cc:01:91:51:7d:e6:c7:20:ab:
                    14:b3:00:da:de:83:8d:67:7a:44:df:b6:92:a2:2c:
                    75:f7:5b:f7:10:89:10:f7:5b:9a:91:74:fb:7c:fd:
                    84:6c:e3:9e:29:6d:e7:7a:91:ed:d4:11:67:3e:d0:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:48:36:0C:D0:33:0B:64:0E:A4:05:71:7F:93:0E:C9:74:01:A5:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/FF48360CD0330B640EA405717F930EC97401A558.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.160.0/20
                  201.49.64.0/19
                IPv6:
                  2804:4f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28263

    Signature Algorithm: sha256WithRSAEncryption
         bd:e0:0f:da:97:33:a7:a0:14:15:a3:3d:7d:f6:2e:c1:04:6d:
         3e:f0:83:2f:c4:8c:a2:22:48:92:9d:cc:ae:09:3d:2e:28:ea:
         41:c2:ad:89:f3:19:51:f8:e1:98:0a:47:95:37:c5:d0:da:d1:
         6b:b1:41:5e:b6:bf:aa:fd:aa:c9:8a:db:72:34:cf:7c:fe:55:
         de:ee:83:7c:5f:0d:58:74:37:a4:5c:fc:b3:c7:54:22:91:e0:
         20:3a:bf:53:fe:79:d3:19:fd:64:b2:08:56:00:14:f3:4c:c6:
         72:6d:6e:2a:b7:3a:aa:2b:f4:35:31:2b:1e:b7:98:91:6e:21:
         76:5d:a8:85:ba:f8:17:20:e2:7f:36:03:0d:9d:b5:d8:08:7f:
         09:d3:73:2a:6c:6f:5d:90:1e:45:06:3d:c7:e9:0c:88:9e:57:
         54:f2:17:7d:20:7c:af:4b:88:46:0c:c2:cc:6f:ab:66:0b:25:
         84:11:50:a4:2d:46:56:c5:d0:8d:00:6a:35:00:99:55:6b:ca:
         d8:1b:4f:0e:36:cb:dc:26:b4:41:33:1b:cb:29:3a:54:7b:ee:
         40:20:54:52:51:f6:f7:25:3b:d1:48:f4:a0:0e:21:f9:59:f4:
         13:71:07:c6:96:af:40:8c:1c:58:0d:57:08:e6:a9:35:fe:b2:
         72:a3:dd:91
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIURBF27aogOQITAYj+G+tOmW5ro/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjMxMTQxMjdaFw0yNTA3MjIxMTQ2MjdaMDMxMTAvBgNV
BAMTKEZGNDgzNjBDRDAzMzBCNjQwRUE0MDU3MTdGOTMwRUM5NzQwMUE1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/AxGRbjaz97jqDWC5M9ygj1B
eNEA54OWkSTpnAuKHhyaplNW9Tn37Bik+69KRbMUOz99DxcMppbePM4GwB7dX1bb
C+m6CBpXeLtvckpY0q8Y5NPvUUesSaDBS1wE0VdvP845T/E1xC4cHDkyH4YzSd/B
h7HDP5CjFu/VPMc0UHwc1LQn4wRmpoW44f4wWAWdoZxMIBycwf5y1w9Em4RXvRnG
R3Idk5qpVIJ726izGBZZ2ofZCumhj8HRVbpstoyxTisR5otnDcwBkVF95scgqxSz
ANreg41nekTftpKiLHX3W/cQiRD3W5qRdPt8/YRs454pbed6ke3UEWc+0AZDAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/SDYM0DMLZA6k
BXF/kw7JdAGlWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmY3
ZVk3a3JYdHJON2h2dDN4SzNwNnNmNGtEcFZDQnZUZG9YdnJBY1RLVDYvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJm
N2VZN2tyWHRyTjdodnQzeEszcDZzZjRrRHBWQ0J2VGRvWHZyQWNUS1Q2LzIvRkY0
ODM2MENEMDMzMEI2NDBFQTQwNTcxN0Y5MzBFQzk3NDAxQTU1OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQEuxGgAwQFyTFAMA0EAgACMAcDBQAoBAT4MBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAm5nMA0GCSqGSIb3DQEBCwUAA4IBAQC94A/alzOn
oBQVoz199i7BBG0+8IMvxIyiIkiSncyuCT0uKOpBwq2J8xlR+OGYCkeVN8XQ2tFr
sUFetr+q/arJittyNM98/lXe7oN8Xw1YdDekXPyzx1QikeAgOr9T/nnTGf1ksghW
ABTzTMZybW4qtzqqK/Q1MSset5iRbiF2XaiFuvgXIOJ/NgMNnbXYCH8J03MqbG9d
kB5FBj3H6QyInldU8hd9IHyvS4hGDMLMb6tmCyWEEVCkLUZWxdCNAGo1AJlVa8rY
G08ONsvcJrRBMxvLKTpUe+5AIFRSUfb3JTvRSPSgDiH5WfQTcQfGlq9AjBxYDVcI
5qk1/rJyo92R
-----END CERTIFICATE-----
Generated at Mon Nov 11 12:47:37 2024 by rpki-client on console-fra.rpki-client.org