Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29187FC1EF7BFAA3B3D2F030A034CD4574564862.cer
File:                     29187FC1EF7BFAA3B3D2F030A034CD4574564862.cer (raw, json)
Hash identifier:          puBte52eUZQ5o+to0e5LMwvXWA9i+tBiUgN/7MXzD7M=
Subject key identifier:   29:18:7F:C1:EF:7B:FA:A3:B3:D2:F0:30:A0:34:CD:45:74:56:48:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40FB6A31D82CD6A31960CF01D9826C2AEF05FE8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/1/29187FC1EF7BFAA3B3D2F030A034CD4574564862.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Sep 2024 19:25:17 +0000
Certificate not after:    Mon 15 Sep 2025 19:30:17 +0000
Subordinate resources:    AS: 272218
                          IP: 2804:83c4::/32

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 20:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fb:6a:31:d8:2c:d6:a3:19:60:cf:01:d9:82:6c:2a:ef:05:fe:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 16 19:25:17 2024 GMT
            Not After : Sep 15 19:30:17 2025 GMT
        Subject: CN=29187FC1EF7BFAA3B3D2F030A034CD4574564862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:04:e6:68:a6:95:66:eb:6d:d0:fd:2f:7a:
                    33:d3:46:bd:1a:4e:03:ac:38:1f:64:33:40:34:ce:
                    f3:c0:0b:bc:d7:1f:f3:60:da:e0:23:fe:18:20:69:
                    fe:04:a1:a8:75:13:66:fd:0a:8c:e3:68:fe:bd:d1:
                    e7:53:02:ca:26:96:35:a2:77:16:a6:c9:11:86:6c:
                    b4:98:bd:57:1a:cc:1b:54:3a:d1:98:98:9d:b3:35:
                    73:1c:0e:22:3c:f2:2b:81:0e:e8:d8:b6:49:39:66:
                    b7:32:c9:0f:8b:46:f5:20:38:7f:bb:3c:6c:a8:1c:
                    cd:c4:6e:1c:90:e5:5e:22:6b:39:58:ea:8a:12:89:
                    c0:e0:1e:6b:26:d5:29:d9:a6:b6:27:ad:d8:97:52:
                    3a:b7:34:75:a2:39:54:74:f5:56:6e:c7:76:ed:71:
                    e9:05:d2:70:ee:0f:8d:f3:0b:f8:08:a6:d8:99:02:
                    87:b1:12:b1:e1:5d:00:ef:97:cc:1a:55:01:a2:d3:
                    b7:a9:7c:ef:95:3c:91:e5:c0:07:a5:25:0a:6e:ff:
                    dc:27:6a:b3:b4:bb:50:d1:08:4c:2d:ed:01:ad:b7:
                    6d:5c:05:e9:96:59:54:1f:e1:af:97:dc:ad:48:e1:
                    be:69:ac:d7:99:d3:f6:95:6a:e0:33:d5:05:93:f2:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:18:7F:C1:EF:7B:FA:A3:B3:D2:F0:30:A0:34:CD:45:74:56:48:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/1/29187FC1EF7BFAA3B3D2F030A034CD4574564862.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272218

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:2f:92:46:b8:9f:f0:23:97:2c:5c:bc:8c:d0:e2:bf:0a:
         b2:40:6a:1d:6e:93:6f:46:5a:3c:3e:0a:26:6e:ea:e3:fb:7f:
         9a:e5:43:7f:82:bd:cd:5e:a5:15:03:13:cd:6c:2d:37:10:c2:
         2b:88:5a:d7:ea:94:26:fd:df:5e:25:47:1d:7a:db:c9:f7:1c:
         9e:ec:81:55:0c:9b:e2:bb:06:ef:0e:6d:dc:8c:51:ca:c4:bc:
         26:1c:7c:8c:c1:2e:b2:d5:6f:26:c3:5e:73:a6:d4:84:1a:be:
         6f:4f:f5:90:b5:bd:a1:0e:42:c7:24:b3:f9:0c:f0:93:e5:6f:
         3e:e1:4c:e3:75:e1:4e:c6:33:8d:90:44:ac:3c:94:10:fd:fd:
         05:3b:cf:29:16:5b:a4:92:9e:72:24:4a:eb:60:fe:fc:fe:4c:
         55:d9:5c:a3:9b:55:c6:7f:69:b6:bd:aa:82:d5:14:d4:61:aa:
         7e:b3:59:e0:e9:f1:4b:1c:e1:45:e6:eb:40:aa:26:5f:ed:3e:
         63:c0:92:53:51:e1:0e:c4:a9:b9:ac:d4:c2:15:93:c7:4a:de:
         b7:a7:ab:3e:89:d6:87:dc:92:8a:35:2a:70:f6:88:a2:f0:ef:
         8c:a9:6d:b2:65:1c:9a:91:18:b5:63:aa:15:1e:ab:2e:a0:5c:
         41:1b:b1:e7
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUQPtqMdgs1qMZYM8B2YJsKu8F/o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTYxOTI1MTdaFw0yNTA5MTUxOTMwMTdaMDMxMTAvBgNV
BAMTKDI5MTg3RkMxRUY3QkZBQTNCM0QyRjAzMEEwMzRDRDQ1NzQ1NjQ4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCwTmaKaVZutt0P0vejPTRr0a
TgOsOB9kM0A0zvPAC7zXH/Ng2uAj/hggaf4Eoah1E2b9CozjaP690edTAsomljWi
dxamyRGGbLSYvVcazBtUOtGYmJ2zNXMcDiI88iuBDujYtkk5ZrcyyQ+LRvUgOH+7
PGyoHM3EbhyQ5V4iazlY6ooSicDgHmsm1SnZprYnrdiXUjq3NHWiOVR09VZux3bt
cekF0nDuD43zC/gIptiZAoexErHhXQDvl8waVQGi07epfO+VPJHlwAelJQpu/9wn
arO0u1DRCEwt7QGtt21cBemWWVQf4a+X3K1I4b5prNeZ0/aVauAz1QWT8uxzAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpGH/B73v6o7PS
8DCgNM1FdFZIYjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG1Y
blVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNTeGgvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG1Y
blVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNTeGgvMS8yOTE4
N0ZDMUVGN0JGQUEzQjNEMkYwMzBBMDM0Q0Q0NTc0NTY0ODYyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIPEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQn
WjANBgkqhkiG9w0BAQsFAAOCAQEAB9Evkka4n/AjlyxcvIzQ4r8KskBqHW6Tb0Za
PD4KJm7q4/t/muVDf4K9zV6lFQMTzWwtNxDCK4ha1+qUJv3fXiVHHXrbyfccnuyB
VQyb4rsG7w5t3IxRysS8Jhx8jMEustVvJsNec6bUhBq+b0/1kLW9oQ5CxySz+Qzw
k+VvPuFM43XhTsYzjZBErDyUEP39BTvPKRZbpJKeciRK62D+/P5MVdlco5tVxn9p
tr2qgtUU1GGqfrNZ4OnxSxzhRebrQKomX+0+Y8CSU1HhDsSpuazUwhWTx0ret6er
PonWh9ySijUqcPaIovDvjKltsmUcmpEYtWOqFR6rLqBcQRux5w==
-----END CERTIFICATE-----
Generated at Sat Sep 21 22:26:18 2024 by rpki-client on console-ams.rpki-client.org