Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.cer
File:                     014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.cer (raw, json)
Hash identifier:          vhgrfU10LbnRKXYyktX6B06zstTEgujUh+WS7RtfMsc=
Subject key identifier:   01:4A:A5:95:6F:F2:CB:9A:77:4D:81:36:BF:52:2C:EB:9F:1C:EC:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EF5955A5B9223A262E4BDF72A318C9D9714C303
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:45:38 +0000
Certificate not after:    Thu 03 Apr 2025 07:50:38 +0000
Subordinate resources:    AS: 270378
                          IP: 190.83.68.0/22
                          IP: 2804:6b1c::/32

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 04:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f5:95:5a:5b:92:23:a2:62:e4:bd:f7:2a:31:8c:9d:97:14:c3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:45:38 2024 GMT
            Not After : Apr  3 07:50:38 2025 GMT
        Subject: CN=014AA5956FF2CB9A774D8136BF522CEB9F1CEC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:fd:d6:6f:e3:9f:31:f5:13:88:49:5c:40:
                    8e:0e:ef:d1:64:db:f1:cf:ef:b4:eb:f3:db:69:ff:
                    81:86:bc:ab:44:48:5d:56:6c:03:6c:5d:ae:7a:58:
                    df:ee:93:c1:fc:f7:d2:64:36:26:a7:df:dd:e6:c2:
                    3d:79:27:0d:48:de:87:42:40:fd:1f:eb:2d:f5:c4:
                    27:63:a0:65:e7:b9:3e:e6:47:dd:9e:ee:73:39:c1:
                    c3:e1:00:87:f7:ae:38:c3:f1:41:fd:d0:17:ad:b0:
                    bf:63:9f:b8:36:ee:27:d1:4b:75:f4:7d:70:41:79:
                    83:14:41:99:4d:5c:c8:3a:6c:33:f1:90:03:93:30:
                    22:a4:2a:b3:96:e5:d3:c8:fc:13:86:c1:98:84:eb:
                    e5:7b:44:58:bf:9c:a7:5b:69:70:45:7f:76:38:bb:
                    65:28:0c:0f:be:f6:da:d5:7d:1f:e0:1c:15:0b:29:
                    0e:d1:17:2a:ce:ee:65:56:e7:09:f0:93:87:79:a8:
                    e7:de:ed:74:e5:c5:36:9a:65:e8:33:ff:a1:65:ba:
                    59:25:55:bb:00:ae:0c:8b:fd:2e:34:d3:8d:b7:68:
                    17:17:d8:56:00:fd:fd:f1:30:3d:31:04:94:ed:02:
                    83:bb:f6:89:8b:01:c3:b4:9c:e0:a4:70:ee:42:57:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:4A:A5:95:6F:F2:CB:9A:77:4D:81:36:BF:52:2C:EB:9F:1C:EC:19
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.68.0/22
                IPv6:
                  2804:6b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270378

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:14:e4:a8:e3:af:18:28:f1:82:3d:15:83:3b:8c:73:6b:
         56:fa:ce:33:39:65:82:1b:64:8a:2d:6e:99:65:ea:e7:5b:e6:
         4a:23:da:3f:2f:46:f5:9f:a6:da:fc:d2:1f:16:45:9b:20:2b:
         12:9c:5e:7e:4e:0c:9b:67:b7:fd:7a:7e:3e:87:58:83:42:aa:
         25:d1:4c:31:50:53:b1:d3:16:09:63:50:35:de:28:1e:e2:0f:
         27:2f:87:e2:04:ad:16:6e:8e:b2:ee:9c:0b:ff:cc:db:7e:f7:
         a0:01:2e:51:03:87:df:0e:70:fd:fc:11:22:d3:eb:a2:58:e6:
         d5:4b:2a:91:d9:9a:db:5e:7b:0f:24:4e:16:20:a2:d8:a9:12:
         28:76:eb:65:51:d7:35:80:da:39:6d:d0:79:d2:70:34:7d:75:
         2a:ca:2f:0d:51:6f:2a:b7:a9:d3:31:78:c6:d8:33:2c:2b:28:
         75:a7:63:ee:d0:eb:ac:79:3b:6e:2b:d6:d7:a0:42:5c:f5:35:
         31:a1:8c:41:2e:a8:6f:b1:2f:b0:6d:f7:8f:38:a8:20:5d:bb:
         f0:e2:39:5c:58:86:05:06:bd:2c:52:d4:a5:3f:43:4f:f0:a4:
         19:86:96:d2:a2:18:23:56:76:a9:8c:bc:61:53:39:55:34:6f:
         2e:79:51:bb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDvWVWluSI6Ji5L33KjGMnZcUwwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzQ1MzhaFw0yNTA0MDMwNzUwMzhaMDMxMTAvBgNV
BAMTKDAxNEFBNTk1NkZGMkNCOUE3NzREODEzNkJGNTIyQ0VCOUYxQ0VDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI/3Wb+OfMfUTiElcQI4O79Fk
2/HP77Tr89tp/4GGvKtESF1WbANsXa56WN/uk8H899JkNian393mwj15Jw1I3odC
QP0f6y31xCdjoGXnuT7mR92e7nM5wcPhAIf3rjjD8UH90BetsL9jn7g27ifRS3X0
fXBBeYMUQZlNXMg6bDPxkAOTMCKkKrOW5dPI/BOGwZiE6+V7RFi/nKdbaXBFf3Y4
u2UoDA++9trVfR/gHBULKQ7RFyrO7mVW5wnwk4d5qOfe7XTlxTaaZegz/6Flulkl
VbsArgyL/S400423aBcX2FYA/f3xMD0xBJTtAoO79omLAcO0nOCkcO5CV70bAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBSqWVb/LLmndN
gTa/UizrnxzsGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUJq
RTdwMjdkOWVHRGIyQWQ5bVJNNUtHeXdGVExDRnpZdmF1R25UYUNQWFUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVC
akU3cDI3ZDllR0RiMkFkOW1STTVLR3l3RlRMQ0Z6WXZhdUduVGFDUFhVLzEvMDE0
QUE1OTU2RkYyQ0I5QTc3NEQ4MTM2QkY1MjJDRUI5RjFDRUMxOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvlNEMA0EAgACMAcDBQAoBGscMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgKjANBgkqhkiG9w0BAQsFAAOCAQEAfpMU5Kjjrxgo8YI9
FYM7jHNrVvrOMzllghtkii1umWXq51vmSiPaPy9G9Z+m2vzSHxZFmyArEpxefk4M
m2e3/Xp+PodYg0KqJdFMMVBTsdMWCWNQNd4oHuIPJy+H4gStFm6Osu6cC//M2373
oAEuUQOH3w5w/fwRItProljm1Usqkdma2157DyROFiCi2KkSKHbrZVHXNYDaOW3Q
edJwNH11KsovDVFvKrep0zF4xtgzLCsodadj7tDrrHk7bivW16BCXPU1MaGMQS6o
b7EvsG33jzioIF278OI5XFiGBQa9LFLUpT9DT/CkGYaW0qIYI1Z2qYy8YVM5VTRv
LnlRuw==
-----END CERTIFICATE-----
Generated at Sun Nov 10 10:18:56 2024 by rpki-client on console-ams.rpki-client.org