Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A595312C7CDFF5A76DBAE734D50E12527241A24.cer
File:                     2A595312C7CDFF5A76DBAE734D50E12527241A24.cer (raw, json)
Hash identifier:          Da74h8R/guOs3u7hwmTuRx3aZ0AaIvEqO/aYMbe+iT8=
Subject key identifier:   2A:59:53:12:C7:CD:FF:5A:76:DB:AE:73:4D:50:E1:25:27:24:1A:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7988F064A6A334FC6B1801D48838EF740A9C6165
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 23:47:48 +0000
Certificate not after:    Mon 29 Sep 2025 23:52:48 +0000
Subordinate resources:    AS: 270399
                          IP: 190.89.4.0/22
                          IP: 2804:6b6c::/32

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 15:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:88:f0:64:a6:a3:34:fc:6b:18:01:d4:88:38:ef:74:0a:9c:61:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 23:47:48 2024 GMT
            Not After : Sep 29 23:52:48 2025 GMT
        Subject: CN=2A595312C7CDFF5A76DBAE734D50E12527241A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:dd:77:ac:8f:29:a8:74:ea:36:86:92:87:
                    a4:d9:8e:da:ed:15:21:e4:33:2e:f4:ab:9c:43:04:
                    19:fd:f9:5c:87:f6:9f:29:6b:5b:2f:9b:7b:0f:a4:
                    19:0a:75:ce:c2:56:f6:88:da:0e:5a:66:a2:1a:b7:
                    a1:cd:c6:c2:53:61:c8:21:f4:59:d3:4f:7a:62:3c:
                    21:80:39:9a:9c:6e:5b:78:aa:55:ce:cd:a4:ef:df:
                    0a:1b:d2:ca:f5:4d:6b:f5:3c:25:2a:5a:9b:e1:a3:
                    aa:d4:45:2d:e2:1d:71:97:66:e3:ae:c5:ab:ff:00:
                    03:18:36:b9:5d:9f:1c:49:81:2a:18:74:fe:05:1f:
                    23:5b:95:ee:99:64:20:09:2d:99:5f:27:a4:64:c8:
                    10:1b:ea:83:ba:61:1d:ee:96:a0:32:3c:ae:25:d9:
                    6b:9f:ff:b5:d8:60:9a:01:c7:49:ed:68:b1:f5:8e:
                    85:08:f6:05:47:e1:51:79:1b:eb:ee:75:56:0d:c8:
                    84:c8:14:89:df:c3:9d:38:ee:81:20:55:68:f5:3c:
                    56:13:d4:2a:1b:05:f8:75:9a:13:49:bf:56:e5:74:
                    ea:9a:af:0e:63:8f:f2:4d:2b:36:63:ba:92:be:db:
                    d4:c6:64:9a:c0:2d:83:82:0c:10:4a:57:12:c2:0e:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:59:53:12:C7:CD:FF:5A:76:DB:AE:73:4D:50:E1:25:27:24:1A:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.4.0/22
                IPv6:
                  2804:6b6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270399

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:5f:cd:e2:cf:ac:ce:52:d6:0f:34:a3:48:71:04:8e:54:
         da:d8:84:84:8a:b7:7e:55:87:bc:47:e7:c5:91:b9:99:5c:75:
         41:5a:b4:76:77:54:53:a7:ab:a5:eb:7a:c3:a7:03:a0:d9:ad:
         17:be:99:35:cd:bd:82:e4:ef:60:1f:fe:0b:79:62:12:75:4f:
         22:50:5b:11:09:dd:29:06:41:0a:7c:52:a0:4c:2f:ec:a8:20:
         52:28:82:91:03:85:64:34:65:61:57:ec:3e:c1:5d:cb:35:79:
         5e:71:3a:54:cb:c9:65:84:3d:e3:88:45:7f:a0:00:84:f3:f6:
         9d:05:b4:a7:a0:4f:d1:a0:45:d0:ca:ac:84:49:f4:4e:97:d8:
         8b:97:36:7d:9f:66:04:74:b4:a0:2b:7f:3f:85:f2:0e:51:43:
         9f:ba:e6:59:3e:08:6e:b4:4e:25:82:ab:51:17:47:85:56:d1:
         20:f6:5a:fd:a6:54:ab:d5:3e:d8:3b:b2:a8:3b:93:bc:3c:bd:
         71:62:df:dc:c2:4b:56:4f:25:5b:d2:f8:fe:d1:52:21:6e:de:
         df:3c:19:bc:91:df:aa:77:1c:88:93:65:7a:d8:76:17:13:d0:
         c0:76:ea:b9:af:cc:05:b0:77:6c:9a:da:b0:37:d4:e6:4c:b3:
         64:01:e1:91
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUeYjwZKajNPxrGAHUiDjvdAqcYWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAyMzQ3NDhaFw0yNTA5MjkyMzUyNDhaMDMxMTAvBgNV
BAMTKDJBNTk1MzEyQzdDREZGNUE3NkRCQUU3MzRENTBFMTI1MjcyNDFBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oN13rI8pqHTqNoaSh6TZjtrt
FSHkMy70q5xDBBn9+VyH9p8pa1svm3sPpBkKdc7CVvaI2g5aZqIat6HNxsJTYcgh
9FnTT3piPCGAOZqcblt4qlXOzaTv3wob0sr1TWv1PCUqWpvho6rURS3iHXGXZuOu
xav/AAMYNrldnxxJgSoYdP4FHyNble6ZZCAJLZlfJ6RkyBAb6oO6YR3ulqAyPK4l
2Wuf/7XYYJoBx0ntaLH1joUI9gVH4VF5G+vudVYNyITIFInfw5047oEgVWj1PFYT
1CobBfh1mhNJv1bldOqarw5jj/JNKzZjupK+29TGZJrALYOCDBBKVxLCDk89AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqWVMSx83/Wnbb
rnNNUOElJyQaJDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2p5
WUFVNTJRb1lHVDJQbzNuVGFTZVRVV2hLeHZrRjhEZXRNWjlneGlWNEovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dq
eVlBVTUyUW9ZR1QyUG8zblRhU2VUVVdoS3h2a0Y4RGV0TVo5Z3hpVjRKLzAvMkE1
OTUzMTJDN0NERkY1QTc2REJBRTczNEQ1MEUxMjUyNzI0MUEyNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvlkEMA0EAgACMAcDBQAoBGtsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgPzANBgkqhkiG9w0BAQsFAAOCAQEAVkpfzeLPrM5S1g80
o0hxBI5U2tiEhIq3flWHvEfnxZG5mVx1QVq0dndUU6erpet6w6cDoNmtF76ZNc29
guTvYB/+C3liEnVPIlBbEQndKQZBCnxSoEwv7KggUiiCkQOFZDRlYVfsPsFdyzV5
XnE6VMvJZYQ944hFf6AAhPP2nQW0p6BP0aBF0MqshEn0TpfYi5c2fZ9mBHS0oCt/
P4XyDlFDn7rmWT4IbrROJYKrURdHhVbRIPZa/aZUq9U+2DuyqDuTvDy9cWLf3MJL
Vk8lW9L4/tFSIW7e3zwZvJHfqncciJNleth2FxPQwHbqua/MBbB3bJrasDfU5kyz
ZAHhkQ==
-----END CERTIFICATE-----
Generated at Sun Nov 17 17:45:25 2024 by rpki-client on console-fra.rpki-client.org