Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C06F299E571AF48038962731D4987C4DAF36E15.cer
File:                     0C06F299E571AF48038962731D4987C4DAF36E15.cer (raw, json)
Hash identifier:          wm2XDhauMzzQ+U6HJwt4AT9/stgRn7d07oRoViAVR4o=
Subject key identifier:   0C:06:F2:99:E5:71:AF:48:03:89:62:73:1D:49:87:C4:DA:F3:6E:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28B90EDFE9E3CE27264B08207D15A595B1015CCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1/0C06F299E571AF48038962731D4987C4DAF36E15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:26 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:26 +0000
Subordinate resources:    AS: 268221
                          IP: 45.236.52.0/22
                          IP: 2804:4dd0::/32

Validation:               Failed, certificate revoked on Tue 28 May 2024 19:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b9:0e:df:e9:e3:ce:27:26:4b:08:20:7d:15:a5:95:b1:01:5c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:26 2024 GMT
            Not After : Apr  2 18:30:26 2025 GMT
        Subject: CN=0C06F299E571AF48038962731D4987C4DAF36E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:95:a3:06:6b:85:7f:f7:4f:6c:3f:48:4e:00:
                    b0:23:f4:94:2a:c4:12:19:de:ec:1d:6a:31:7a:ac:
                    5d:94:7b:88:2c:ec:21:ee:47:38:2f:0d:7c:31:8d:
                    d4:52:52:25:5d:3e:c2:1c:25:ed:78:07:b8:a0:a6:
                    7f:c3:64:fd:b7:5c:62:2b:35:b5:da:45:41:78:3c:
                    65:cc:81:e2:e8:7c:68:a8:aa:94:95:be:3f:14:9b:
                    8e:83:60:d8:51:62:9b:d9:51:4c:33:62:5f:8e:7d:
                    6d:e7:c9:41:e4:79:b4:a2:9b:7a:3b:38:47:31:53:
                    cd:b4:96:a2:f7:01:e3:82:24:5c:31:1a:d0:8b:5f:
                    da:4d:16:81:c5:98:ab:ab:d7:45:4a:17:4c:01:c2:
                    f8:64:1a:a5:5b:8a:22:6b:ba:10:7c:c3:d8:a0:3f:
                    9d:11:68:db:5d:13:f6:25:81:3c:01:eb:1e:a0:57:
                    98:0c:cb:7b:fc:f3:60:cc:da:00:a0:23:6d:d6:56:
                    c7:ba:26:10:af:82:e3:1b:1b:c2:b1:b9:29:c3:c6:
                    9c:5a:d5:42:44:32:53:f3:ed:2d:7f:3d:55:47:cb:
                    c9:21:84:2f:24:c1:b2:9b:41:b4:25:53:57:22:17:
                    a6:73:4b:3d:db:a6:cc:79:ec:16:38:ee:bc:5d:2a:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:06:F2:99:E5:71:AF:48:03:89:62:73:1D:49:87:C4:DA:F3:6E:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1/0C06F299E571AF48038962731D4987C4DAF36E15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.52.0/22
                IPv6:
                  2804:4dd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268221

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:cd:af:3c:56:92:1a:04:f9:1c:1e:06:22:32:bf:11:23:
         83:0a:34:3c:56:63:55:04:29:70:cd:85:9d:83:65:92:91:86:
         6b:e3:c8:69:f3:d6:76:9b:aa:87:f4:59:8b:ef:d8:4f:1e:5e:
         ca:4d:e6:66:63:9b:d3:dd:58:01:85:40:f7:97:8d:c8:2b:db:
         50:21:dc:9e:c5:10:eb:b8:07:b7:a7:62:3b:e0:a3:cc:f5:10:
         3a:6f:c6:93:33:ff:74:71:26:99:4e:00:47:27:c0:51:d9:1c:
         a6:ef:ea:13:43:38:e7:78:62:c0:e9:9c:06:53:3a:53:78:31:
         68:75:60:6e:89:69:fd:e7:f5:fd:c4:73:fa:ba:bc:7d:e6:d2:
         92:cd:d4:7e:1e:d9:b3:d7:7d:0b:db:55:14:54:63:3b:5f:be:
         26:dd:82:bd:0b:2b:54:13:3a:2f:3d:83:1c:b0:c8:26:47:b1:
         2c:98:02:ef:c3:c2:8b:2a:8a:fc:42:9a:71:5d:cb:8a:3d:fc:
         b6:7f:20:85:65:f9:8b:e6:bf:f2:be:58:3e:66:b0:19:63:ae:
         13:67:ca:a9:f8:33:35:df:e7:78:f3:9f:ab:6e:e7:9c:a5:44:
         b6:d7:5f:d2:f3:95:08:ce:75:e7:dc:74:96:cf:44:db:20:28:
         bb:db:27:81
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUKLkO3+njzicmSwggfRWllbEBXMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1MjZaFw0yNTA0MDIxODMwMjZaMDMxMTAvBgNV
BAMTKDBDMDZGMjk5RTU3MUFGNDgwMzg5NjI3MzFENDk4N0M0REFGMzZFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDelaMGa4V/909sP0hOALAj9JQq
xBIZ3uwdajF6rF2Ue4gs7CHuRzgvDXwxjdRSUiVdPsIcJe14B7igpn/DZP23XGIr
NbXaRUF4PGXMgeLofGioqpSVvj8Um46DYNhRYpvZUUwzYl+OfW3nyUHkebSim3o7
OEcxU820lqL3AeOCJFwxGtCLX9pNFoHFmKur10VKF0wBwvhkGqVbiiJruhB8w9ig
P50RaNtdE/YlgTwB6x6gV5gMy3v882DM2gCgI23WVse6JhCvguMbG8KxuSnDxpxa
1UJEMlPz7S1/PVVHy8khhC8kwbKbQbQlU1ciF6ZzSz3bpsx57BY47rxdKhkrAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMBvKZ5XGvSAOJ
YnMdSYfE2vNuFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMk5o
Q1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQNU4vMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMk5o
Q1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQNU4vMS8wQzA2
RjI5OUU1NzFBRjQ4MDM4OTYyNzMxRDQ5ODdDNERBRjM2RTE1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt7DQwDQQCAAIwBwMFACgETdAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBe9MA0GCSqGSIb3DQEBCwUAA4IBAQBsLs2vPFaSGgT5HB4G
IjK/ESODCjQ8VmNVBClwzYWdg2WSkYZr48hp89Z2m6qH9FmL79hPHl7KTeZmY5vT
3VgBhUD3l43IK9tQIdyexRDruAe3p2I74KPM9RA6b8aTM/90cSaZTgBHJ8BR2Rym
7+oTQzjneGLA6ZwGUzpTeDFodWBuiWn95/X9xHP6urx95tKSzdR+Htmz130L21UU
VGM7X74m3YK9CytUEzovPYMcsMgmR7EsmALvw8KLKor8QppxXcuKPfy2fyCFZfmL
5r/yvlg+ZrAZY64TZ8qp+DM13+d485+rbuecpUS211/S85UIznXn3HSWz0TbICi7
2yeB
-----END CERTIFICATE-----
Generated at Tue May 28 21:12:43 2024 by rpki-client on console-fra.rpki-client.org