Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
File:                     64EDF843BB58DCBE2014E8820AB744C627698B80.cer (raw, json)
Hash identifier:          wRANwtpXZY2Cd3kW1s6OeYt1DHCQUzSDqj+JgDKEqgw=
Subject key identifier:   64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A6B52C58A5866D0CA0D5DF6C588CFF72CABBE04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 May 2024 13:19:51 +0000
Certificate not after:    Thu 22 May 2025 13:24:51 +0000
Subordinate resources:    AS: 268573
                          IP: 45.163.72.0/22
                          IP: 177.70.246.0/23
                          IP: 2804:5344::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 16:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6b:52:c5:8a:58:66:d0:ca:0d:5d:f6:c5:88:cf:f7:2c:ab:be:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 23 13:19:51 2024 GMT
            Not After : May 22 13:24:51 2025 GMT
        Subject: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:b0:51:67:f4:87:cb:18:b2:49:84:64:f4:
                    df:3a:90:49:42:d0:20:e1:eb:e0:d5:d6:5a:be:c6:
                    c2:b5:cd:9e:49:44:67:03:81:2c:a7:c6:70:46:06:
                    14:9b:b3:9b:02:e9:1f:74:47:64:ce:ad:cb:08:c3:
                    f0:2c:0d:ed:78:e8:2f:3c:4e:19:32:bc:68:42:85:
                    86:b8:93:62:92:40:11:53:60:95:72:14:30:ab:72:
                    6a:c4:e9:aa:d8:24:e1:c3:9b:07:1b:9e:db:06:52:
                    e3:64:01:e7:74:50:30:94:be:4a:cd:98:37:c5:d6:
                    45:18:86:ec:40:84:87:35:9e:48:d1:93:ea:e7:e2:
                    d2:45:c5:5d:61:e3:07:6d:a2:fc:bd:f1:64:1e:24:
                    36:bf:a1:37:cf:a4:c2:04:2a:ca:5e:7c:98:f1:97:
                    e9:f9:52:51:1b:8b:c6:b2:e3:14:18:4c:87:2f:0c:
                    09:e4:51:49:b7:91:1e:58:c8:df:63:a6:fc:ed:5f:
                    23:b0:7c:ce:9f:67:1f:df:bc:7b:95:74:1b:04:3e:
                    c9:ba:9c:d8:6a:9a:e4:89:57:1f:50:8b:32:d4:0b:
                    d8:52:e9:f0:3a:79:6e:84:9c:98:ad:99:73:62:67:
                    89:c2:9a:b3:3c:45:d6:ac:3d:ff:cd:c4:18:27:f1:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.72.0/22
                  177.70.246.0/23
                IPv6:
                  2804:5344::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268573

    Signature Algorithm: sha256WithRSAEncryption
         34:16:eb:5c:48:98:aa:6d:2a:ab:fb:a6:ea:a8:52:f9:3a:17:
         24:67:71:c3:83:2e:f2:1d:87:a2:e4:2c:10:ab:2b:df:c5:81:
         7b:55:5d:d6:e1:be:90:ff:ae:c9:b7:8b:41:6d:2c:0e:b9:e7:
         69:13:97:aa:b0:81:bf:ec:92:28:d7:26:a6:20:1f:fb:94:55:
         63:8c:1c:79:0a:28:7c:16:f3:0a:af:da:25:d6:02:39:bf:31:
         7a:7b:87:df:fc:bb:c2:6d:67:29:c1:2f:56:ee:ab:30:f0:fe:
         b3:ba:fa:aa:1a:be:cf:01:d9:39:4f:2d:43:c4:eb:b1:ef:4d:
         bc:7f:a2:0b:a3:24:ff:ca:37:e6:fd:40:02:1f:9c:1d:89:4a:
         47:17:1d:df:a7:47:9c:ee:ff:7b:e9:e6:f1:04:f4:67:14:04:
         6d:82:31:44:e4:12:45:72:06:9a:3a:b5:a4:74:fd:eb:98:cb:
         8f:9f:5d:9d:96:ed:7e:77:b4:d3:14:45:90:b5:6e:72:c4:c7:
         d9:e5:58:17:e5:40:0d:30:4a:4e:7b:5a:3f:f6:2a:68:4f:12:
         80:2f:e2:12:10:15:5a:43:e3:d3:cb:26:14:7a:66:9f:ad:3b:
         71:73:ec:54:aa:bb:21:7d:07:c7:3a:ad:99:80:57:ed:6c:d1:
         dc:99:15:68
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUWmtSxYpYZtDKDV32xYjP9yyrvgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjMxMzE5NTFaFw0yNTA1MjIxMzI0NTFaMDMxMTAvBgNV
BAMTKDY0RURGODQzQkI1OERDQkUyMDE0RTg4MjBBQjc0NEM2Mjc2OThCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/LBRZ/SHyxiySYRk9N86kElC
0CDh6+DV1lq+xsK1zZ5JRGcDgSynxnBGBhSbs5sC6R90R2TOrcsIw/AsDe146C88
ThkyvGhChYa4k2KSQBFTYJVyFDCrcmrE6arYJOHDmwcbntsGUuNkAed0UDCUvkrN
mDfF1kUYhuxAhIc1nkjRk+rn4tJFxV1h4wdtovy98WQeJDa/oTfPpMIEKspefJjx
l+n5UlEbi8ay4xQYTIcvDAnkUUm3kR5YyN9jpvztXyOwfM6fZx/fvHuVdBsEPsm6
nNhqmuSJVx9QizLUC9hS6fA6eW6EnJitmXNiZ4nCmrM8RdasPf/NxBgn8cTtAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRk7fhDu1jcviAU
6IIKt0TGJ2mLgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjVQ
ajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2RWMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI1
UGoyTnVxU3BjdUN0Z1ducFU4SFF0ZGtWWGhvOWtraGE5cVdvTUNXNkVjLzEvNjRF
REY4NDNCQjU4RENCRTIwMTRFODgyMEFCNzQ0QzYyNzY5OEI4MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLaNIAwQBsUb2MA0EAgACMAcDBQAoBFNEMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQZHTANBgkqhkiG9w0BAQsFAAOCAQEANBbrXEiY
qm0qq/um6qhS+ToXJGdxw4Mu8h2HouQsEKsr38WBe1Vd1uG+kP+uybeLQW0sDrnn
aROXqrCBv+ySKNcmpiAf+5RVY4wceQoofBbzCq/aJdYCOb8xenuH3/y7wm1nKcEv
Vu6rMPD+s7r6qhq+zwHZOU8tQ8Trse9NvH+iC6Mk/8o35v1AAh+cHYlKRxcd36dH
nO7/e+nm8QT0ZxQEbYIxROQSRXIGmjq1pHT965jLj59dnZbtfne00xRFkLVucsTH
2eVYF+VADTBKTntaP/YqaE8SgC/iEhAVWkPj08smFHpmn607cXPsVKq7IX0Hxzqt
mYBX7WzR3JkVaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org