Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer
File:                     122A0906A85BBC298F8098D0F553D11D5DA374D5.cer (raw, json)
Hash identifier:          ZRb6V/PWG/fRkDGfbjDfNfnGGXASfk/u8XFjhJHDzm4=
Subject key identifier:   12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0143B13CB81ECCC895E223FB3EBD0B07A4CE842B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:46:44 +0000
Certificate not after:    Wed 02 Apr 2025 19:51:44 +0000
Subordinate resources:    AS: 262292
                          IP: 177.54.80.0/20

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:43:b1:3c:b8:1e:cc:c8:95:e2:23:fb:3e:bd:0b:07:a4:ce:84:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:46:44 2024 GMT
            Not After : Apr  2 19:51:44 2025 GMT
        Subject: CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:4b:0e:b7:12:8b:9f:4f:82:4c:14:69:83:
                    b8:7c:4f:7f:e2:5e:d0:ab:43:52:7b:78:da:82:43:
                    c2:bb:89:7a:f1:07:97:90:5f:5d:19:28:ab:c0:c2:
                    9e:4a:79:1a:e8:ff:d4:cc:b7:4a:7e:27:06:11:6f:
                    ca:59:c6:15:08:83:72:61:19:88:ec:e5:13:dd:c4:
                    86:7f:b4:d3:e9:fc:82:b0:5f:a9:e0:d1:94:e6:78:
                    87:bd:70:f7:54:f7:d7:1e:53:6e:2c:fc:38:15:e9:
                    a1:81:be:e2:a2:17:b1:6f:ea:d1:13:c4:27:da:bf:
                    cb:55:06:80:8b:76:f1:aa:f0:e7:3f:e5:9b:7d:3c:
                    e1:a0:77:55:56:8b:92:29:c5:50:8c:e2:54:a1:5f:
                    68:bd:ff:4b:f0:c4:a2:d3:af:2c:ee:9e:3e:b5:2e:
                    4a:13:9a:94:90:b8:dc:d8:6e:ff:a4:f7:ad:b6:74:
                    b8:53:3d:77:54:9f:bf:51:7b:67:ad:9a:06:0a:7e:
                    1e:22:09:a6:6b:4e:7d:0c:4f:b3:b8:b0:4b:72:62:
                    34:a2:f1:a2:e0:6e:4a:e5:f9:a6:77:73:66:a7:c1:
                    25:14:4a:93:6e:08:7b:d1:99:10:44:d7:fe:ec:4a:
                    05:18:2e:5f:0b:48:bd:35:be:36:63:76:5a:06:2d:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262292

    Signature Algorithm: sha256WithRSAEncryption
         be:c9:91:96:24:d9:10:9c:36:e4:1f:a2:73:8d:ee:f9:df:13:
         10:18:64:ca:bf:69:5e:73:52:f3:48:01:56:5b:cf:ee:5e:54:
         d5:2c:35:51:fe:f8:88:0d:e2:53:71:19:ec:46:56:8e:a4:61:
         04:fa:3c:b5:b8:bd:49:09:06:eb:ef:73:70:bc:45:07:1a:76:
         89:95:e6:a9:85:5b:15:64:e1:88:02:ff:70:ec:af:77:ed:52:
         ac:8a:bb:4e:0d:4c:df:4b:32:f0:0a:a7:02:30:f4:d8:9d:f3:
         00:8d:f2:1b:17:b2:88:3c:42:df:26:30:63:6c:75:3c:96:05:
         c6:0f:c9:07:15:21:f5:4b:28:ab:6f:c4:68:6d:29:03:f5:10:
         47:f8:fd:04:79:a0:91:d6:68:37:92:73:f0:55:a0:c3:d9:72:
         fa:15:70:44:63:41:af:e5:64:32:2f:ab:42:3d:4f:9f:dd:10:
         27:2d:a2:02:bf:d0:fc:bb:ea:31:76:33:b0:b2:4a:1e:5c:7d:
         6b:ea:22:ec:2e:9c:b0:5d:ab:09:cc:60:51:e8:5f:51:65:34:
         84:ce:ab:7c:13:0f:94:b7:49:5f:fa:10:d8:90:6f:52:92:8f:
         ca:63:ff:eb:63:3c:5e:c4:8e:c6:2c:4b:48:ea:8c:41:38:0e:
         46:29:30:b2
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUAUOxPLgezMiV4iP7Pr0LB6TOhCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTQ2NDRaFw0yNTA0MDIxOTUxNDRaMDMxMTAvBgNV
BAMTKDEyMkEwOTA2QTg1QkJDMjk4RjgwOThEMEY1NTNEMTFENURBMzc0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0f0sOtxKLn0+CTBRpg7h8T3/i
XtCrQ1J7eNqCQ8K7iXrxB5eQX10ZKKvAwp5KeRro/9TMt0p+JwYRb8pZxhUIg3Jh
GYjs5RPdxIZ/tNPp/IKwX6ng0ZTmeIe9cPdU99ceU24s/DgV6aGBvuKiF7Fv6tET
xCfav8tVBoCLdvGq8Oc/5Zt9POGgd1VWi5IpxVCM4lShX2i9/0vwxKLTryzunj61
LkoTmpSQuNzYbv+k9622dLhTPXdUn79Re2etmgYKfh4iCaZrTn0MT7O4sEtyYjSi
8aLgbkrl+aZ3c2anwSUUSpNuCHvRmRBE1/7sSgUYLl8LSL01vjZjdloGLZrTAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSKgkGqFu8KY+A
mND1U9EdXaN01TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1hw
NkFZcm05TGJyWU5uQ1dhTDFBTTE1RHVSOUJERFhMNHFiYlU2WFF0R0svMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NY
cDZBWXJtOUxicllObkNXYUwxQU0xNUR1UjlCRERYTDRxYmJVNlhRdEdLLzEvMTIy
QTA5MDZBODVCQkMyOThGODA5OEQwRjU1M0QxMUQ1REEzNzRENS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsTZQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQA
lDANBgkqhkiG9w0BAQsFAAOCAQEAvsmRliTZEJw25B+ic43u+d8TEBhkyr9pXnNS
80gBVlvP7l5U1Sw1Uf74iA3iU3EZ7EZWjqRhBPo8tbi9SQkG6+9zcLxFBxp2iZXm
qYVbFWThiAL/cOyvd+1SrIq7Tg1M30sy8AqnAjD02J3zAI3yGxeyiDxC3yYwY2x1
PJYFxg/JBxUh9Usoq2/EaG0pA/UQR/j9BHmgkdZoN5Jz8FWgw9ly+hVwRGNBr+Vk
Mi+rQj1Pn90QJy2iAr/Q/LvqMXYzsLJKHlx9a+oi7C6csF2rCcxgUehfUWU0hM6r
fBMPlLdJX/oQ2JBvUpKPymP/62M8XsSOxixLSOqMQTgORikwsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org