Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
File:                     067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer (raw, json)
Hash identifier:          /PiuBB8PxO1HtEkYKKfgyH7KWKdJiPzahyIWXJLDeeo=
Subject key identifier:   06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       208783913F5A12FE3BB805F9C88DC3D6936156F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:34 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:34 +0000
Subordinate resources:    AS: 28294
                          AS: 53125
                          IP: 131.72.84.0/22
                          IP: 138.36.88.0/22
                          IP: 138.204.208.0/22
                          IP: 168.181.0.0/22
                          IP: 168.194.92.0/22
                          IP: 170.246.140.0/22
                          IP: 177.221.0.0/19
                          IP: 179.107.192.0/19
                          IP: 186.226.128.0/20
                          IP: 187.108.112.0/20
                          IP: 189.36.144.0/20
                          IP: 2804:b4::/32
                          IP: 2804:27cc::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 21:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:83:91:3f:5a:12:fe:3b:b8:05:f9:c8:8d:c3:d6:93:61:56:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:34 2024 GMT
            Not After : Apr  2 18:30:34 2025 GMT
        Subject: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:a8:27:72:40:ec:8d:04:ee:79:41:4b:53:
                    3e:60:d0:fc:65:a4:08:11:27:25:a1:69:a6:3a:17:
                    cc:6e:90:9b:ec:5d:18:44:52:df:43:2b:26:a9:13:
                    c2:ff:6d:e3:07:f4:b8:cf:20:61:fe:26:97:3f:ae:
                    19:27:8f:83:eb:bd:eb:a2:7e:34:af:12:91:79:a9:
                    f6:87:63:a4:3f:f8:08:3d:7a:50:6a:71:2d:f2:4e:
                    ff:0b:17:9d:8e:e1:a4:f2:7d:db:e7:a2:16:2b:35:
                    8e:b4:cc:63:bb:d2:0c:9e:44:bc:e8:2a:43:1a:55:
                    cd:67:e4:39:bf:41:dc:8e:ef:df:ec:a6:8a:10:b8:
                    6b:5a:8d:b4:6a:36:a9:18:16:fa:8b:e0:d8:b9:b0:
                    5c:f8:3e:1a:0e:25:0f:6a:36:fc:8d:9b:5f:ca:08:
                    70:f6:29:71:48:3e:1a:b1:4e:c7:fc:16:96:cc:d9:
                    d6:9b:63:2d:65:89:9c:c5:32:87:75:e1:ad:c6:cc:
                    95:17:db:30:26:44:88:ed:15:78:9f:8c:87:18:5d:
                    32:15:99:20:aa:3c:a2:4d:33:dc:c6:26:0e:47:16:
                    da:64:7c:4e:94:4c:6f:1d:9b:07:75:03:70:69:92:
                    9f:aa:94:d5:26:a0:83:5b:3c:88:af:24:dd:ad:55:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.84.0/22
                  138.36.88.0/22
                  138.204.208.0/22
                  168.181.0.0/22
                  168.194.92.0/22
                  170.246.140.0/22
                  177.221.0.0/19
                  179.107.192.0/19
                  186.226.128.0/20
                  187.108.112.0/20
