Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D10C45397CB5A725D9826AF5F60F5707B1965F67.cer
File:                     D10C45397CB5A725D9826AF5F60F5707B1965F67.cer (raw, json)
Hash identifier:          J7XyTmZYharQWRpwNf3JMP1HKT9ag+13PGMugo0UJSA=
Subject key identifier:   D1:0C:45:39:7C:B5:A7:25:D9:82:6A:F5:F6:0F:57:07:B1:96:5F:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74127032152A9F92F8430EE49548FEC0903FA09E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/D10C45397CB5A725D9826AF5F60F5707B1965F67.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Aug 2024 16:52:41 +0000
Certificate not after:    Tue 19 Aug 2025 16:57:41 +0000
Subordinate resources:    AS: 269672
                          IP: 45.191.132.0/22
                          IP: 2804:6828::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 03:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:70:32:15:2a:9f:92:f8:43:0e:e4:95:48:fe:c0:90:3f:a0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 20 16:52:41 2024 GMT
            Not After : Aug 19 16:57:41 2025 GMT
        Subject: CN=D10C45397CB5A725D9826AF5F60F5707B1965F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:41:ab:fb:0e:56:15:64:60:a1:98:a2:a5:
                    da:de:53:fc:a5:0e:b5:a9:ad:d2:bc:1c:c3:52:04:
                    51:59:03:57:41:c3:20:a9:ba:a0:aa:8f:5c:3e:b9:
                    fe:ad:32:c7:8d:2f:38:60:b8:d1:18:f7:79:37:14:
                    59:15:19:78:c8:be:78:bc:3a:bf:94:db:7e:ef:16:
                    c3:84:17:7a:c0:ed:cf:e3:1a:21:62:a4:03:30:12:
                    ed:27:c1:1e:67:04:1d:b5:f2:fe:1e:a8:2f:0f:4c:
                    9b:76:54:ac:78:35:7a:0b:ef:ac:d8:29:94:01:cc:
                    fb:81:cc:10:ed:b4:9a:f4:42:66:74:f3:4b:80:24:
                    05:2b:26:b9:8c:03:4f:a0:a3:0d:d8:60:a7:2f:9d:
                    50:f7:a9:24:0f:2f:ed:b8:26:d6:1c:26:01:21:39:
                    29:82:09:dc:d6:bb:4f:4a:ea:47:ff:0c:3f:7d:fd:
                    ab:c8:6a:fd:3a:fd:ee:a5:e5:0b:73:da:1f:88:02:
                    64:44:37:59:28:a9:9b:f7:06:69:e8:a7:05:2c:8b:
                    77:66:bd:69:20:43:f3:ab:00:5f:06:d4:30:75:63:
                    4e:c2:26:a2:26:d4:1a:3a:bf:7c:79:99:7c:a9:61:
                    d4:49:e5:67:aa:f2:44:50:4a:77:08:16:15:96:e6:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:0C:45:39:7C:B5:A7:25:D9:82:6A:F5:F6:0F:57:07:B1:96:5F:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/D10C45397CB5A725D9826AF5F60F5707B1965F67.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.132.0/22
                IPv6:
                  2804:6828::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269672

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:f1:66:70:94:ff:51:9d:8b:39:55:5e:fb:ef:c8:88:cf:
         e3:16:42:d1:80:2f:b6:be:47:f9:76:d9:5c:4c:1f:bb:1b:49:
         5e:7c:24:30:ba:ee:0f:b6:7f:de:5f:7a:b2:17:45:eb:57:33:
         73:c2:5a:7a:71:19:5d:f9:f9:e6:20:87:59:bc:e5:5a:df:8b:
         f7:06:8d:05:fe:6a:4b:5a:36:eb:5e:7d:a8:ef:7f:0d:17:64:
         1e:68:6a:ea:de:dd:2b:cc:42:b2:86:d3:58:ff:21:64:6d:ba:
         e7:81:3a:e3:e9:14:62:5a:11:88:13:cb:db:e8:c3:15:bd:e0:
         2d:9b:ab:0b:f4:9b:bd:07:30:25:50:df:f8:13:70:5a:27:b7:
         02:14:3b:aa:4a:a0:e0:50:2f:8f:aa:d2:26:4f:89:3a:a5:6f:
         40:2f:b1:5f:98:4e:2c:eb:63:31:bb:f8:6e:23:de:e5:49:12:
         9a:b9:29:fb:9a:dd:fb:fa:82:9d:80:04:4b:48:32:56:a8:20:
         55:78:df:07:a8:30:d5:72:f4:61:44:44:51:9c:5c:4a:a4:24:
         86:3e:77:52:ce:29:d5:30:19:02:9c:de:42:14:97:53:02:0f:
         42:5a:e7:bf:71:21:89:0c:02:87:86:dd:35:38:58:5d:96:50:
         d0:91:4d:17
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdBJwMhUqn5L4Qw7klUj+wJA/oJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MjAxNjUyNDFaFw0yNTA4MTkxNjU3NDFaMDMxMTAvBgNV
BAMTKEQxMEM0NTM5N0NCNUE3MjVEOTgyNkFGNUY2MEY1NzA3QjE5NjVGNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pEGr+w5WFWRgoZiipdreU/yl
DrWprdK8HMNSBFFZA1dBwyCpuqCqj1w+uf6tMseNLzhguNEY93k3FFkVGXjIvni8
Or+U237vFsOEF3rA7c/jGiFipAMwEu0nwR5nBB218v4eqC8PTJt2VKx4NXoL76zY
KZQBzPuBzBDttJr0QmZ080uAJAUrJrmMA0+gow3YYKcvnVD3qSQPL+24JtYcJgEh
OSmCCdzWu09K6kf/DD99/avIav06/e6l5Qtz2h+IAmREN1koqZv3BmnopwUsi3dm
vWkgQ/OrAF8G1DB1Y07CJqIm1Bo6v3x5mXypYdRJ5Weq8kRQSncIFhWW5uc9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRDEU5fLWnJdmC
avX2D1cHsZZfZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREU5
WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBaTWEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RF
OVk4SERvUkNDWERtb3FrWXQyejJqdzljZnVWZ3p6QmMydVlvVjlQWk1hLzAvRDEw
QzQ1Mzk3Q0I1QTcyNUQ5ODI2QUY1RjYwRjU3MDdCMTk2NUY2Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb+EMA0EAgACMAcDBQAoBGgoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdaDANBgkqhkiG9w0BAQsFAAOCAQEAjpPxZnCU/1GdizlV
XvvvyIjP4xZC0YAvtr5H+XbZXEwfuxtJXnwkMLruD7Z/3l96shdF61czc8JaenEZ
Xfn55iCHWbzlWt+L9waNBf5qS1o26159qO9/DRdkHmhq6t7dK8xCsobTWP8hZG26
54E64+kUYloRiBPL2+jDFb3gLZurC/SbvQcwJVDf+BNwWie3AhQ7qkqg4FAvj6rS
Jk+JOqVvQC+xX5hOLOtjMbv4biPe5UkSmrkp+5rd+/qCnYAES0gyVqggVXjfB6gw
1XL0YUREUZxcSqQkhj53Us4p1TAZApzeQhSXUwIPQlrnv3EhiQwCh4bdNThYXZZQ
0JFNFw==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:55 2024 by rpki-client on console.sobornost.net