Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
File:                     2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer (raw, json)
Hash identifier:          +DS3SBq5bQFy0slrG7XE1jhl+C8gwtMbYX1W9B7QYDc=
Subject key identifier:   2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EE14C0244BF9048748423003AF7F7D9424ED7FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Aug 2024 16:20:52 +0000
Certificate not after:    Fri 15 Aug 2025 16:25:52 +0000
Subordinate resources:    AS: 262312
                          IP: 177.124.16.0/22
                          IP: 2804:3700::/32

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e1:4c:02:44:bf:90:48:74:84:23:00:3a:f7:f7:d9:42:4e:d7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 16 16:20:52 2024 GMT
            Not After : Aug 15 16:25:52 2025 GMT
        Subject: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:08:ea:a8:9e:98:d3:b9:eb:f4:31:1a:ce:
                    b5:61:49:1a:63:8a:e5:a4:01:61:78:92:20:e8:56:
                    26:fc:4b:dd:59:8f:e7:3b:61:48:f7:aa:d9:f0:5f:
                    8b:0d:1b:c6:a8:58:95:56:0c:e7:22:77:6c:9e:ef:
                    57:5c:11:ea:e6:34:18:c1:8b:28:df:c6:45:22:7e:
                    ad:18:d0:15:cf:f9:8b:2e:43:51:0f:13:c4:90:9e:
                    4e:df:dd:4e:00:27:8e:f9:7d:23:72:b3:ce:dc:5b:
                    e0:aa:e9:1d:4a:a9:c8:58:2c:14:86:2a:ae:35:9f:
                    db:84:49:e7:97:23:27:4c:1a:e8:3d:d7:87:c3:80:
                    22:d7:df:c4:56:70:af:09:7a:67:25:8b:72:42:32:
                    76:3d:99:46:2b:20:a7:3d:87:00:c8:e3:5f:a5:3c:
                    cc:70:45:76:6f:e1:58:3f:81:c9:a2:7e:15:16:0f:
                    55:09:5f:b3:e2:9f:08:7e:43:3b:ee:09:98:26:57:
                    2e:b6:2f:ab:37:e9:c0:d7:b1:92:5d:1d:b5:3f:04:
                    ee:ae:fc:b7:26:95:f4:6a:08:ec:d6:5a:89:70:a5:
                    fa:da:e0:4b:4d:f0:05:96:7e:cf:f4:d6:98:15:f3:
                    73:0e:14:10:19:2c:d3:5c:4b:3a:1b:07:06:ce:79:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.16.0/22
                IPv6:
                  2804:3700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262312

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:41:85:6a:ed:bd:c9:91:11:84:98:5c:a6:6a:cf:34:4f:
         22:27:76:ef:0f:03:99:96:c8:c0:0b:d2:d2:43:77:92:81:24:
         b2:fc:86:cf:b0:42:e5:22:aa:04:1a:09:ca:c8:62:4e:dc:7e:
         f2:5a:bf:af:4d:de:e9:92:31:26:52:36:f1:b7:3b:6b:f2:b8:
         e0:2e:f4:e9:de:f4:34:39:ad:f0:54:75:35:00:ec:56:e0:b7:
         a0:4f:6e:50:01:16:96:0a:9c:5f:2f:82:19:6c:05:d1:56:62:
         4f:51:fc:6b:72:c1:4a:34:bb:df:06:ca:d9:71:16:cb:06:f2:
         2e:44:69:1b:31:11:8d:2b:5d:70:04:09:d2:9f:dd:6d:37:bd:
         b6:b6:b8:23:a0:26:ce:2a:18:df:5a:cb:d3:1e:74:02:44:cb:
         c1:32:e4:14:d2:82:c4:76:a2:16:ee:1e:6a:ca:22:c0:2e:f7:
         1e:af:30:1e:ff:aa:06:ed:28:4f:a0:44:1f:a9:09:43:e6:0f:
         13:7d:be:10:ab:73:85:80:21:22:20:84:f5:a8:bf:8d:13:58:
         15:a9:a1:c9:71:9f:9f:77:4a:3a:69:cc:12:6c:d6:e4:68:f4:
         79:2a:5d:b4:a6:93:51:4f:d3:4e:85:62:03:20:46:6d:29:dd:
         e9:e3:0f:80
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUTuFMAkS/kEh0hCMAOvf32UJO1/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTYxNjIwNTJaFw0yNTA4MTUxNjI1NTJaMDMxMTAvBgNV
BAMTKDJEOTYwQzU2M0FFMkFFNzgxNUE1QUZGNTQ4MjZBNzAzQzE2NjlGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmawjqqJ6Y07nr9DEazrVhSRpj
iuWkAWF4kiDoVib8S91Zj+c7YUj3qtnwX4sNG8aoWJVWDOcid2ye71dcEermNBjB
iyjfxkUifq0Y0BXP+YsuQ1EPE8SQnk7f3U4AJ475fSNys87cW+Cq6R1KqchYLBSG
Kq41n9uESeeXIydMGug914fDgCLX38RWcK8Jemcli3JCMnY9mUYrIKc9hwDI41+l
PMxwRXZv4Vg/gcmifhUWD1UJX7Pinwh+QzvuCZgmVy62L6s36cDXsZJdHbU/BO6u
/LcmlfRqCOzWWolwpfra4EtN8AWWfs/01pgV83MOFBAZLNNcSzobBwbOed7hAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtlgxWOuKueBWl
r/VIJqcDwWaf0jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3pU
M1JkcmpEV3l1dHI0MVlLcmdHUUtHUmdFRVRrV1Y1aFhoTkhnMVlWQ1MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d6
VDNSZHJqRFd5dXRyNDFZS3JnR1FLR1JnRUVUa1dWNWhYaE5IZzFZVkNTLzAvMkQ5
NjBDNTYzQUUyQUU3ODE1QTVBRkY1NDgyNkE3MDNDMTY2OUZEMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsXwQMA0EAgACMAcDBQAoBDcAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQAqDANBgkqhkiG9w0BAQsFAAOCAQEAqkFBhWrtvcmREYSY
XKZqzzRPIid27w8DmZbIwAvS0kN3koEksvyGz7BC5SKqBBoJyshiTtx+8lq/r03e
6ZIxJlI28bc7a/K44C706d70NDmt8FR1NQDsVuC3oE9uUAEWlgqcXy+CGWwF0VZi
T1H8a3LBSjS73wbK2XEWywbyLkRpGzERjStdcAQJ0p/dbTe9tra4I6AmzioY31rL
0x50AkTLwTLkFNKCxHaiFu4easoiwC73Hq8wHv+qBu0oT6BEH6kJQ+YPE32+EKtz
hYAhIiCE9ai/jRNYFamhyXGfn3dKOmnMEmzW5Gj0eSpdtKaTUU/TToViAyBGbSnd
6eMPgA==
-----END CERTIFICATE-----
Generated at Wed Sep 11 03:34:49 2024 by rpki-client on console-ams.rpki-client.org