Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.cer
File:                     6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.cer (raw, json)
Hash identifier:          u+Ai6DcyNN8M1BEqhfAGLHG401/02GolqMMrfymk1iA=
Subject key identifier:   6F:E0:CC:D8:24:52:32:0B:CB:7B:9F:C0:EB:C8:0C:AC:BF:96:48:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       29ADAE032B54C9B93B19BFC8577CB0E98AC0ACCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:35:51 +0000
Certificate not after:    Thu 03 Apr 2025 08:40:51 +0000
Subordinate resources:    AS: 263089
                          IP: 168.195.232.0/22
                          IP: 186.250.24.0/22
                          IP: 2804:2a60::/32

Validation:               Failed, certificate revoked on Tue 07 May 2024 20:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ad:ae:03:2b:54:c9:b9:3b:19:bf:c8:57:7c:b0:e9:8a:c0:ac:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:35:51 2024 GMT
            Not After : Apr  3 08:40:51 2025 GMT
        Subject: CN=6FE0CCD82452320BCB7B9FC0EBC80CACBF964820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:e8:20:36:24:0e:b9:4d:a9:e9:70:52:69:
                    2d:32:89:20:6e:ac:c1:2b:7a:23:2f:da:e1:59:65:
                    13:17:4d:ea:72:df:e6:6a:3c:20:7a:5f:8d:e7:f8:
                    95:5c:60:b8:50:a5:50:52:14:4b:90:b6:62:a0:f7:
                    b4:2c:92:ae:80:a6:51:1a:69:b4:d4:55:b5:d2:ac:
                    be:55:d5:58:76:07:21:76:2d:c1:56:50:3a:7c:23:
                    47:b9:71:60:13:6c:47:e9:31:7e:77:de:d8:1f:eb:
                    c9:20:08:15:0e:9e:dd:ae:3a:b1:2d:52:32:46:e5:
                    2d:26:61:97:14:a2:35:a1:6e:3b:f6:e1:8a:41:b4:
                    8e:f7:ee:b1:bd:d0:4b:80:ca:98:e1:3b:77:7f:4d:
                    1f:4b:5b:f2:7b:78:2e:8a:6e:6c:eb:5a:01:31:35:
                    c1:c8:51:4d:2a:06:98:1d:89:df:9d:e4:92:82:ac:
                    b5:9d:88:5b:53:b8:20:61:0f:65:34:e4:e2:48:b6:
                    ce:19:0d:fd:0f:ae:d4:96:aa:44:db:fe:99:bd:2f:
                    9b:37:2e:62:7f:18:c6:fb:e3:5b:a8:2d:81:56:30:
                    f3:0e:4b:04:ac:16:cd:de:be:a1:af:29:71:70:09:
                    23:66:f5:a0:45:9e:47:e9:04:a6:44:77:0c:6a:96:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:E0:CC:D8:24:52:32:0B:CB:7B:9F:C0:EB:C8:0C:AC:BF:96:48:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.232.0/22
                  186.250.24.0/22
                IPv6:
                  2804:2a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263089

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:b6:54:51:23:b0:3f:4c:b0:fd:a7:4d:aa:48:d7:70:04:
         82:67:79:a4:08:08:0a:c1:93:58:d8:5b:a8:f1:9f:02:f2:b8:
         bf:44:90:bf:02:c6:06:f4:32:98:43:22:77:08:8e:81:a4:61:
         00:27:ce:37:73:31:88:cc:8d:37:53:40:19:3a:35:b2:ac:3e:
         18:d4:a0:f1:e8:f6:05:ce:8b:ca:28:73:77:95:62:92:75:aa:
         27:e4:7f:cb:91:2f:e9:92:73:83:8c:e2:19:f1:ad:a9:da:e8:
         1f:c5:7c:34:72:b9:99:56:fe:06:ff:c6:ed:8f:07:4e:d6:54:
         50:db:92:57:05:c8:74:c1:7c:dc:11:87:2e:17:f2:6b:f2:2e:
         32:7e:7a:a2:5b:30:fb:09:cc:01:e8:b8:be:a0:50:a7:57:bb:
         f3:c2:c8:cd:bf:6e:3d:01:aa:44:28:c5:0c:20:5b:75:b6:36:
         81:c0:86:77:58:49:d1:ce:c4:bc:23:5c:d9:73:22:b6:ae:ac:
         c3:81:ef:ad:18:b6:47:fe:4e:dd:18:60:a9:5b:aa:78:34:92:
         35:de:ba:05:c5:1c:ae:d5:d3:14:e1:ae:be:bf:2b:ff:1a:91:
         4b:74:e5:57:31:da:e8:83:6a:91:e3:9e:10:df:9c:53:4b:fb:
         06:2d:24:55
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUKa2uAytUybk7Gb/IV3yw6YrArM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODM1NTFaFw0yNTA0MDMwODQwNTFaMDMxMTAvBgNV
BAMTKDZGRTBDQ0Q4MjQ1MjMyMEJDQjdCOUZDMEVCQzgwQ0FDQkY5NjQ4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG+ggNiQOuU2p6XBSaS0yiSBu
rMEreiMv2uFZZRMXTepy3+ZqPCB6X43n+JVcYLhQpVBSFEuQtmKg97Qskq6AplEa
abTUVbXSrL5V1Vh2ByF2LcFWUDp8I0e5cWATbEfpMX533tgf68kgCBUOnt2uOrEt
UjJG5S0mYZcUojWhbjv24YpBtI737rG90EuAypjhO3d/TR9LW/J7eC6KbmzrWgEx
NcHIUU0qBpgdid+d5JKCrLWdiFtTuCBhD2U05OJIts4ZDf0PrtSWqkTb/pm9L5s3
LmJ/GMb741uoLYFWMPMOSwSsFs3evqGvKXFwCSNm9aBFnkfpBKZEdwxqlluNAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRv4MzYJFIyC8t7
n8DryAysv5ZIIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkF0
VFhqdnJzb1NaRWZxcGdReDY1RmNHbmFjbzFFTmdabVFnRmY5QktYUUwvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZB
dFRYanZyc29TWkVmcXBnUXg2NUZjR25hY28xRU5nWm1RZ0ZmOUJLWFFMLzEvNkZF
MENDRDgyNDUyMzIwQkNCN0I5RkMwRUJDODBDQUNCRjk2NDgyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqMPoAwQCuvoYMA0EAgACMAcDBQAoBCpgMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQDsTANBgkqhkiG9w0BAQsFAAOCAQEAuKW2VFEj
sD9MsP2nTapI13AEgmd5pAgICsGTWNhbqPGfAvK4v0SQvwLGBvQymEMidwiOgaRh
ACfON3MxiMyNN1NAGTo1sqw+GNSg8ej2Bc6Lyihzd5ViknWqJ+R/y5Ev6ZJzg4zi
GfGtqdroH8V8NHK5mVb+Bv/G7Y8HTtZUUNuSVwXIdMF83BGHLhfya/IuMn56olsw
+wnMAei4vqBQp1e788LIzb9uPQGqRCjFDCBbdbY2gcCGd1hJ0c7EvCNc2XMitq6s
w4HvrRi2R/5O3RhgqVuqeDSSNd66BcUcrtXTFOGuvr8r/xqRS3TlVzHa6INqkeOe
EN+cU0v7Bi0kVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org