Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/082DFAF103E99CC278BC8F1743150767CE35E298.cer
File:                     082DFAF103E99CC278BC8F1743150767CE35E298.cer (raw, json)
Hash identifier:          zqi0sxx+ZfvipOPrWHtuS12bJUElDBoVQOp5bswPLXE=
Subject key identifier:   08:2D:FA:F1:03:E9:9C:C2:78:BC:8F:17:43:15:07:67:CE:35:E2:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B867204A4C2836F34C4902E1ED81185236258D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/082DFAF103E99CC278BC8F1743150767CE35E298.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 16:44:32 +0000
Certificate not after:    Fri 30 May 2025 16:49:32 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 11:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:86:72:04:a4:c2:83:6f:34:c4:90:2e:1e:d8:11:85:23:62:58:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 16:44:32 2024 GMT
            Not After : May 30 16:49:32 2025 GMT
        Subject: CN=082DFAF103E99CC278BC8F1743150767CE35E298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:c8:7e:a1:6c:94:a4:20:d8:07:43:f3:c3:
                    5a:b6:95:f3:11:f7:5b:33:26:67:ca:7b:30:46:0d:
                    63:32:98:b3:2e:ec:36:8a:15:a9:6a:e2:bf:18:21:
                    cf:9e:3c:df:f6:fb:6e:fc:ba:9d:24:b9:56:08:3f:
                    80:cc:77:8a:6b:24:99:7e:dc:bc:53:95:2c:57:19:
                    a9:46:4b:25:83:88:8f:f2:3b:57:fe:c2:61:05:77:
                    d6:1d:7a:12:3b:bd:21:5f:5b:aa:e6:64:55:35:90:
                    ef:b6:96:f9:d7:a3:b0:46:5c:9c:c1:73:01:f0:f1:
                    16:43:b0:ed:43:e9:b4:e5:da:20:23:2a:1c:3b:f3:
                    0b:29:e1:f1:c0:1e:bb:e4:e0:40:82:04:78:32:9f:
                    94:1a:20:b7:49:e9:8c:f8:ae:2f:55:16:e4:f4:2b:
                    49:80:ea:f1:13:1b:b1:86:a9:87:26:aa:d9:d6:7b:
                    6a:b7:34:12:68:58:a9:c0:81:a5:44:c7:2e:32:06:
                    56:e8:61:61:5a:7a:47:c9:d9:a1:16:3d:b0:55:c5:
                    76:fb:19:06:34:7d:a9:2f:c7:40:0e:e6:82:ea:a2:
                    5f:41:2f:91:f8:1d:98:df:8f:d6:8f:b5:20:ea:c5:
                    04:f8:34:07:f9:0d:d3:b1:04:1e:4b:2a:b2:55:a7:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:2D:FA:F1:03:E9:9C:C2:78:BC:8F:17:43:15:07:67:CE:35:E2:98
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/082DFAF103E99CC278BC8F1743150767CE35E298.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:8c:1b:83:de:77:7c:ca:05:e9:1e:d8:dd:5b:8c:20:cf:
         c1:90:3b:6d:c4:9f:a6:02:a1:6b:5f:b2:26:d9:f3:e9:e3:29:
         09:a6:ac:89:2f:13:79:3b:0d:0e:61:86:8d:df:1b:88:13:56:
         4e:70:23:3f:18:ea:68:0a:90:bf:38:aa:68:9c:27:fb:18:8f:
         9f:35:d8:d9:1b:ad:92:62:4b:ca:e8:56:88:d1:31:4c:fc:75:
         ba:47:8f:4d:08:25:28:9c:48:bc:e6:4f:75:fb:68:56:6b:b8:
         99:c8:5f:e8:77:e1:88:3c:67:e3:63:63:2f:af:00:98:09:8c:
         ce:49:6e:1a:06:bf:52:6a:04:71:95:cc:e5:f6:4a:0c:c8:a3:
         ad:21:f1:8c:c5:42:8d:d5:68:2d:50:25:b6:66:a7:a9:4e:73:
         55:f9:9c:9a:d8:43:cd:ec:9e:a1:aa:21:36:71:01:f3:79:1f:
         47:76:89:00:e0:bc:35:22:a3:7e:a9:12:75:0c:91:2c:d9:3a:
         a3:28:41:46:9b:e6:d0:63:9a:08:19:cc:ee:95:21:99:be:f6:
         1e:f1:46:93:04:27:17:10:26:84:5c:52:e2:67:0f:32:6e:eb:
         23:42:6e:86:b2:b5:6a:6a:54:ca:d0:34:ea:47:25:73:6b:2f:
         6a:6c:d8:88
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUe4ZyBKTCg280xJAuHtgRhSNiWNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MzExNjQ0MzJaFw0yNTA1MzAxNjQ5MzJaMDMxMTAvBgNV
BAMTKDA4MkRGQUYxMDNFOTlDQzI3OEJDOEYxNzQzMTUwNzY3Q0UzNUUyOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wsh+oWyUpCDYB0Pzw1q2lfMR
91szJmfKezBGDWMymLMu7DaKFalq4r8YIc+ePN/2+278up0kuVYIP4DMd4prJJl+
3LxTlSxXGalGSyWDiI/yO1f+wmEFd9YdehI7vSFfW6rmZFU1kO+2lvnXo7BGXJzB
cwHw8RZDsO1D6bTl2iAjKhw78wsp4fHAHrvk4ECCBHgyn5QaILdJ6Yz4ri9VFuT0
K0mA6vETG7GGqYcmqtnWe2q3NBJoWKnAgaVExy4yBlboYWFaekfJ2aEWPbBVxXb7
GQY0fakvx0AO5oLqol9BL5H4HZjfj9aPtSDqxQT4NAf5DdOxBB5LKrJVpyp3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQILfrxA+mcwni8
jxdDFQdnzjXimDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlZu
ZVRuRmRDWFR5Z2Zjam9lQThvY05OTlR2Z1lzY2N0eEpNcHhLRFg1dVQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JW
bmVUbkZkQ1hUeWdmY2pvZUE4b2NOTk5UdmdZc2NjdHhKTXB4S0RYNXVULzAvMDgy
REZBRjEwM0U5OUNDMjc4QkM4RjE3NDMxNTA3NjdDRTM1RTI5OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyNsQMA0EAgACMAcDBQAoBHHEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQh2jANBgkqhkiG9w0BAQsFAAOCAQEAJa2MG4Ped3zKBeke
2N1bjCDPwZA7bcSfpgKha1+yJtnz6eMpCaasiS8TeTsNDmGGjd8biBNWTnAjPxjq
aAqQvziqaJwn+xiPnzXY2RutkmJLyuhWiNExTPx1ukePTQglKJxIvOZPdftoVmu4
mchf6HfhiDxn42NjL68AmAmMzkluGga/UmoEcZXM5fZKDMijrSHxjMVCjdVoLVAl
tmanqU5zVfmcmthDzeyeoaohNnEB83kfR3aJAOC8NSKjfqkSdQyRLNk6oyhBRpvm
0GOaCBnM7pUhmb72HvFGkwQnFxAmhFxS4mcPMm7rI0JuhrK1ampUytA06kclc2sv
amzYiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org