Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/76AE8A85E43ADA329301B90BCB9FB1A2BB55E14E.cer
File:                     76AE8A85E43ADA329301B90BCB9FB1A2BB55E14E.cer (raw, json)
Hash identifier:          XU3kiBrXStvutbNf5Q+cqoBmsxRRVJ6TtnjEuQ4EnMs=
Subject key identifier:   76:AE:8A:85:E4:3A:DA:32:93:01:B9:0B:CB:9F:B1:A2:BB:55:E1:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32646D7C7F131C68CF529C66DEF2997C8CB1FAD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/1/76AE8A85E43ADA329301B90BCB9FB1A2BB55E14E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Sep 2024 13:48:36 +0000
Certificate not after:    Sat 20 Sep 2025 13:53:36 +0000
Subordinate resources:    AS: 269171
                          IP: 45.181.64.0/22
                          IP: 2804:6080::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:6d:7c:7f:13:1c:68:cf:52:9c:66:de:f2:99:7c:8c:b1:fa:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 21 13:48:36 2024 GMT
            Not After : Sep 20 13:53:36 2025 GMT
        Subject: CN=76AE8A85E43ADA329301B90BCB9FB1A2BB55E14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:2e:05:87:92:0c:42:4c:19:8c:73:09:36:
                    d8:c1:ec:e6:1f:35:23:0d:c8:bb:9d:61:96:98:1e:
                    cf:74:cc:b4:cc:7d:e8:e4:ba:6e:57:3c:06:98:e6:
                    af:a2:28:04:34:66:86:92:cf:4d:33:d1:86:42:ce:
                    35:54:06:22:68:3f:4a:64:5e:be:89:23:7f:0f:ec:
                    79:f0:9d:2f:2c:ba:ae:fe:fc:1d:1b:d4:94:75:8a:
                    72:ff:e8:7d:b1:33:45:7b:ec:29:5d:4f:74:03:fc:
                    bf:ff:93:dd:47:ab:8f:06:ee:2b:96:3b:74:7f:b8:
                    d5:05:d4:81:a5:dc:b6:17:06:33:9b:a7:59:37:30:
                    0e:68:25:75:95:76:8e:fc:c9:4d:c0:9a:d7:97:b9:
                    44:c6:aa:ef:57:5a:be:72:8c:0d:2e:a6:a6:f2:81:
                    0e:3c:75:f2:2b:ef:51:d0:f3:5a:84:d5:c8:99:55:
                    0e:5e:56:e7:a3:7a:13:9b:eb:4c:4f:2f:99:96:ee:
                    f4:47:61:19:6b:27:18:93:54:2b:40:ec:5f:6f:16:
                    80:4e:2b:d5:28:aa:f5:b4:2d:c1:97:b9:1f:8a:55:
                    d8:3a:8e:d4:e8:94:c1:ea:8b:15:c9:50:69:17:f3:
                    82:d0:42:d9:c7:5e:aa:3f:90:f9:1a:c3:97:d8:b1:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:AE:8A:85:E4:3A:DA:32:93:01:B9:0B:CB:9F:B1:A2:BB:55:E1:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/1/76AE8A85E43ADA329301B90BCB9FB1A2BB55E14E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.64.0/22
                IPv6:
                  2804:6080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269171

    Signature Algorithm: sha256WithRSAEncryption
         23:94:f8:1c:75:24:12:ea:58:f6:03:31:92:2e:94:35:63:69:
         0a:e2:c6:ec:e3:f8:3e:ef:39:de:a1:fc:77:49:c1:47:df:32:
         57:44:9a:a6:c7:69:69:c6:a0:95:a8:78:10:20:c2:eb:66:5a:
         98:41:d4:3a:f9:8b:83:e8:41:a8:3e:4b:87:53:1f:51:25:91:
         62:29:26:a2:a4:0c:e0:a4:98:8e:58:3d:60:e2:28:9e:57:27:
         ac:16:aa:c3:4a:72:a0:28:53:18:ba:ce:9e:8e:52:eb:e9:d6:
         84:f5:dc:63:41:28:bf:c4:4f:b5:1a:db:ae:a1:19:ad:ba:b9:
         60:55:9b:2a:9a:68:2a:d0:2b:5c:6e:4b:77:e1:87:ab:d8:de:
         e4:0a:c8:03:e5:34:c7:ce:9d:3c:6d:82:c2:42:47:c1:0d:0e:
         ce:9d:e3:33:ee:e7:a7:d3:b9:ce:0f:83:ce:bc:5b:76:38:54:
         c8:c3:e5:06:ad:27:69:a8:36:c6:b5:da:6a:5b:f6:ac:d8:c2:
         4f:27:44:a1:b2:32:9a:55:f4:72:20:ca:ed:10:25:c9:86:f2:
         27:02:13:bf:0b:66:de:c9:38:3d:ad:3a:dc:06:47:b8:25:ae:
         84:bc:75:f5:26:9a:d7:38:72:ab:ab:47:52:48:ec:c2:a8:51:
         35:89:a4:4d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMmRtfH8THGjPUpxm3vKZfIyx+tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MjExMzQ4MzZaFw0yNTA5MjAxMzUzMzZaMDMxMTAvBgNV
BAMTKDc2QUU4QTg1RTQzQURBMzI5MzAxQjkwQkNCOUZCMUEyQkI1NUUxNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrS4Fh5IMQkwZjHMJNtjB7OYf
NSMNyLudYZaYHs90zLTMfejkum5XPAaY5q+iKAQ0ZoaSz00z0YZCzjVUBiJoP0pk
Xr6JI38P7HnwnS8suq7+/B0b1JR1inL/6H2xM0V77CldT3QD/L//k91Hq48G7iuW
O3R/uNUF1IGl3LYXBjObp1k3MA5oJXWVdo78yU3AmteXuUTGqu9XWr5yjA0upqby
gQ48dfIr71HQ81qE1ciZVQ5eVuejehOb60xPL5mW7vRHYRlrJxiTVCtA7F9vFoBO
K9UoqvW0LcGXuR+KVdg6jtTolMHqixXJUGkX84LQQtnHXqo/kPkaw5fYsYHxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2roqF5DraMpMB
uQvLn7Giu1XhTjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG54
Y0hSTE1xNHl3RERzMlZWdTkzTDZZM0FKWVpkQ21NN05ENW5ncUJZaU4vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hu
eGNIUkxNcTR5d0REczJWVnU5M0w2WTNBSllaZENtTTdORDVuZ3FCWWlOLzEvNzZB
RThBODVFNDNBREEzMjkzMDFCOTBCQ0I5RkIxQTJCQjU1RTE0RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbVAMA0EAgACMAcDBQAoBGCAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbczANBgkqhkiG9w0BAQsFAAOCAQEAI5T4HHUkEupY9gMx
ki6UNWNpCuLG7OP4Pu853qH8d0nBR98yV0Sapsdpacaglah4ECDC62ZamEHUOvmL
g+hBqD5Lh1MfUSWRYikmoqQM4KSYjlg9YOIonlcnrBaqw0pyoChTGLrOno5S6+nW
hPXcY0Eov8RPtRrbrqEZrbq5YFWbKppoKtArXG5Ld+GHq9je5ArIA+U0x86dPG2C
wkJHwQ0Ozp3jM+7np9O5zg+DzrxbdjhUyMPlBq0naag2xrXaalv2rNjCTydEobIy
mlX0ciDK7RAlyYbyJwITvwtm3sk4Pa063AZHuCWuhLx19Saa1zhyq6tHUkjswqhR
NYmkTQ==
-----END CERTIFICATE-----