Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B1D6282187C28935584BD0382C811F920D2E93B.cer
File:                     0B1D6282187C28935584BD0382C811F920D2E93B.cer (raw, json)
Hash identifier:          9B/pwXxzjoBIWia2Byi099CEyofvw8AMO7lPkFduxhU=
Subject key identifier:   0B:1D:62:82:18:7C:28:93:55:84:BD:03:82:C8:11:F9:20:D2:E9:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2178EFDA2E0F829CCD2FA542B020A90D79CEE0C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/0B1D6282187C28935584BD0382C811F920D2E93B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 18:03:04 +0000
Certificate not after:    Wed 23 Apr 2025 18:08:04 +0000
Subordinate resources:    AS: 272501
                          IP: 2804:8224::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 08:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:78:ef:da:2e:0f:82:9c:cd:2f:a5:42:b0:20:a9:0d:79:ce:e0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 18:03:04 2024 GMT
            Not After : Apr 23 18:08:04 2025 GMT
        Subject: CN=0B1D6282187C28935584BD0382C811F920D2E93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:09:94:8a:a8:9c:f6:52:c9:e6:1b:b8:bf:
                    ad:b9:f8:34:7c:eb:69:27:47:37:b9:5b:19:e5:23:
                    a7:b9:33:90:d8:58:5e:70:e5:dd:fb:39:bc:65:2b:
                    b9:8d:b2:b9:1e:1d:c9:13:07:38:f5:af:b3:22:e1:
                    ca:fe:f7:f7:fd:73:f3:26:c0:d1:1a:06:27:d8:04:
                    e0:0d:4e:c2:26:6a:c9:6e:78:56:63:a0:24:77:d2:
                    6c:d4:6f:8a:0f:89:88:4c:26:02:be:d7:3d:1e:86:
                    ef:93:d7:ce:d7:89:ac:20:d7:6b:54:9e:c1:81:cf:
                    69:d7:ce:47:c6:66:96:62:96:74:6b:45:ff:89:75:
                    1e:d8:ab:15:60:49:a8:5e:d1:1b:46:09:2b:86:82:
                    ac:4e:19:e8:9a:50:76:31:81:25:de:4b:fe:a6:ff:
                    58:5b:40:b8:46:2f:a0:f2:da:ef:53:ed:1e:c2:db:
                    91:11:7a:dd:b9:00:26:de:93:a8:5f:55:bc:dc:64:
                    6c:92:7d:aa:8f:48:33:f4:55:ee:9a:46:82:20:2f:
                    10:d7:30:40:0f:d0:a3:6a:ec:c8:da:fd:c8:ce:ff:
                    58:5f:1c:c6:36:18:5c:66:30:e5:71:1c:ce:10:d5:
                    f2:f3:d0:23:10:d2:2d:01:e1:d9:e5:91:4c:f4:a0:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:1D:62:82:18:7C:28:93:55:84:BD:03:82:C8:11:F9:20:D2:E9:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/0B1D6282187C28935584BD0382C811F920D2E93B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272501

    Signature Algorithm: sha256WithRSAEncryption
         68:08:f3:6c:27:74:bf:1d:9d:38:b9:d4:20:e5:6b:b7:35:3e:
         f7:5e:6a:b9:6c:d2:bb:7d:6a:a9:25:d1:38:5e:28:f2:1b:1b:
         b9:dc:ab:65:0b:0b:2d:2a:71:ff:16:c7:a1:c5:d1:5b:c2:f7:
         71:ba:a4:ba:3c:94:59:bd:90:d7:3e:67:c8:ae:1a:a8:73:70:
         87:a2:a1:56:05:a6:77:04:bd:2f:18:1b:38:25:7a:65:30:9e:
         1e:c1:82:7e:ba:19:02:8c:d9:c8:ff:0f:94:60:c3:9b:fe:b5:
         75:2f:7f:d0:a0:ef:c4:04:63:24:e3:73:6e:cc:c1:a8:76:23:
         dc:1a:ea:fd:e9:71:fe:d7:62:ec:3a:98:36:82:73:26:f8:25:
         ef:9f:c3:e3:20:7b:45:62:f0:2c:a2:bf:e5:cd:1b:78:27:1d:
         19:eb:97:78:94:36:08:d0:b1:0f:0c:2a:28:f9:b2:23:62:c0:
         8a:5b:b3:83:8b:b7:92:95:08:2c:70:69:41:c7:db:2b:78:17:
         ba:85:d8:d6:a2:1f:4d:59:b1:a0:40:bf:08:a7:e5:94:5e:24:
         1a:a7:52:6a:14:0f:cc:fb:6f:ec:b0:8a:d8:a2:19:2d:d5:99:
         d7:31:b5:29:f6:0a:5c:e4:96:b2:c0:cb:15:e4:ec:d3:a0:04:
         be:31:7d:4e
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUIXjv2i4PgpzNL6VCsCCpDXnO4MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjQxODAzMDRaFw0yNTA0MjMxODA4MDRaMDMxMTAvBgNV
BAMTKDBCMUQ2MjgyMTg3QzI4OTM1NTg0QkQwMzgyQzgxMUY5MjBEMkU5M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHgmUiqic9lLJ5hu4v625+DR8
62knRze5WxnlI6e5M5DYWF5w5d37ObxlK7mNsrkeHckTBzj1r7Mi4cr+9/f9c/Mm
wNEaBifYBOANTsImaslueFZjoCR30mzUb4oPiYhMJgK+1z0ehu+T187Xiawg12tU
nsGBz2nXzkfGZpZilnRrRf+JdR7YqxVgSahe0RtGCSuGgqxOGeiaUHYxgSXeS/6m
/1hbQLhGL6Dy2u9T7R7C25ERet25ACbek6hfVbzcZGySfaqPSDP0Ve6aRoIgLxDX
MEAP0KNq7Mja/cjO/1hfHMY2GFxmMOVxHM4Q1fLz0CMQ0i0B4dnlkUz0oJorAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLHWKCGHwok1WE
vQOCyBH5INLpOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGVo
NWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejROSFMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hl
aDVkU1dONjF6VGtwWGdMdzhuTk5BaDUzZ1NEN2I5SFlBUmlWeno0TkhTLzAvMEIx
RDYyODIxODdDMjg5MzU1ODRCRDAzODJDODExRjkyMEQyRTkzQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
KHUwDQYJKoZIhvcNAQELBQADggEBAGgI82wndL8dnTi51CDla7c1Pvdearls0rt9
aqkl0TheKPIbG7ncq2ULCy0qcf8Wx6HF0VvC93G6pLo8lFm9kNc+Z8iuGqhzcIei
oVYFpncEvS8YGzglemUwnh7Bgn66GQKM2cj/D5Rgw5v+tXUvf9Cg78QEYyTjc27M
wah2I9wa6v3pcf7XYuw6mDaCcyb4Je+fw+Mge0Vi8Cyiv+XNG3gnHRnrl3iUNgjQ
sQ8MKij5siNiwIpbs4OLt5KVCCxwaUHH2yt4F7qF2NaiH01ZsaBAvwin5ZReJBqn
UmoUD8z7b+ywitiiGS3VmdcxtSn2ClzklrLAyxXk7NOgBL4xfU4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org