Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
File:                     6394333A258FBDBBD544DE363E2767998C64BB78.cer (raw, json)
Hash identifier:          kLVWugvB1MWmIR4FET0j8w2xChVfpXXMEDhbA3Dc6pQ=
Subject key identifier:   63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60D0EA11DBB45A22530ADFFD50612E87CD539C7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 11:21:15 +0000
Certificate not after:    Wed 28 May 2025 11:26:15 +0000
Subordinate resources:    AS: 268316
                          IP: 45.238.80.0/22
                          IP: 2804:4f44::/32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 15:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d0:ea:11:db:b4:5a:22:53:0a:df:fd:50:61:2e:87:cd:53:9c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 11:21:15 2024 GMT
            Not After : May 28 11:26:15 2025 GMT
        Subject: CN=6394333A258FBDBBD544DE363E2767998C64BB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:13:30:4d:a1:3f:0b:a2:23:c6:79:77:7b:
                    a6:86:d9:d4:4c:9e:73:fa:f6:53:ab:ca:fc:fa:2f:
                    f5:64:c1:3a:85:45:a3:10:69:df:76:51:27:92:9b:
                    6a:63:a2:0a:2c:c3:ae:98:a8:5e:cf:88:0a:65:43:
                    a0:ba:8e:8a:de:97:e3:aa:dd:ce:9e:f0:71:cf:65:
                    4e:d2:71:b2:ac:f8:c4:0c:bd:55:cb:be:01:7c:86:
                    b9:67:5f:b6:9c:be:58:f5:bb:26:7d:f3:64:eb:08:
                    74:cf:54:1b:c7:df:4c:80:a0:30:fe:65:47:10:e1:
                    a0:96:22:08:28:ec:9d:70:6f:81:dd:e7:f6:a4:d0:
                    cd:37:e4:3b:b2:cd:91:7b:ef:84:1a:80:a8:87:04:
                    d3:7c:03:fd:e9:00:64:8c:ba:36:33:00:61:19:5d:
                    ad:30:af:f2:f6:f7:55:4a:86:ab:45:28:13:d4:a6:
                    d4:81:7f:3f:2a:86:a1:32:e2:12:fb:c7:13:f8:89:
                    1f:25:3b:b9:14:a6:54:e9:71:76:2a:28:d0:ea:37:
                    85:2b:d9:8c:8c:e0:8c:9b:0c:7c:8e:a1:b2:2f:cc:
                    c2:12:74:8d:68:9f:ad:fd:d7:15:df:51:5f:74:2b:
                    59:a2:39:6f:5b:a0:80:7d:d5:77:d6:5a:18:f4:d5:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.80.0/22
                IPv6:
                  2804:4f44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268316

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:f2:82:24:e0:da:5a:e3:30:ea:41:99:d6:16:50:57:10:
         d5:60:7b:b8:24:4b:13:08:d1:a1:2f:86:fb:8d:ae:d6:cd:6d:
         f1:59:0c:8e:14:44:90:03:e0:74:3b:e7:d9:5a:fa:de:bb:a3:
         60:1c:f3:3a:f9:a0:74:5c:7d:1a:67:a7:cb:04:7b:2b:20:d7:
         bd:06:39:ea:ef:95:8e:7f:8b:c9:a0:06:f4:31:87:c1:b5:12:
         a4:ad:17:96:52:97:18:4a:13:fc:9c:ed:44:dc:d7:c7:b9:8e:
         15:f4:e1:25:85:fc:fb:c9:0b:e1:9f:93:cd:a3:a2:72:b1:f4:
         71:6b:ab:1a:8b:30:0d:05:9d:82:65:9e:c2:3a:c5:56:6d:b2:
         93:95:2e:6a:8d:d8:37:2d:7e:be:e4:1f:1e:36:ce:41:f7:bc:
         2e:26:7e:a9:f8:c6:98:f3:a5:f6:5d:e2:a5:23:29:25:05:57:
         bc:21:ce:e4:5c:90:cc:65:c9:91:74:b0:bd:9e:3d:01:db:e5:
         15:e2:5f:41:ff:d5:59:2a:fe:0f:ef:a5:ce:e4:e2:4c:32:e5:
         6c:86:bb:43:4c:db:92:d3:bf:d1:91:1e:08:05:4e:37:ea:74:
         e1:64:03:e7:2f:fc:9f:f2:82:24:33:bc:e4:fd:66:ac:5c:0a:
         bb:dc:7a:87
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYNDqEdu0WiJTCt/9UGEuh81TnH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjkxMTIxMTVaFw0yNTA1MjgxMTI2MTVaMDMxMTAvBgNV
BAMTKDYzOTQzMzNBMjU4RkJEQkJENTQ0REUzNjNFMjc2Nzk5OEM2NEJCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkRMwTaE/C6Ijxnl3e6aG2dRM
nnP69lOryvz6L/VkwTqFRaMQad92USeSm2pjogosw66YqF7PiAplQ6C6jorel+Oq
3c6e8HHPZU7ScbKs+MQMvVXLvgF8hrlnX7acvlj1uyZ982TrCHTPVBvH30yAoDD+
ZUcQ4aCWIggo7J1wb4Hd5/ak0M035DuyzZF774QagKiHBNN8A/3pAGSMujYzAGEZ
Xa0wr/L291VKhqtFKBPUptSBfz8qhqEy4hL7xxP4iR8lO7kUplTpcXYqKNDqN4Ur
2YyM4IybDHyOobIvzMISdI1on6391xXfUV90K1miOW9boIB91XfWWhj01WDBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjlDM6JY+9u9VE
3jY+J2eZjGS7eDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3M1
ZjNacHVyNEZ3WWRxN3lyWDJ2MUpaVU1EWkVaZlVBOWNvOVFWcmtMdnAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNz
NWYzWnB1cjRGd1lkcTd5clgydjFKWlVNRFpFWmZVQTljbzlRVnJrTHZwLzAvNjM5
NDMzM0EyNThGQkRCQkQ1NDRERTM2M0UyNzY3OTk4QzY0QkI3OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLe5QMA0EAgACMAcDBQAoBE9EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQYHDANBgkqhkiG9w0BAQsFAAOCAQEADhXygiTg2lrjMOpB
mdYWUFcQ1WB7uCRLEwjRoS+G+42u1s1t8VkMjhREkAPgdDvn2Vr63rujYBzzOvmg
dFx9GmenywR7KyDXvQY56u+Vjn+LyaAG9DGHwbUSpK0XllKXGEoT/JztRNzXx7mO
FfThJYX8+8kL4Z+TzaOicrH0cWurGoswDQWdgmWewjrFVm2yk5Uuao3YNy1+vuQf
HjbOQfe8LiZ+qfjGmPOl9l3ipSMpJQVXvCHO5FyQzGXJkXSwvZ49AdvlFeJfQf/V
WSr+D++lzuTiTDLlbIa7Q0zbktO/0ZEeCAVON+p04WQD5y/8n/KCJDO85P1mrFwK
u9x6hw==
-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org