Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6181D5723D970F972FFAD44FEC3B990C0E69A0BE.cer
File:                     6181D5723D970F972FFAD44FEC3B990C0E69A0BE.cer (raw, json)
Hash identifier:          wonlam+x1+yEccKQyFmSqUzAtK1Tk6dM/ZBGUvq70iY=
Subject key identifier:   61:81:D5:72:3D:97:0F:97:2F:FA:D4:4F:EC:3B:99:0C:0E:69:A0:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77F739F414A757FF81EABA5535FC48C45D64ADE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/6181D5723D970F972FFAD44FEC3B990C0E69A0BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:28:07 +0000
Certificate not after:    Thu 03 Apr 2025 05:33:07 +0000
Subordinate resources:    AS: 271072
                          IP: 179.48.100.0/22
                          IP: 2804:75d4::/32

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 22:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f7:39:f4:14:a7:57:ff:81:ea:ba:55:35:fc:48:c4:5d:64:ad:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:28:07 2024 GMT
            Not After : Apr  3 05:33:07 2025 GMT
        Subject: CN=6181D5723D970F972FFAD44FEC3B990C0E69A0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:d9:9f:e7:65:9b:0b:56:9b:3c:77:b6:52:
                    a6:2a:a0:0b:71:e9:a7:61:f4:af:27:13:08:17:7c:
                    b6:a5:b7:51:34:d6:1f:cc:e6:75:11:26:e4:d6:db:
                    2b:7d:cb:45:dc:f1:1b:90:b9:ab:c0:39:ba:22:09:
                    6d:6b:52:12:ac:3b:35:1e:37:4c:6d:f8:9c:09:85:
                    bc:4c:f3:bf:30:11:e8:df:8c:4d:74:3d:c4:77:94:
                    e8:4a:dc:d9:a4:9d:c2:84:5a:f9:96:02:8d:5d:32:
                    9e:a5:8f:56:8c:94:c2:b4:0c:5e:c1:e3:ab:9b:18:
                    a2:0f:e6:e0:5d:f0:d8:6b:73:94:b0:0f:ce:da:10:
                    2d:1e:d3:22:e6:1a:94:a9:a8:49:80:17:16:03:2e:
                    fc:9f:3a:8e:d1:9f:e3:6e:9d:00:17:c7:6b:e8:5e:
                    36:3e:a8:97:89:19:1b:6a:66:b1:fe:e1:e2:4f:fa:
                    8a:54:00:0b:98:47:c1:99:b5:c1:d9:6c:d4:c3:86:
                    67:27:49:8d:51:0e:e2:83:30:75:47:44:15:d6:3b:
                    c9:90:95:90:5c:bd:14:9a:7a:db:e1:38:ae:bf:01:
                    7a:0e:2b:bd:6e:99:23:5e:74:57:e9:31:ab:59:da:
                    41:91:52:24:37:68:00:85:af:67:f3:4a:f1:13:ae:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:81:D5:72:3D:97:0F:97:2F:FA:D4:4F:EC:3B:99:0C:0E:69:A0:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/6181D5723D970F972FFAD44FEC3B990C0E69A0BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22
                IPv6:
                  2804:75d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271072

    Signature Algorithm: sha256WithRSAEncryption
         d6:43:5d:bd:3e:bd:d9:84:8a:2e:2a:c9:65:5f:6f:c8:56:03:
         26:0f:a0:1f:92:7c:0f:8d:5e:68:1d:d3:5a:45:00:02:e0:e2:
         a0:e0:ce:df:84:26:ba:e1:15:ca:a9:df:40:ff:8c:36:14:44:
         d8:c0:84:5e:94:86:ff:fd:ce:89:7e:61:62:f2:a8:bf:26:ed:
         b8:76:f0:8e:f0:22:f1:2b:7c:a2:53:60:8d:2f:0d:61:31:10:
         9c:64:6e:2b:0c:a2:11:7c:69:16:17:85:a7:f0:0d:f6:9b:7f:
         80:4b:a8:e6:88:fc:e1:a1:7c:ac:ef:55:1e:a2:44:12:f7:82:
         1b:06:1c:b8:9f:b8:4e:ec:0b:9f:95:03:60:fb:43:03:dd:3a:
         5e:c2:40:62:42:e0:bc:54:78:9d:89:8c:38:e3:2a:7a:57:27:
         cf:e2:93:c8:73:02:e0:52:a0:21:a3:43:12:bc:01:17:d2:df:
         8b:cc:c5:67:2a:c8:02:bf:ba:99:ea:c9:7a:2d:72:b7:9a:e4:
         0a:49:c3:67:2c:b0:96:0d:98:65:7e:84:30:ae:a7:79:9c:b0:
         a8:f8:73:4b:a9:f4:6d:78:69:14:b6:58:1a:0a:d0:cf:74:6a:
         a4:3a:7b:6d:be:0a:54:57:bf:ad:8d:83:6b:e3:54:a0:f7:7d:
         18:2e:5c:74
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUd/c59BSnV/+B6rpVNfxIxF1kreYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNTI4MDdaFw0yNTA0MDMwNTMzMDdaMDMxMTAvBgNV
BAMTKDYxODFENTcyM0Q5NzBGOTcyRkZBRDQ0RkVDM0I5OTBDMEU2OUEwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68Nmf52WbC1abPHe2UqYqoAtx
6adh9K8nEwgXfLalt1E01h/M5nURJuTW2yt9y0Xc8RuQuavAOboiCW1rUhKsOzUe
N0xt+JwJhbxM878wEejfjE10PcR3lOhK3NmkncKEWvmWAo1dMp6lj1aMlMK0DF7B
46ubGKIP5uBd8Nhrc5SwD87aEC0e0yLmGpSpqEmAFxYDLvyfOo7Rn+NunQAXx2vo
XjY+qJeJGRtqZrH+4eJP+opUAAuYR8GZtcHZbNTDhmcnSY1RDuKDMHVHRBXWO8mQ
lZBcvRSaetvhOK6/AXoOK71umSNedFfpMatZ2kGRUiQ3aACFr2fzSvETroDvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhgdVyPZcPly/6
1E/sO5kMDmmgvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmZE
RlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNKTHIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJm
REZRWVFUVHpLdGhpajY2eVdxSDNLcnZwUFliemV4VDFpeHRjeHgzSkxyLzEvNjE4
MUQ1NzIzRDk3MEY5NzJGRkFENDRGRUMzQjk5MEMwRTY5QTBCRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCszBkMA0EAgACMAcDBQAoBHXUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQi4DANBgkqhkiG9w0BAQsFAAOCAQEA1kNdvT692YSKLirJ
ZV9vyFYDJg+gH5J8D41eaB3TWkUAAuDioODO34QmuuEVyqnfQP+MNhRE2MCEXpSG
//3OiX5hYvKovybtuHbwjvAi8St8olNgjS8NYTEQnGRuKwyiEXxpFheFp/AN9pt/
gEuo5oj84aF8rO9VHqJEEveCGwYcuJ+4TuwLn5UDYPtDA906XsJAYkLgvFR4nYmM
OOMqelcnz+KTyHMC4FKgIaNDErwBF9Lfi8zFZyrIAr+6merJei1yt5rkCknDZyyw
lg2YZX6EMK6neZywqPhzS6n0bXhpFLZYGgrQz3RqpDp7bb4KVFe/rY2Da+NUoPd9
GC5cdA==
-----END CERTIFICATE-----
Generated at Sun Sep 8 23:28:43 2024 by rpki-client on console-ams.rpki-client.org