Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DEF06418E7CACF5FC2A4DE7341FED19BA62FEC2.cer
File:                     6DEF06418E7CACF5FC2A4DE7341FED19BA62FEC2.cer (raw, json)
Hash identifier:          wH7BF8NRy47JrsJ67ruScG93XZQ0jp8mCEWweWbkMis=
Subject key identifier:   6D:EF:06:41:8E:7C:AC:F5:FC:2A:4D:E7:34:1F:ED:19:BA:62:FE:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AF4652F58DDE42D1A7039C5E65C10AF055209A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/6DEF06418E7CACF5FC2A4DE7341FED19BA62FEC2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 19:09:14 +0000
Certificate not after:    Mon 08 Sep 2025 19:14:14 +0000
Subordinate resources:    AS: 265984
                          IP: 181.191.4.0/22
                          IP: 2804:40d4::/32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f4:65:2f:58:dd:e4:2d:1a:70:39:c5:e6:5c:10:af:05:52:09:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 19:09:14 2024 GMT
            Not After : Sep  8 19:14:14 2025 GMT
        Subject: CN=6DEF06418E7CACF5FC2A4DE7341FED19BA62FEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:38:38:00:31:8f:5e:2b:e6:5d:49:8e:64:
                    79:09:0a:8e:63:9a:8c:cd:c1:7b:d2:16:2b:68:c4:
                    48:bc:01:2c:65:40:4b:31:ba:85:86:7d:30:3f:00:
                    eb:5f:c7:2b:9c:50:21:a2:7e:1d:cb:02:6d:c7:77:
                    b9:80:43:35:4e:7d:11:75:29:ac:a4:70:d8:00:7d:
                    96:7c:e9:55:cd:92:be:1b:9f:04:fd:88:76:33:f3:
                    24:80:23:bf:69:6c:2b:ff:24:1b:c1:d9:3c:2c:50:
                    f5:3e:07:9b:94:f2:1a:c3:69:ed:71:1b:7a:f6:f8:
                    9a:0a:79:7a:00:5c:c5:e5:16:90:20:24:00:f3:8a:
                    68:a4:8a:cc:d8:c1:ff:3d:4b:4c:39:23:5a:22:17:
                    95:f5:a3:66:93:a4:ec:9a:1a:03:ea:a8:c8:09:0f:
                    b6:4e:21:6c:c8:73:b4:5d:9e:7b:9a:f2:c2:33:f9:
                    e5:ed:ae:24:3e:4a:10:80:5b:30:62:82:f7:fa:69:
                    1c:34:46:a1:92:24:43:88:db:df:46:07:fd:b9:a1:
                    1c:c7:15:c9:b2:4f:ab:20:64:85:0a:78:61:49:fa:
                    9a:ca:72:ef:72:93:85:c7:f6:1c:14:a8:ef:88:0f:
                    c1:6e:aa:cb:78:bd:74:12:63:36:f8:9f:39:54:11:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:EF:06:41:8E:7C:AC:F5:FC:2A:4D:E7:34:1F:ED:19:BA:62:FE:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/6DEF06418E7CACF5FC2A4DE7341FED19BA62FEC2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.4.0/22
                IPv6:
                  2804:40d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265984

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:07:d6:da:bd:a6:f0:52:e6:9f:24:a2:74:6d:8e:1f:18:
         43:4e:41:d2:52:e7:6c:b1:aa:ac:b8:d8:53:7d:5a:43:8d:4a:
         9e:71:1c:3e:23:54:37:18:28:c4:ca:84:e5:c7:50:89:0c:7c:
         b6:bf:15:98:59:4a:28:0c:b6:61:ea:90:a8:6a:a9:b4:2d:e8:
         cd:a7:04:8e:50:e8:d9:7d:a1:22:2b:da:65:44:ed:dc:3f:79:
         ee:fd:01:8d:7c:db:1d:b3:e5:a4:7c:5b:b4:ef:f7:7e:7a:64:
         7c:e7:15:47:42:cc:50:da:ca:d3:63:14:63:4d:44:ba:63:ff:
         d9:55:09:c9:2c:11:e8:0d:3f:f4:ba:ea:b2:74:6b:8d:0a:97:
         99:79:98:ce:c2:27:ea:98:90:10:24:7f:fb:8d:c6:23:8c:c9:
         fd:9b:d5:6c:29:99:e5:40:9c:55:32:fd:8c:bb:36:0c:3c:21:
         e7:af:1d:12:d6:e0:d1:24:e9:74:7c:7a:3c:36:df:5d:59:41:
         6c:f3:ee:9c:08:38:81:fa:5a:96:a0:7e:b3:fc:73:a4:4f:6b:
         8a:63:7b:59:7a:18:cb:41:34:a6:85:0a:ff:c6:e0:ea:cd:49:
         fe:bc:e2:ca:3d:76:42:20:c8:d8:65:89:63:41:e5:72:fd:b6:
         c7:5b:cd:bf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWvRlL1jd5C0acDnF5lwQrwVSCaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDkxOTA5MTRaFw0yNTA5MDgxOTE0MTRaMDMxMTAvBgNV
BAMTKDZERUYwNjQxOEU3Q0FDRjVGQzJBNERFNzM0MUZFRDE5QkE2MkZFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfTg4ADGPXivmXUmOZHkJCo5j
mozNwXvSFitoxEi8ASxlQEsxuoWGfTA/AOtfxyucUCGifh3LAm3Hd7mAQzVOfRF1
KaykcNgAfZZ86VXNkr4bnwT9iHYz8ySAI79pbCv/JBvB2TwsUPU+B5uU8hrDae1x
G3r2+JoKeXoAXMXlFpAgJADzimikiszYwf89S0w5I1oiF5X1o2aTpOyaGgPqqMgJ
D7ZOIWzIc7Rdnnua8sIz+eXtriQ+ShCAWzBigvf6aRw0RqGSJEOI299GB/25oRzH
FcmyT6sgZIUKeGFJ+prKcu9yk4XH9hwUqO+ID8Fuqst4vXQSYzb4nzlUEb0nAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRt7wZBjnys9fwq
Tec0H+0ZumL+wjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmVK
eGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2cXgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zl
SnhhWVFzYktqVFk1SGhyZ0dmazZjWnpYVzNUZGVOTXVNVWhTQXd2dnF4LzAvNkRF
RjA2NDE4RTdDQUNGNUZDMkE0REU3MzQxRkVEMTlCQTYyRkVDMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb8EMA0EAgACMAcDBQAoBEDUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPADANBgkqhkiG9w0BAQsFAAOCAQEAjY0H1tq9pvBS5p8k
onRtjh8YQ05B0lLnbLGqrLjYU31aQ41KnnEcPiNUNxgoxMqE5cdQiQx8tr8VmFlK
KAy2YeqQqGqptC3ozacEjlDo2X2hIivaZUTt3D957v0BjXzbHbPlpHxbtO/3fnpk
fOcVR0LMUNrK02MUY01EumP/2VUJySwR6A0/9LrqsnRrjQqXmXmYzsIn6piQECR/
+43GI4zJ/ZvVbCmZ5UCcVTL9jLs2DDwh568dEtbg0STpdHx6PDbfXVlBbPPunAg4
gfpalqB+s/xzpE9rimN7WXoYy0E0poUK/8bg6s1J/rziyj12QiDI2GWJY0Hlcv22
x1vNvw==
-----END CERTIFICATE-----
Generated at Thu Oct 17 09:01:38 2024 by rpki-client on console-fra.rpki-client.org