Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.cer
File:                     7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.cer (raw, json)
Hash identifier:          KO+RYpZVLnJXn19Kl96NfhHL0+0hnpcs56uIOKV30Qw=
Subject key identifier:   7E:12:7D:AC:41:60:F5:4B:8F:8A:3D:6C:93:70:1B:4C:86:43:1D:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D67142B7C83B773C5266EDCB446877121EFC81F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2024 15:34:45 +0000
Certificate not after:    Mon 07 Jul 2025 15:39:45 +0000
Subordinate resources:    AS: 265440
                          IP: 45.225.180.0/22
                          IP: 168.194.200.0/22
                          IP: 179.191.8.0/21
                          IP: 2804:342c::/32

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 11:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:14:2b:7c:83:b7:73:c5:26:6e:dc:b4:46:87:71:21:ef:c8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 15:34:45 2024 GMT
            Not After : Jul  7 15:39:45 2025 GMT
        Subject: CN=7E127DAC4160F54B8F8A3D6C93701B4C86431DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:97:70:9f:99:e1:8e:36:65:39:47:30:eb:
                    d3:d1:71:c4:f3:00:20:32:28:09:b0:34:19:50:2b:
                    f9:18:26:8b:93:5d:85:3e:81:15:96:a4:28:ae:fc:
                    9a:62:9d:c1:0c:5a:ac:c4:0d:db:36:f9:6a:7d:37:
                    e5:26:4e:5e:41:5c:0e:81:e9:13:e5:7d:ec:c5:cf:
                    88:62:da:77:35:4d:b0:4c:df:cf:cb:38:55:ca:d0:
                    24:5c:46:b8:f8:87:a7:f6:c5:53:04:0f:0b:17:bc:
                    a6:05:b0:6d:9b:f8:6a:da:a6:2f:d2:a4:69:67:e8:
                    f8:2d:57:bd:30:00:31:31:f6:fd:78:11:64:ff:09:
                    bc:4d:05:73:a5:c2:1f:e2:23:b9:25:46:33:75:09:
                    4d:29:95:2e:7c:5a:04:62:10:74:68:4d:d7:93:32:
                    37:31:53:9c:35:90:6b:0b:07:0d:ca:11:5f:aa:bb:
                    de:24:4c:b4:7e:f4:8b:d0:bf:45:0f:f5:0d:4b:37:
                    81:fb:2f:31:5c:60:28:68:4b:13:45:16:05:b2:38:
                    02:8e:b3:9a:56:a6:01:45:f7:93:aa:4c:b0:dd:0a:
                    7e:dc:f9:e7:ed:43:d3:0c:45:ac:99:aa:02:98:9a:
                    01:65:c4:52:c6:20:2d:81:dd:77:6e:48:f8:7a:78:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:12:7D:AC:41:60:F5:4B:8F:8A:3D:6C:93:70:1B:4C:86:43:1D:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.180.0/22
                  168.194.200.0/22
                  179.191.8.0/21
                IPv6:
                  2804:342c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265440

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:1d:9b:5c:de:6a:28:84:54:d5:79:3a:22:65:7a:fd:58:
         80:1b:f5:64:e5:3d:45:ea:ba:94:67:e8:d4:8a:64:e9:f5:3e:
         06:7e:7e:0d:cd:a0:9c:21:25:19:d3:c0:3d:2d:a4:8c:8a:22:
         cf:90:69:68:a2:31:60:c2:14:be:a5:72:7a:c4:54:1b:49:3f:
         22:d4:19:b4:25:17:56:a1:93:39:68:22:04:fa:f6:f0:08:6e:
         48:91:52:a0:76:9e:7f:6b:ce:4b:91:88:bc:5d:c6:34:cd:92:
         06:a8:a7:94:5a:db:d4:40:df:69:1b:12:d5:70:61:f7:06:77:
         e9:3e:d7:5a:99:f4:15:a8:ba:e8:47:07:b2:2c:be:e8:49:42:
         28:21:a6:68:b0:34:61:48:0d:88:8d:89:30:f2:b9:28:21:06:
         5c:1e:e9:3c:e1:b9:79:61:35:cd:ab:6b:ca:ec:fa:66:0d:b2:
         af:14:53:46:05:1d:82:f8:42:11:bf:c8:0c:28:ea:28:ed:51:
         19:c8:34:34:6a:3e:b3:e4:4a:08:c7:90:f4:d3:18:3a:4f:37:
         69:59:0e:08:cf:29:a3:63:93:8e:35:aa:f9:03:b2:70:fc:4a:
         c6:95:d9:0d:15:82:0b:0c:d2:47:47:67:ea:e3:37:27:2f:83:
         d4:89:ac:3c
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUPWcUK3yDt3PFJm7ctEaHcSHvyB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDgxNTM0NDVaFw0yNTA3MDcxNTM5NDVaMDMxMTAvBgNV
BAMTKDdFMTI3REFDNDE2MEY1NEI4RjhBM0Q2QzkzNzAxQjRDODY0MzFEQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEJdwn5nhjjZlOUcw69PRccTz
ACAyKAmwNBlQK/kYJouTXYU+gRWWpCiu/JpincEMWqzEDds2+Wp9N+UmTl5BXA6B
6RPlfezFz4hi2nc1TbBM38/LOFXK0CRcRrj4h6f2xVMEDwsXvKYFsG2b+Grapi/S
pGln6PgtV70wADEx9v14EWT/CbxNBXOlwh/iI7klRjN1CU0plS58WgRiEHRoTdeT
MjcxU5w1kGsLBw3KEV+qu94kTLR+9IvQv0UP9Q1LN4H7LzFcYChoSxNFFgWyOAKO
s5pWpgFF95OqTLDdCn7c+eftQ9MMRayZqgKYmgFlxFLGIC2B3XduSPh6eP2ZAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+En2sQWD1S4+K
PWyTcBtMhkMdrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlc2
MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlOelYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZX
NjIxWmMzU3U1VXV1eGJTeU1NOUFBcDl2cTZyNHN5aW51dXExQWV5TnpWLzAvN0Ux
MjdEQUM0MTYwRjU0QjhGOEEzRDZDOTM3MDFCNEM4NjQzMURBRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLeG0AwQCqMLIAwQDs78IMA0EAgACMAcDBQAoBDQs
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQM4DANBgkqhkiG9w0BAQsFAAOCAQEA
c7Ydm1zeaiiEVNV5OiJlev1YgBv1ZOU9Req6lGfo1Ipk6fU+Bn5+Dc2gnCElGdPA
PS2kjIoiz5BpaKIxYMIUvqVyesRUG0k/ItQZtCUXVqGTOWgiBPr28AhuSJFSoHae
f2vOS5GIvF3GNM2SBqinlFrb1EDfaRsS1XBh9wZ36T7XWpn0Fai66EcHsiy+6ElC
KCGmaLA0YUgNiI2JMPK5KCEGXB7pPOG5eWE1zatryuz6Zg2yrxRTRgUdgvhCEb/I
DCjqKO1RGcg0NGo+s+RKCMeQ9NMYOk83aVkOCM8po2OTjjWq+QOycPxKxpXZDRWC
CwzSR0dn6uM3Jy+D1ImsPA==
-----END CERTIFICATE-----
Generated at Sun Sep 1 13:39:40 2024 by rpki-client on console-ams.rpki-client.org