Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.cer
File:                     7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.cer (raw, json)
Hash identifier:          KR0AqjM/iktzaZBlnADUbFw018Oc0ohVbyJtwd+wk6c=
Subject key identifier:   7B:A0:1F:BB:A6:AD:0B:EA:E3:37:4B:8C:E7:05:99:32:E3:14:AB:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2427D814302B033A3E83A9E75BC6742613F3C473
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:04:24 +0000
Certificate not after:    Thu 03 Apr 2025 08:09:24 +0000
Subordinate resources:    AS: 268763
                          IP: 45.172.104.0/22
                          IP: 2804:5a4c::/32

Validation:               Failed, certificate revoked on Fri 17 May 2024 21:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:27:d8:14:30:2b:03:3a:3e:83:a9:e7:5b:c6:74:26:13:f3:c4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:04:24 2024 GMT
            Not After : Apr  3 08:09:24 2025 GMT
        Subject: CN=7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:83:21:cb:ca:eb:12:33:2a:c1:0e:1d:32:
                    9d:c6:a3:7e:f6:03:50:3d:c3:5e:d2:61:a4:05:64:
                    b7:6b:75:83:f9:57:e8:15:d1:b0:ab:12:36:38:95:
                    2b:1d:93:34:1e:ad:e6:69:23:ab:0e:6d:5b:48:ab:
                    50:99:0f:82:47:51:f2:8a:39:35:84:40:7c:d7:60:
                    b7:2a:8d:65:11:c6:06:75:84:7d:99:26:14:ee:12:
                    cb:e5:f9:57:d0:06:4b:ee:f9:51:aa:5c:7d:50:6d:
                    51:46:ba:81:2b:8c:cd:3a:45:52:3c:a8:9b:70:66:
                    f7:4f:f7:3c:74:30:ea:1e:bf:d0:73:d7:33:5c:7b:
                    b6:92:22:55:aa:1e:64:59:0f:09:f6:6e:c9:8b:d9:
                    cf:9f:f7:14:cb:1d:7f:0f:89:e1:87:66:38:0d:cc:
                    d0:9f:ce:0a:15:e4:33:29:d1:04:db:39:cd:b6:85:
                    01:36:04:de:92:44:14:d7:03:f5:35:be:c0:d9:96:
                    79:66:13:2f:e0:06:d9:33:57:d3:5b:4a:59:a0:ce:
                    a6:0c:af:41:e7:22:59:8f:05:df:0d:c3:fd:5f:9c:
                    e2:0c:b7:42:8c:0e:bb:41:21:28:0a:cb:0f:82:08:
                    63:28:90:3a:c6:d6:c9:d2:13:0d:b9:56:6d:7e:5c:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:A0:1F:BB:A6:AD:0B:EA:E3:37:4B:8C:E7:05:99:32:E3:14:AB:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22
                IPv6:
                  2804:5a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268763

    Signature Algorithm: sha256WithRSAEncryption
         ca:e6:b4:0a:c6:ec:6c:d0:16:7d:d7:3a:f5:6b:8f:4b:c9:50:
         a1:35:c6:dc:4b:2c:57:18:32:0f:7a:58:f2:41:a0:19:1a:b1:
         92:d1:77:3b:2a:c8:bc:d4:57:8d:fe:13:62:df:10:44:ab:52:
         79:38:18:d9:a4:c8:06:11:9c:59:69:2e:00:18:bc:12:56:67:
         20:16:fc:48:cb:cd:df:a2:66:cc:d1:30:5b:65:8f:31:15:0d:
         c9:51:db:8b:a3:be:78:f5:85:d3:e4:63:ae:26:cb:e3:f1:b5:
         a0:ec:9a:08:08:aa:9e:b7:fb:ad:41:7b:2b:1f:6f:35:5b:e8:
         03:31:9b:76:c0:b7:28:9f:61:c1:7a:7b:21:13:b9:84:7a:5d:
         59:0b:c3:5e:a4:8e:cf:93:c1:ec:a0:6d:e3:cc:6c:f9:ac:f9:
         45:0d:90:92:f7:3a:bc:9d:9d:cb:91:61:be:eb:9b:19:8d:3f:
         47:4f:cc:51:33:c2:ae:54:2b:dc:37:35:b8:8c:a9:17:4e:8a:
         6f:63:28:4d:e5:41:6b:f9:26:2a:aa:90:eb:ed:42:5d:61:03:
         bc:e8:10:ac:bf:02:5e:51:ad:ff:f8:eb:4d:13:79:59:95:a4:
         d0:88:58:a3:9c:13:57:a7:64:ec:46:a4:7d:b0:86:dd:5d:45:
         de:57:1f:70
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJCfYFDArAzo+g6nnW8Z0JhPzxHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODA0MjRaFw0yNTA0MDMwODA5MjRaMDMxMTAvBgNV
BAMTKDdCQTAxRkJCQTZBRDBCRUFFMzM3NEI4Q0U3MDU5OTMyRTMxNEFCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2loMhy8rrEjMqwQ4dMp3Go372
A1A9w17SYaQFZLdrdYP5V+gV0bCrEjY4lSsdkzQereZpI6sObVtIq1CZD4JHUfKK
OTWEQHzXYLcqjWURxgZ1hH2ZJhTuEsvl+VfQBkvu+VGqXH1QbVFGuoErjM06RVI8
qJtwZvdP9zx0MOoev9Bz1zNce7aSIlWqHmRZDwn2bsmL2c+f9xTLHX8PieGHZjgN
zNCfzgoV5DMp0QTbOc22hQE2BN6SRBTXA/U1vsDZlnlmEy/gBtkzV9NbSlmgzqYM
r0HnIlmPBd8Nw/1fnOIMt0KMDrtBISgKyw+CCGMokDrG1snSEw25Vm1+XEgNAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7oB+7pq0L6uM3
S4znBZky4xSrljAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEVi
QmlqeDRXQzRmd1ZvN0d6UGlrWEV1a3pyd2V0WGkxVlJvQmhyWmlCcGkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRF
YkJpang0V0M0ZndWbzdHelBpa1hFdWt6cndldFhpMVZSb0JoclppQnBpLzEvN0JB
MDFGQkJBNkFEMEJFQUUzMzc0QjhDRTcwNTk5MzJFMzE0QUI5Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaxoMA0EAgACMAcDBQAoBFpMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZ2zANBgkqhkiG9w0BAQsFAAOCAQEAyua0CsbsbNAWfdc6
9WuPS8lQoTXG3EssVxgyD3pY8kGgGRqxktF3OyrIvNRXjf4TYt8QRKtSeTgY2aTI
BhGcWWkuABi8ElZnIBb8SMvN36JmzNEwW2WPMRUNyVHbi6O+ePWF0+RjribL4/G1
oOyaCAiqnrf7rUF7Kx9vNVvoAzGbdsC3KJ9hwXp7IRO5hHpdWQvDXqSOz5PB7KBt
48xs+az5RQ2Qkvc6vJ2dy5FhvuubGY0/R0/MUTPCrlQr3Dc1uIypF06Kb2MoTeVB
a/kmKqqQ6+1CXWEDvOgQrL8CXlGt//jrTRN5WZWk0IhYo5wTV6dk7EakfbCG3V1F
3lcfcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org