Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer
File:                     7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer (raw, json)
Hash identifier:          xbHZsUZKrxPQG0UZU3+hp6DA4MBe5ruNkS6L+20ACoU=
Subject key identifier:   7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       9BC25665220817AE0EE4CE63BE09FE0943AE97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Nov 2024 19:17:43 +0000
Certificate not after:    Sat 01 Nov 2025 19:22:43 +0000
Subordinate resources:    AS: 266228
                          IP: 181.224.76.0/22
                          IP: 192.140.48.0/22
                          IP: 2804:3cac::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 22:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9b:c2:56:65:22:08:17:ae:0e:e4:ce:63:be:09:fe:09:43:ae:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  2 19:17:43 2024 GMT
            Not After : Nov  1 19:22:43 2025 GMT
        Subject: CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:4b:67:e8:a3:55:54:ba:39:c0:77:f5:81:
                    70:a4:31:19:28:5d:fb:75:95:e2:ea:fa:32:d8:e5:
                    65:1f:ec:f0:6a:ef:2b:23:f5:21:7a:2d:59:27:42:
                    c2:b2:92:0d:b8:36:1e:8b:47:90:06:25:5a:1d:42:
                    ac:3e:38:81:dc:03:b3:b8:e4:7d:18:38:7a:fc:77:
                    c1:25:ed:68:cf:ec:bd:19:bd:dc:0c:24:45:75:22:
                    d4:c6:0f:a4:42:e6:11:61:8f:74:9e:1e:b3:d2:ef:
                    d7:7a:7e:6f:e6:4b:bb:90:a8:ad:32:17:dc:05:db:
                    4e:c2:05:6e:88:ca:b9:3a:37:40:7e:d3:5e:da:d3:
                    90:13:a1:e2:dc:92:b3:83:fb:6f:4c:4b:54:61:fd:
                    fd:6d:0b:b2:83:f6:cd:6a:a4:56:ea:b5:9f:9f:f2:
                    38:9d:33:21:49:2d:89:32:f6:69:eb:87:f0:0e:95:
                    8d:5e:75:81:df:60:c6:55:0d:97:52:0e:65:b9:53:
                    4f:26:64:7b:55:dd:fe:af:cc:2b:e6:6d:3a:9a:17:
                    2a:30:e7:06:b5:e7:d2:ec:15:49:d9:90:71:46:64:
                    18:11:29:2d:91:aa:f6:b8:e4:5d:a5:7a:a4:af:e4:
                    3d:1d:80:fb:72:bd:94:54:3a:11:5b:85:06:78:73:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22
                  192.140.48.0/22
                IPv6:
                  2804:3cac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266228

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:37:49:b1:f6:bb:24:22:5b:f7:d9:bd:d7:f0:8a:c7:06:
         25:d0:91:7f:8a:9d:49:a4:cf:e0:e0:bc:d2:49:93:4e:4f:df:
         9c:cc:1a:ba:29:9e:5c:19:ba:b8:b9:7f:a8:a7:2a:4d:b5:de:
         65:17:70:d8:49:aa:37:3c:2a:79:20:ed:92:37:6b:25:1f:47:
         e0:32:b0:50:67:db:f1:92:f8:0d:33:1c:d0:10:bc:25:e5:63:
         d7:11:c4:52:62:61:41:05:0a:a8:27:79:34:63:92:ed:ec:bb:
         9e:4a:9e:ba:3d:61:58:20:1c:15:eb:4b:9b:a3:f0:77:80:be:
         8a:cb:7e:2c:73:70:b2:dd:71:1f:eb:36:95:3d:91:f3:b2:8d:
         59:69:43:72:cf:e2:87:70:56:8e:56:1f:1c:4e:df:ef:a6:d4:
         62:6f:69:e0:57:2b:85:f0:88:cc:b6:d5:c8:ad:26:65:44:f6:
         47:92:a5:3a:6a:53:cc:e6:c7:13:7a:c6:81:88:bc:a1:ff:a6:
         c7:63:10:91:7b:3e:37:00:5e:53:03:85:2a:a6:5e:5f:39:4e:
         d1:46:68:e4:88:81:23:87:11:ea:96:de:b2:de:3c:9a:34:ba:
         79:c8:34:06:91:13:bc:f5:8b:01:5e:b6:ae:1e:8d:d0:30:5e:
         2c:43:4a:d3
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUAJvCVmUiCBeuDuTOY74J/glDrpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDIxOTE3NDNaFw0yNTExMDExOTIyNDNaMDMxMTAvBgNV
BAMTKDdBM0JDMkVEQjExNENFREJEMjAzMUZFMENENzU3MTdGMzFGRjAwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLUtn6KNVVLo5wHf1gXCkMRko
Xft1leLq+jLY5WUf7PBq7ysj9SF6LVknQsKykg24Nh6LR5AGJVodQqw+OIHcA7O4
5H0YOHr8d8El7WjP7L0ZvdwMJEV1ItTGD6RC5hFhj3SeHrPS79d6fm/mS7uQqK0y
F9wF207CBW6Iyrk6N0B+017a05AToeLckrOD+29MS1Rh/f1tC7KD9s1qpFbqtZ+f
8jidMyFJLYky9mnrh/AOlY1edYHfYMZVDZdSDmW5U08mZHtV3f6vzCvmbTqaFyow
5wa159LsFUnZkHFGZBgRKS2Rqva45F2leqSv5D0dgPtyvZRUOhFbhQZ4c0JJAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6O8LtsRTO29ID
H+DNdXF/Mf8AFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ244
dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28ydzkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nu
OHU1blNSbTZvU3VWTm5rSmdoWUJjcllEWnNCZ2JLQzRDUlhzU1NvMnc5LzAvN0Ez
QkMyRURCMTE0Q0VEQkQyMDMxRkUwQ0Q3NTcxN0YzMUZGMDAxNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCteBMAwQCwIwwMA0EAgACMAcDBQAoBDysMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQP9DANBgkqhkiG9w0BAQsFAAOCAQEAqrk3SbH2
uyQiW/fZvdfwiscGJdCRf4qdSaTP4OC80kmTTk/fnMwauimeXBm6uLl/qKcqTbXe
ZRdw2EmqNzwqeSDtkjdrJR9H4DKwUGfb8ZL4DTMc0BC8JeVj1xHEUmJhQQUKqCd5
NGOS7ey7nkqeuj1hWCAcFetLm6Pwd4C+ist+LHNwst1xH+s2lT2R87KNWWlDcs/i
h3BWjlYfHE7f76bUYm9p4FcrhfCIzLbVyK0mZUT2R5KlOmpTzObHE3rGgYi8of+m
x2MQkXs+NwBeUwOFKqZeXzlO0UZo5IiBI4cR6pbest48mjS6ecg0BpETvPWLAV62
rh6N0DBeLENK0w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 00:23:18 2024 by rpki-client on console-fra.rpki-client.org