Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
File:                     666E558ABAE9C9586902077E3E697F13A69C98BE.cer (raw, json)
Hash identifier:          /9GxAvKpO4LdvVK8BwFzKYMa8ZA0JIjLZZWkeNiL0KU=
Subject key identifier:   66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A763347A6E932492AB43CE8E7EE5D7475DA4038
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Apr 2024 19:49:41 +0000
Certificate not after:    Tue 29 Apr 2025 19:54:41 +0000
Subordinate resources:    AS: 267940
                          IP: 45.165.216.0/22
                          IP: 2804:5588::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 01:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:76:33:47:a6:e9:32:49:2a:b4:3c:e8:e7:ee:5d:74:75:da:40:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 19:49:41 2024 GMT
            Not After : Apr 29 19:54:41 2025 GMT
        Subject: CN=666E558ABAE9C9586902077E3E697F13A69C98BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:5e:ce:dc:a6:d0:cc:a6:e4:a0:f9:cc:c4:
                    de:c6:5b:f6:45:a7:79:fa:e9:80:86:1c:75:f5:c6:
                    fe:0a:cb:ea:bf:cd:29:8c:4f:30:ef:65:fc:ee:22:
                    7b:d5:78:29:ef:68:ec:51:95:ce:ab:2b:71:c4:7f:
                    0f:66:fa:5b:aa:8b:4b:bd:b5:f6:25:ad:b0:1a:2b:
                    ac:26:d1:d2:b8:25:13:45:f8:0f:b9:c0:1d:3c:8d:
                    bf:cb:89:af:dc:7f:f7:6f:80:d1:3d:2c:a0:f9:35:
                    da:91:69:25:04:0e:55:5c:82:c8:91:12:ca:a2:9d:
                    7f:75:f5:b7:b7:0d:f5:05:16:47:18:ff:cd:7d:45:
                    15:54:7e:70:7a:3f:3a:d8:72:2b:f5:eb:2b:5c:3d:
                    01:41:41:8f:db:86:5f:a4:24:b4:b1:45:b7:0e:38:
                    62:38:a7:f9:89:04:af:ae:5b:f5:5e:8e:62:e0:7b:
                    66:81:b4:53:a9:3e:a3:8c:b9:61:bb:f9:b6:d0:c8:
                    79:b9:d3:83:6d:5e:7d:fe:52:f8:10:50:88:71:40:
                    85:b2:fe:2a:4d:58:06:2c:61:c8:e8:90:ec:18:78:
                    16:f2:b0:bd:07:b4:d7:c6:ac:97:1e:47:1d:32:63:
                    54:a4:5b:db:a2:26:2c:36:29:5d:52:79:27:6d:c4:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22
                IPv6:
                  2804:5588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267940

    Signature Algorithm: sha256WithRSAEncryption
         cf:fd:09:af:f0:9c:db:80:ae:d8:e3:36:7a:1a:82:73:93:26:
         e2:51:bd:6a:c5:93:a9:be:de:7c:61:57:52:19:9a:08:f3:bd:
         9c:82:70:50:ec:be:72:8d:c8:d6:61:32:f5:b6:34:25:83:04:
         58:3f:24:bc:88:7a:e7:43:ec:50:40:b8:be:01:9d:16:8c:69:
         11:4a:24:8f:4b:28:cb:5a:27:6d:90:d2:b0:aa:8e:0b:b0:80:
         48:0b:6c:7a:8e:2a:b2:06:aa:cb:91:02:50:b6:7c:98:68:07:
         16:9c:b3:8a:9d:24:a5:9c:af:e9:16:d4:8f:3c:bc:b0:09:42:
         a2:5d:0d:3a:fd:4c:07:e1:c3:0d:ab:84:c6:a1:48:f4:65:26:
         f9:fc:5e:26:e5:b3:91:6f:ee:32:d5:07:b2:bb:2e:ca:a4:a7:
         ba:8e:e3:8a:fb:bd:72:af:b5:94:f7:67:04:a6:fb:f5:3b:32:
         f1:64:70:47:7d:3e:37:f8:1e:98:25:0c:17:d6:7f:b1:e5:9f:
         fa:23:0b:df:65:aa:b6:1f:af:31:69:62:e9:ea:b8:64:c0:b4:
         f4:ef:b4:db:75:be:da:f6:77:90:7b:ad:29:3f:02:1a:31:e1:
         5b:01:8f:26:03:04:d9:e2:c3:aa:c9:58:b4:51:60:2f:91:55:
         20:12:ff:34
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUenYzR6bpMkkqtDzo5+5ddHXaQDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MzAxOTQ5NDFaFw0yNTA0MjkxOTU0NDFaMDMxMTAvBgNV
BAMTKDY2NkU1NThBQkFFOUM5NTg2OTAyMDc3RTNFNjk3RjEzQTY5Qzk4QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGl7O3KbQzKbkoPnMxN7GW/ZF
p3n66YCGHHX1xv4Ky+q/zSmMTzDvZfzuInvVeCnvaOxRlc6rK3HEfw9m+luqi0u9
tfYlrbAaK6wm0dK4JRNF+A+5wB08jb/Lia/cf/dvgNE9LKD5NdqRaSUEDlVcgsiR
EsqinX919be3DfUFFkcY/819RRVUfnB6PzrYciv16ytcPQFBQY/bhl+kJLSxRbcO
OGI4p/mJBK+uW/VejmLge2aBtFOpPqOMuWG7+bbQyHm504NtXn3+UvgQUIhxQIWy
/ipNWAYsYcjokOwYeBbysL0HtNfGrJceRx0yY1SkW9uiJiw2KV1SeSdtxO41AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmblWKuunJWGkC
B34+aX8TppyYvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNldj
Nk5IeWtnd0d6NmtyQU5LSkxoNGNOUmY1MWExc2NGUkFkTXVHanQ3a3cvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZX
YzZOSHlrZ3dHejZrckFOS0pMaDRjTlJmNTFhMXNjRlJBZE11R2p0N2t3LzAvNjY2
RTU1OEFCQUU5Qzk1ODY5MDIwNzdFM0U2OTdGMTNBNjlDOThCRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaXYMA0EAgACMAcDBQAoBFWIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQWpDANBgkqhkiG9w0BAQsFAAOCAQEAz/0Jr/Cc24Cu2OM2
ehqCc5Mm4lG9asWTqb7efGFXUhmaCPO9nIJwUOy+co3I1mEy9bY0JYMEWD8kvIh6
50PsUEC4vgGdFoxpEUokj0soy1onbZDSsKqOC7CASAtseo4qsgaqy5ECULZ8mGgH
Fpyzip0kpZyv6RbUjzy8sAlCol0NOv1MB+HDDauExqFI9GUm+fxeJuWzkW/uMtUH
srsuyqSnuo7jivu9cq+1lPdnBKb79Tsy8WRwR30+N/gemCUMF9Z/seWf+iML32Wq
th+vMWli6eq4ZMC09O+023W+2vZ3kHutKT8CGjHhWwGPJgME2eLDqslYtFFgL5FV
IBL/NA==
-----END CERTIFICATE-----
Generated at Fri Aug 30 03:34:56 2024 by rpki-client on console-ams.rpki-client.org