Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68CCA379DB57908B4DA691FC2C9431DE082C3C08.cer
File:                     68CCA379DB57908B4DA691FC2C9431DE082C3C08.cer (raw, json)
Hash identifier:          rkF5bljOd8rzqx31ludmFGds34X+fqVUlH8boO/6Z5s=
Subject key identifier:   68:CC:A3:79:DB:57:90:8B:4D:A6:91:FC:2C:94:31:DE:08:2C:3C:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33398F96DC679E48EFF153FEA4405A49E2A9FA2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 20:35:10 +0000
Certificate not after:    Wed 23 Apr 2025 20:40:10 +0000
Subordinate resources:    AS: 266094
                          IP: 45.5.112.0/22
                          IP: 2804:3a88::/32

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 10:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:8f:96:dc:67:9e:48:ef:f1:53:fe:a4:40:5a:49:e2:a9:fa:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 20:35:10 2024 GMT
            Not After : Apr 23 20:40:10 2025 GMT
        Subject: CN=68CCA379DB57908B4DA691FC2C9431DE082C3C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:af:4e:05:35:2d:b2:f9:fd:59:4e:54:66:
                    4d:a5:d7:df:c3:d0:1c:79:98:18:37:ce:cf:51:8e:
                    11:d8:ba:04:22:57:f8:84:9f:8b:71:2b:fd:30:9f:
                    cc:bf:83:cb:03:b2:cc:13:8b:55:99:9e:71:84:98:
                    bc:0d:18:8d:9e:84:8e:a0:f5:0d:91:d4:7d:ff:de:
                    45:74:14:1a:f8:68:33:97:5e:81:f9:ba:e0:5e:0c:
                    ef:c5:50:a8:e5:10:60:15:ff:23:76:a6:5e:56:86:
                    f9:f2:b2:d3:c1:95:3c:bf:0a:18:7d:22:04:9a:cd:
                    ae:0e:d1:30:8f:e9:7a:c0:33:f0:15:b2:6d:db:99:
                    48:90:ee:a6:92:5c:3d:1e:a3:d1:29:14:ab:72:dc:
                    a9:de:bc:84:8b:db:76:ce:e7:db:eb:15:16:1a:0a:
                    4a:bd:be:69:5c:8e:33:3b:50:e7:ad:15:49:39:71:
                    50:58:60:3b:5d:e4:46:7a:39:da:c3:bb:ca:4c:12:
                    83:a5:b5:ae:3d:12:ca:77:08:38:69:cc:a6:7e:dd:
                    81:44:60:54:50:31:0d:3e:9a:93:cd:04:dd:e6:af:
                    f0:20:c4:ff:f5:d2:3f:a6:64:fe:a9:ce:20:98:f0:
                    09:3a:89:82:f7:bd:6e:b1:1b:74:6a:4c:d9:41:39:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:CC:A3:79:DB:57:90:8B:4D:A6:91:FC:2C:94:31:DE:08:2C:3C:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.112.0/22
                IPv6:
                  2804:3a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266094

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:8a:f9:3b:74:17:98:92:7a:03:5d:65:5f:40:0b:ef:98:
         25:15:4b:bf:2f:0b:f6:8a:68:f4:3a:77:2b:76:fb:5a:34:07:
         7c:51:38:05:3b:d7:09:a1:56:35:e1:1e:51:8a:8d:f5:b1:b0:
         7f:03:a8:19:e1:76:14:7c:1a:fc:c7:dc:eb:3f:e2:64:7f:cc:
         0b:a4:05:1f:2c:27:c1:db:7b:a9:ff:ab:de:62:e0:e2:dc:6a:
         d3:b7:3c:c2:24:b9:d7:b9:3d:0e:54:2c:71:28:be:aa:3e:69:
         cd:2d:1c:24:7b:f8:32:8d:16:99:e2:1b:74:3b:dd:27:48:07:
         c9:c4:09:30:ce:95:55:1f:03:5c:92:a7:7b:a4:e5:91:d0:62:
         6a:88:64:45:05:80:0e:74:7c:05:56:36:9b:4b:86:01:1c:f4:
         8b:bb:2d:66:3c:04:80:1b:cf:7a:6c:e1:06:c6:4a:5b:32:5c:
         64:17:7c:e6:49:f9:8e:bd:65:1a:ca:cd:14:6e:62:cd:f5:47:
         5c:32:d1:91:a6:7a:5f:3a:b3:2e:03:56:90:36:37:92:d7:c7:
         28:aa:de:58:f4:49:a5:4e:2c:df:41:9d:86:e3:8f:4f:16:e7:
         93:80:c2:ba:7c:ee:52:34:47:91:db:35:60:1f:0e:74:60:f8:
         80:d1:36:72
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMzmPltxnnkjv8VP+pEBaSeKp+i0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjQyMDM1MTBaFw0yNTA0MjMyMDQwMTBaMDMxMTAvBgNV
BAMTKDY4Q0NBMzc5REI1NzkwOEI0REE2OTFGQzJDOTQzMURFMDgyQzNDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/69OBTUtsvn9WU5UZk2l19/D
0Bx5mBg3zs9RjhHYugQiV/iEn4txK/0wn8y/g8sDsswTi1WZnnGEmLwNGI2ehI6g
9Q2R1H3/3kV0FBr4aDOXXoH5uuBeDO/FUKjlEGAV/yN2pl5WhvnystPBlTy/Chh9
IgSaza4O0TCP6XrAM/AVsm3bmUiQ7qaSXD0eo9EpFKty3KnevISL23bO59vrFRYa
Ckq9vmlcjjM7UOetFUk5cVBYYDtd5EZ6OdrDu8pMEoOlta49Esp3CDhpzKZ+3YFE
YFRQMQ0+mpPNBN3mr/AgxP/10j+mZP6pziCY8Ak6iYL3vW6xG3RqTNlBOS1pAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRozKN521eQi02m
kfwslDHeCCw8CDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1V1
R0hjVnZYOFE0S3ZrZGppN1hHd2ZWMkpjTnJwRnZvMzFoN1ZZODNkUG4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NV
dUdIY1Z2WDhRNEt2a2RqaTdYR3dmVjJKY05ycEZ2bzMxaDdWWTgzZFBuLzAvNjhD
Q0EzNzlEQjU3OTA4QjREQTY5MUZDMkM5NDMxREUwODJDM0MwOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQVwMA0EAgACMAcDBQAoBDqIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPbjANBgkqhkiG9w0BAQsFAAOCAQEASuiK+Tt0F5iSegNd
ZV9AC++YJRVLvy8L9opo9Dp3K3b7WjQHfFE4BTvXCaFWNeEeUYqN9bGwfwOoGeF2
FHwa/Mfc6z/iZH/MC6QFHywnwdt7qf+r3mLg4txq07c8wiS517k9DlQscSi+qj5p
zS0cJHv4Mo0WmeIbdDvdJ0gHycQJMM6VVR8DXJKne6TlkdBiaohkRQWADnR8BVY2
m0uGARz0i7stZjwEgBvPemzhBsZKWzJcZBd85kn5jr1lGsrNFG5izfVHXDLRkaZ6
XzqzLgNWkDY3ktfHKKreWPRJpU4s30GdhuOPTxbnk4DCunzuUjRHkds1YB8OdGD4
gNE2cg==
-----END CERTIFICATE-----
Generated at Wed Sep 11 13:30:05 2024 by rpki-client on console-fra.rpki-client.org