Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.cer
File:                     6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.cer (raw, json)
Hash identifier:          n1PK3Zx4u8kmqYYBKf3pEWgW91kwRdEmBBjqSnJjrCg=
Subject key identifier:   6A:31:ED:73:EA:2E:8D:93:37:50:65:3A:7F:FB:EF:8E:01:E5:3F:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7DF37D149AD506DEE377436ED2F211687EEBFE5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 May 2024 17:34:06 +0000
Certificate not after:    Mon 26 May 2025 17:39:06 +0000
Subordinate resources:    AS: 270800
                          IP: 200.219.36.0/22
                          IP: 2804:719c::/32

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 22:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f3:7d:14:9a:d5:06:de:e3:77:43:6e:d2:f2:11:68:7e:eb:fe:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 27 17:34:06 2024 GMT
            Not After : May 26 17:39:06 2025 GMT
        Subject: CN=6A31ED73EA2E8D933750653A7FFBEF8E01E53F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:77:62:cc:e5:81:b0:33:a3:dd:58:98:c5:
                    9d:a0:03:f2:8c:45:27:9a:b5:09:91:df:5a:54:df:
                    ee:56:9e:7b:07:6e:f1:a7:d4:ff:9f:09:0c:29:8e:
                    54:8d:00:fc:29:77:bd:51:10:39:d1:32:77:29:e4:
                    3d:e6:e7:fe:48:56:2e:1d:d0:3f:8d:77:7b:f3:8d:
                    1e:c7:00:02:a9:b4:c5:d4:29:34:6d:c9:f8:3d:af:
                    d2:c0:bf:a4:8b:ff:ba:95:73:47:68:dd:2a:98:b0:
                    80:31:22:ca:a2:d4:51:fe:cb:39:7a:43:0f:dd:02:
                    96:9e:c9:f0:d7:33:62:bf:4a:8c:7a:ae:b1:87:ab:
                    3e:95:36:02:c6:37:bd:37:f8:c3:81:bd:22:51:f6:
                    72:77:0a:cd:e4:db:6d:c4:57:85:3e:30:53:e4:19:
                    a2:fe:53:f7:4f:42:e4:8f:5b:e7:01:42:e7:79:b9:
                    c0:97:45:26:3d:a1:4e:c9:e6:8a:5a:1c:ba:45:cc:
                    7f:e7:4b:f9:e5:37:75:d9:9f:e1:8e:da:a4:96:1b:
                    66:9c:f8:06:f9:15:83:5f:76:a4:5d:94:54:83:14:
                    84:9d:f3:5a:fc:f7:9b:bc:bf:d8:37:77:3e:01:1e:
                    5d:d8:7a:82:25:52:40:14:34:c4:35:41:80:5b:e8:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:31:ED:73:EA:2E:8D:93:37:50:65:3A:7F:FB:EF:8E:01:E5:3F:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.36.0/22
                IPv6:
                  2804:719c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270800

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:e9:17:06:e0:6a:3c:d7:c9:18:8c:68:9c:01:e8:7d:ab:
         43:b6:45:ea:ff:9c:c5:1a:23:cd:3e:fc:06:a9:6a:a6:83:72:
         7b:65:5e:12:22:58:44:ee:22:96:44:f3:10:d7:65:60:0f:a0:
         d1:1c:40:41:34:60:ea:8e:e6:d9:2d:46:81:d7:c0:9a:24:1f:
         db:73:27:ae:c5:43:8d:2d:63:0a:d1:62:ea:d9:11:8e:93:4e:
         72:cf:bd:39:2b:c4:d4:dd:f8:26:98:3f:79:44:2f:12:8c:a7:
         33:7d:3c:2d:d0:c4:cf:ec:48:7a:22:41:78:26:c7:ce:74:92:
         bd:6d:7a:f9:ae:39:40:b4:23:3a:3a:da:70:9a:7d:7d:b0:2f:
         d6:94:a5:e8:7c:c6:e0:0e:fe:39:1b:27:7d:f1:e1:16:63:ba:
         43:ec:08:06:f8:6e:e5:05:83:85:b1:7f:2f:5b:97:d6:55:d5:
         74:59:bb:f4:04:b1:3c:e5:ee:30:38:58:6a:07:3e:bf:b6:1d:
         68:bb:43:9a:1e:db:7c:3b:69:5b:fd:29:59:bd:c4:ae:36:96:
         63:40:10:33:a2:45:31:5c:6e:0d:3c:6c:a3:88:70:64:c4:8f:
         02:e8:fb:ae:7f:7a:53:3a:a8:4b:95:77:8f:b3:f9:9b:ea:ae:
         d6:17:64:55
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUffN9FJrVBt7jd0Nu0vIRaH7r/lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjcxNzM0MDZaFw0yNTA1MjYxNzM5MDZaMDMxMTAvBgNV
BAMTKDZBMzFFRDczRUEyRThEOTMzNzUwNjUzQTdGRkJFRjhFMDFFNTNGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkHdizOWBsDOj3ViYxZ2gA/KM
RSeatQmR31pU3+5WnnsHbvGn1P+fCQwpjlSNAPwpd71REDnRMncp5D3m5/5IVi4d
0D+Nd3vzjR7HAAKptMXUKTRtyfg9r9LAv6SL/7qVc0do3SqYsIAxIsqi1FH+yzl6
Qw/dApaeyfDXM2K/Sox6rrGHqz6VNgLGN703+MOBvSJR9nJ3Cs3k223EV4U+MFPk
GaL+U/dPQuSPW+cBQud5ucCXRSY9oU7J5opaHLpFzH/nS/nlN3XZn+GO2qSWG2ac
+Ab5FYNfdqRdlFSDFISd81r895u8v9g3dz4BHl3YeoIlUkAUNMQ1QYBb6LPlAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqMe1z6i6NkzdQ
ZTp/+++OAeU/eTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHlR
V0dNc3RQMUF0V0tORXFodllpd2JSN2kyVHZlTno2N2NMOWNudVF5WnQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h5
UVdHTXN0UDFBdFdLTkVxaHZZaXdiUjdpMlR2ZU56NjdjTDljbnVReVp0LzEvNkEz
MUVENzNFQTJFOEQ5MzM3NTA2NTNBN0ZGQkVGOEUwMUU1M0Y3OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyNskMA0EAgACMAcDBQAoBHGcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQh0DANBgkqhkiG9w0BAQsFAAOCAQEAhZ7pFwbgajzXyRiM
aJwB6H2rQ7ZF6v+cxRojzT78BqlqpoNye2VeEiJYRO4ilkTzENdlYA+g0RxAQTRg
6o7m2S1GgdfAmiQf23MnrsVDjS1jCtFi6tkRjpNOcs+9OSvE1N34Jpg/eUQvEoyn
M308LdDEz+xIeiJBeCbHznSSvW16+a45QLQjOjracJp9fbAv1pSl6HzG4A7+ORsn
ffHhFmO6Q+wIBvhu5QWDhbF/L1uX1lXVdFm79ASxPOXuMDhYagc+v7YdaLtDmh7b
fDtpW/0pWb3ErjaWY0AQM6JFMVxuDTxso4hwZMSPAuj7rn96UzqoS5V3j7P5m+qu
1hdkVQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:24:42 2024 by rpki-client on console-fra.rpki-client.org