                  189.36.144.0/20
                IPv6:
                  2804:b4::/32
                  2804:27cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28294
                  53125

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:e3:59:44:15:5a:b0:80:23:cf:b8:33:6f:af:64:36:0d:
         f9:07:43:57:e2:1a:cc:95:52:b2:f0:59:80:29:02:da:e4:ee:
         23:c3:0e:2f:21:69:bd:e2:9e:e7:af:fc:7e:29:06:93:42:e0:
         3f:f7:a8:a3:14:47:df:e7:5c:54:9c:18:3f:46:91:90:b6:b3:
         cb:28:06:d6:1c:88:19:ec:50:b9:dd:a4:f0:12:c3:b2:17:2b:
         43:ab:37:3f:7e:5f:6c:5d:19:77:d7:61:6e:68:32:41:1a:05:
         3c:4d:11:19:b3:e9:04:7c:78:ad:25:bc:d4:ab:39:c9:fa:8c:
         7a:f9:0c:86:6f:42:d3:80:73:7f:47:d7:72:7e:e8:3d:2e:c3:
         ea:c0:96:99:36:46:12:c5:67:63:ff:9a:77:9b:9e:2d:71:df:
         4e:33:0c:6d:2c:31:d7:f0:07:4a:55:23:86:9a:09:aa:26:76:
         88:0d:a3:27:bf:85:c0:3d:be:91:e1:bb:af:fd:ce:af:27:0a:
         e3:d4:99:69:73:07:e0:f3:a4:1f:01:3c:11:2a:df:c2:63:7a:
         6b:d1:6d:ee:c0:6c:0d:ba:24:c0:15:14:00:ee:cc:98:1a:0d:
         0c:bf:a9:c6:ca:93:2e:ba:30:a4:4e:64:ab:8e:b1:c4:bf:56:
         67:28:cb:b2
-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIUIIeDkT9aEv47uAX5yI3D1pNhVvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1MzRaFw0yNTA0MDIxODMwMzRaMDMxMTAvBgNV
BAMTKDA2N0MyQThBMjBEMjZEMTYzRENGMENGN0JDN0U0REU5MDZCODU4MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNqgnckDsjQTueUFLUz5g0Pxl
pAgRJyWhaaY6F8xukJvsXRhEUt9DKyapE8L/beMH9LjPIGH+Jpc/rhknj4Prveui
fjSvEpF5qfaHY6Q/+Ag9elBqcS3yTv8LF52O4aTyfdvnohYrNY60zGO70gyeRLzo
KkMaVc1n5Dm/QdyO79/spooQuGtajbRqNqkYFvqL4Ni5sFz4PhoOJQ9qNvyNm1/K
CHD2KXFIPhqxTsf8FpbM2dabYy1liZzFMod14a3GzJUX2zAmRIjtFXifjIcYXTIV
mSCqPKJNM9zGJg5HFtpkfE6UTG8dmwd1A3Bpkp+qlNUmoINbPIivJN2tVZqNAgMB
AAGjggOAMIIDfDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGfCqKINJtFj3P
DPe8fk3pBrhYBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlli
SnpRVzVMTTlKWGdLSmc3QkFwN25CQ25CRldrNlRYU3hSN2h3Q05CNGMvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlli
SnpRVzVMTTlKWGdLSmc3QkFwN25CQ25CRldrNlRYU3hSN2h3Q05CNGMvMS8wNjdD
MkE4QTIwRDI2RDE2M0RDRjBDRjdCQzdFNERFOTA2Qjg1ODA1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwcQYIKwYBBQUHAQcB
Af8EYjBgMEgEAgABMEIDBAKDSFQDBAKKJFgDBAKKzNADBAKotQADBAKowlwDBAKq
9owDBAWx3QADBAWza8ADBAS64oADBAS7bHADBAS9JJAwFAQCAAIwDgMFACgEALQD
BQAoBCfMMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAm6GAgMAz4UwDQYJKoZIhvcN
AQELBQADggEBACx341lEFVqwgCPPuDNvr2Q2DfkHQ1fiGsyVUrLwWYApAtrk7iPD
Di8hab3inuev/H4pBpNC4D/3qKMUR9/nXFScGD9GkZC2s8soBtYciBnsULndpPAS
w7IXK0OrNz9+X2xdGXfXYW5oMkEaBTxNERmz6QR8eK0lvNSrOcn6jHr5DIZvQtOA
c39H13J+6D0uw+rAlpk2RhLFZ2P/mnebni1x304zDG0sMdfwB0pVI4aaCaomdogN
oye/hcA9vpHhu6/9zq8nCuPUmWlzB+DzpB8BPBEq38JjemvRbe7AbA26JMAVFADu
zJgaDQy/qcbKky66MKROZKuOscS/Vmcoy7I=
-----END CERTIFICATE-----
Generated at Wed Jul 10 23:06:32 2024 by rpki-client on console-ams.rpki-client.org