Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06AC3B8E5987EBD0336504C7814437A1D3A600B5.cer
File:                     06AC3B8E5987EBD0336504C7814437A1D3A600B5.cer (raw, json)
Hash identifier:          93eQJrwfA59x1BL+V07eCc5X2sqH5Cp8014syQHnVNc=
Subject key identifier:   06:AC:3B:8E:59:87:EB:D0:33:65:04:C7:81:44:37:A1:D3:A6:00:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       414BEC7D19C4843CF6DF918D54F35BD8B3A12412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/06AC3B8E5987EBD0336504C7814437A1D3A600B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:44 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:44 +0000
Subordinate resources:    AS: 272182
                          IP: 2804:8330::/32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 13:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4b:ec:7d:19:c4:84:3c:f6:df:91:8d:54:f3:5b:d8:b3:a1:24:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject: CN=06AC3B8E5987EBD0336504C7814437A1D3A600B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:13:ef:40:4a:ce:a6:d5:ad:a2:6e:20:5e:d9:
                    57:3f:2c:c6:36:00:57:24:7f:5b:f8:80:f4:33:ee:
                    16:42:42:8f:6b:8f:94:3b:e5:12:8c:f1:2d:10:5f:
                    f7:b9:f9:99:1c:5d:68:dd:00:80:fb:41:81:16:3b:
                    6d:6d:53:76:ee:e2:28:e5:d1:fd:cd:9b:d4:61:eb:
                    55:a2:69:80:8b:e1:d2:91:6b:5a:37:e3:da:bb:cc:
                    b2:02:8d:5f:86:24:32:70:f7:76:77:0e:81:64:ba:
                    66:83:3e:fd:e8:cf:ac:da:a9:c8:b7:4d:2a:da:fb:
                    f3:45:dd:c7:f8:08:83:d1:e9:f5:4d:f6:9e:76:ea:
                    00:f1:92:7c:28:b3:62:c2:1a:11:46:35:81:7c:b5:
                    aa:78:f8:6e:b5:f3:94:02:b0:91:3b:29:11:39:61:
                    5d:7e:d9:e7:9b:5d:de:d0:6c:90:ea:80:e4:c5:73:
                    1e:a7:51:b6:4c:3e:b6:6d:00:fe:ee:a2:4d:20:ba:
                    23:5a:f5:56:7d:19:71:b0:6f:a6:77:b1:45:be:b4:
                    e7:1a:48:86:50:97:36:a6:9a:86:e0:3e:e3:5e:0d:
                    9e:d7:4a:68:75:46:a7:79:48:fe:04:63:5f:57:8a:
                    76:7f:5c:f2:f6:19:c0:97:bc:82:22:61:6a:10:f1:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:AC:3B:8E:59:87:EB:D0:33:65:04:C7:81:44:37:A1:D3:A6:00:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/06AC3B8E5987EBD0336504C7814437A1D3A600B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272182

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:2e:f5:a0:65:ff:79:be:80:05:fc:d1:35:77:34:7c:05:
         1a:ce:0f:97:74:1f:12:10:97:14:ee:0e:06:67:c1:89:e3:71:
         fc:b6:52:cf:24:14:41:bc:89:88:af:7f:0c:cc:1b:1a:94:23:
         d4:0c:22:6c:ce:95:36:05:3b:a2:65:4e:5d:d8:bb:6d:4a:2e:
         bd:24:59:29:eb:e0:cd:ce:ff:73:1f:c6:4d:d1:ce:88:8d:e5:
         66:1a:6a:f5:1a:6c:88:23:a0:fe:7d:49:da:f8:fa:97:cf:6a:
         78:e0:91:51:97:00:53:d1:97:47:2c:f8:67:3a:4b:9a:7e:5f:
         b8:e5:2b:2f:95:37:76:64:6b:c0:0a:e8:5d:7f:c5:f2:aa:f8:
         86:64:da:c6:8b:34:eb:2e:5f:5d:a1:1c:fd:3e:21:91:3a:d3:
         52:c1:36:b1:af:8e:4e:8b:6c:eb:39:dc:59:3e:1a:fe:53:6a:
         2b:7b:64:74:df:bc:58:1c:08:09:2e:ba:45:03:7a:c5:6c:35:
         34:0f:03:f6:8b:59:9f:34:92:7f:ce:5c:66:33:aa:ab:86:4e:
         44:7b:25:a2:44:8e:3d:9c:98:1d:b6:e6:20:f8:46:33:42:ba:
         69:fe:31:63:7e:89:7e:7a:37:38:e2:d8:49:c4:7b:80:cd:df:
         31:16:f1:1a
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUQUvsfRnEhDz235GNVPNb2LOhJBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1NDRaFw0yNTA0MDIxODMwNDRaMDMxMTAvBgNV
BAMTKDA2QUMzQjhFNTk4N0VCRDAzMzY1MDRDNzgxNDQzN0ExRDNBNjAwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/E+9ASs6m1a2ibiBe2Vc/LMY2
AFckf1v4gPQz7hZCQo9rj5Q75RKM8S0QX/e5+ZkcXWjdAID7QYEWO21tU3bu4ijl
0f3Nm9Rh61WiaYCL4dKRa1o349q7zLICjV+GJDJw93Z3DoFkumaDPv3oz6zaqci3
TSra+/NF3cf4CIPR6fVN9p526gDxknwos2LCGhFGNYF8tap4+G6185QCsJE7KRE5
YV1+2eebXd7QbJDqgOTFcx6nUbZMPrZtAP7uok0guiNa9VZ9GXGwb6Z3sUW+tOca
SIZQlzammobgPuNeDZ7XSmh1Rqd5SP4EY19XinZ/XPL2GcCXvIIiYWoQ8UtpAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGrDuOWYfr0DNl
BMeBRDeh06YAtTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFR6
ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tGUGcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhU
emRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzEvMDZB
QzNCOEU1OTg3RUJEMDMzNjUwNEM3ODE0NDM3QTFEM0E2MDBCNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASDMDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
JzYwDQYJKoZIhvcNAQELBQADggEBALViLvWgZf95voAF/NE1dzR8BRrOD5d0HxIQ
lxTuDgZnwYnjcfy2Us8kFEG8iYivfwzMGxqUI9QMImzOlTYFO6JlTl3Yu21KLr0k
WSnr4M3O/3Mfxk3RzoiN5WYaavUabIgjoP59Sdr4+pfPanjgkVGXAFPRl0cs+Gc6
S5p+X7jlKy+VN3Zka8AK6F1/xfKq+IZk2saLNOsuX12hHP0+IZE601LBNrGvjk6L
bOs53Fk+Gv5Tait7ZHTfvFgcCAkuukUDesVsNTQPA/aLWZ80kn/OXGYzqquGTkR7
JaJEjj2cmB225iD4RjNCumn+MWN+iX56Nzji2EnEe4DN3zEW8Ro=
-----END CERTIFICATE-----
Generated at Thu Jun 27 20:23:53 2024 by rpki-client on console-ams.rpki-client.org