Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2EB65E683C5BFCAA7A3C3F74379C3418D03172E2.cer
File:                     2EB65E683C5BFCAA7A3C3F74379C3418D03172E2.cer (raw, json)
Hash identifier:          d3u8pQQkd/S7UBGM1KeNthFEVURq4yYvlI4d2oajBYg=
Subject key identifier:   2E:B6:5E:68:3C:5B:FC:AA:7A:3C:3F:74:37:9C:34:18:D0:31:72:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11A7EBA5CD29BDAE32537A7437A8B5FB6BCF0832
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/1/2EB65E683C5BFCAA7A3C3F74379C3418D03172E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:52:35 +0000
Certificate not after:    Wed 02 Apr 2025 22:57:35 +0000
Subordinate resources:    AS: 269710
                          IP: 190.112.148.0/22
                          IP: 2804:68b4::/32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 19:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:eb:a5:cd:29:bd:ae:32:53:7a:74:37:a8:b5:fb:6b:cf:08:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:52:35 2024 GMT
            Not After : Apr  2 22:57:35 2025 GMT
        Subject: CN=2EB65E683C5BFCAA7A3C3F74379C3418D03172E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:91:d7:d6:a4:2f:cf:be:1f:b7:5f:a2:5d:cb:
                    14:e2:ab:e9:a3:84:52:33:18:d3:95:91:a8:fc:53:
                    00:5e:33:d4:e2:e6:74:53:0f:e7:82:79:14:74:30:
                    af:e3:71:ba:bb:23:d7:3a:d2:cb:e4:fe:47:21:e5:
                    bb:f5:ef:fe:d1:49:5b:1b:57:8a:f1:6d:15:2c:7b:
                    3f:a1:04:5b:2d:0d:b7:9a:41:d8:ca:1f:1b:54:cb:
                    c9:8a:50:90:4e:5d:ae:3d:7a:8f:4e:ca:a7:db:ec:
                    0e:b8:d7:a5:6c:fc:0e:f5:b5:97:4d:06:cd:58:92:
                    b3:f5:17:d9:45:12:f5:3e:54:06:31:5c:12:1b:83:
                    b8:7f:2e:c8:c8:29:f2:ab:1b:1f:c4:ef:52:90:23:
                    01:c5:f0:d1:26:79:ab:cc:98:9c:52:a2:16:72:a4:
                    f4:84:25:20:26:bf:18:8f:7a:0c:29:70:ca:52:14:
                    e6:ec:69:2c:b5:53:7d:a5:0c:62:1a:85:e4:ec:b1:
                    36:fc:0e:26:fe:07:12:7c:d7:2f:e9:ba:e2:22:87:
                    b5:66:21:1f:53:57:7e:e6:65:da:1d:8e:6d:bb:b5:
                    7e:b5:db:5a:94:10:2c:97:5a:76:2b:79:8f:43:35:
                    e5:e0:bf:b1:27:17:70:07:3c:6a:d7:54:c0:08:b1:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:B6:5E:68:3C:5B:FC:AA:7A:3C:3F:74:37:9C:34:18:D0:31:72:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/1/2EB65E683C5BFCAA7A3C3F74379C3418D03172E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.148.0/22
                IPv6:
                  2804:68b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269710

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:d4:6b:37:60:eb:e1:18:e3:be:65:ba:dd:ae:a3:32:c1:
         ef:a2:1c:6e:ef:43:a6:cd:13:81:ff:f8:8e:e8:63:9b:ef:67:
         c7:d6:a8:41:0a:91:5f:23:70:79:b5:2d:5f:30:df:2c:d5:dc:
         24:48:44:1f:80:4d:51:f3:ec:c3:50:95:5e:32:84:9d:29:e5:
         29:54:7b:5b:fd:0e:02:3c:9e:6d:d0:d2:d5:f6:73:b2:a3:a3:
         1e:41:b5:43:e7:e5:57:6d:6d:24:07:ba:c0:52:64:39:0c:46:
         c0:4f:69:8c:d9:e3:03:a2:f3:90:46:50:5a:60:e2:39:75:34:
         95:1d:bf:47:83:95:a8:ff:1d:b8:aa:40:db:33:ce:4f:ab:1f:
         3c:1f:bc:0e:7f:f6:1e:5f:99:1e:e7:97:60:56:82:67:68:c9:
         fe:5a:9c:40:e8:e6:30:68:0f:73:fb:12:0d:2e:b4:7f:61:39:
         f6:8e:47:ad:57:c4:71:7e:be:33:f6:39:1a:8f:6b:54:d6:3e:
         55:99:39:65:b2:f2:e3:52:93:c3:97:21:17:e4:e0:b9:a0:85:
         37:10:a7:9e:45:d9:1c:5a:c5:cd:82:87:bc:78:13:19:66:e3:
         0b:a6:be:9c:f8:7f:18:cb:39:34:44:eb:5a:23:25:8e:b1:b7:
         aa:00:d6:2c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEafrpc0pva4yU3p0N6i1+2vPCDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMjUyMzVaFw0yNTA0MDIyMjU3MzVaMDMxMTAvBgNV
BAMTKDJFQjY1RTY4M0M1QkZDQUE3QTNDM0Y3NDM3OUMzNDE4RDAzMTcyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2kdfWpC/Pvh+3X6JdyxTiq+mj
hFIzGNOVkaj8UwBeM9Ti5nRTD+eCeRR0MK/jcbq7I9c60svk/kch5bv17/7RSVsb
V4rxbRUsez+hBFstDbeaQdjKHxtUy8mKUJBOXa49eo9Oyqfb7A6416Vs/A71tZdN
Bs1YkrP1F9lFEvU+VAYxXBIbg7h/LsjIKfKrGx/E71KQIwHF8NEmeavMmJxSohZy
pPSEJSAmvxiPegwpcMpSFObsaSy1U32lDGIaheTssTb8Dib+BxJ81y/puuIih7Vm
IR9TV37mZdodjm27tX6121qUECyXWnYreY9DNeXgv7EnF3AHPGrXVMAIsY+XAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQutl5oPFv8qno8
P3Q3nDQY0DFy4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1M2
Skxvbk51cDk2aUNtVWc3OFhCQjllZzd4d0wzTXZldFNETFJkNXh2V1QvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNT
NkpMb25OdXA5NmlDbVVnNzhYQkI5ZWc3eHdMM012ZXRTRExSZDV4dldULzEvMkVC
NjVFNjgzQzVCRkNBQTdBM0MzRjc0Mzc5QzM0MThEMDMxNzJFMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvnCUMA0EAgACMAcDBQAoBGi0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdjjANBgkqhkiG9w0BAQsFAAOCAQEAX47Uazdg6+EY475l
ut2uozLB76Icbu9Dps0Tgf/4juhjm+9nx9aoQQqRXyNwebUtXzDfLNXcJEhEH4BN
UfPsw1CVXjKEnSnlKVR7W/0OAjyebdDS1fZzsqOjHkG1Q+flV21tJAe6wFJkOQxG
wE9pjNnjA6LzkEZQWmDiOXU0lR2/R4OVqP8duKpA2zPOT6sfPB+8Dn/2Hl+ZHueX
YFaCZ2jJ/lqcQOjmMGgPc/sSDS60f2E59o5HrVfEcX6+M/Y5Go9rVNY+VZk5ZbLy
41KTw5chF+TguaCFNxCnnkXZHFrFzYKHvHgTGWbjC6a+nPh/GMs5NETrWiMljrG3
qgDWLA==
-----END CERTIFICATE-----
Generated at Fri Aug 23 23:54:31 2024 by rpki-client on console-ams.rpki-client.org