Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer
File:                     7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer (raw, json)
Hash identifier:          k6NwYuaUQRt/0X98Qb173+Jss3xpM3sLW30CoLq9XFc=
Subject key identifier:   7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51956E8AA32EAE4690239D140D1EBADF4A8547C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:11:02 +0000
Certificate not after:    Wed 02 Apr 2025 19:16:02 +0000
Subordinate resources:    AS: 265328
                          IP: 168.181.64.0/22
                          IP: 2804:2e28::/32

Validation:               Failed, certificate revoked on Sat 04 May 2024 19:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:95:6e:8a:a3:2e:ae:46:90:23:9d:14:0d:1e:ba:df:4a:85:47:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:11:02 2024 GMT
            Not After : Apr  2 19:16:02 2025 GMT
        Subject: CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:7e:59:9f:13:a3:de:a3:72:c0:0b:78:6f:
                    83:43:49:a7:9d:e5:81:05:b3:de:87:e6:a1:26:bb:
                    5f:2b:25:09:89:52:34:93:d1:6d:68:9b:b9:f0:15:
                    6f:05:7f:4d:78:fa:14:d6:23:ca:ce:d5:8a:2c:36:
                    b8:5a:ec:81:36:fc:43:ce:df:86:dd:1c:1b:ed:d6:
                    23:15:42:db:9b:56:cb:d4:43:d2:8a:c7:d2:73:50:
                    fe:8b:f6:73:ce:15:18:39:f8:34:09:e6:b1:ef:df:
                    30:06:fd:3b:61:56:dd:2d:dd:38:88:7d:37:7d:cc:
                    39:26:cb:03:91:31:35:07:dd:ee:69:77:ea:d2:36:
                    2b:cf:f2:82:c4:b5:4e:10:c3:45:25:13:b8:71:e1:
                    3e:03:a5:26:e1:d3:b3:39:b0:af:1f:bd:c7:20:74:
                    09:04:37:8d:8e:e7:26:ff:0c:61:7b:d5:24:58:da:
                    3d:84:b5:79:02:34:7d:3f:4d:aa:31:98:1e:34:5f:
                    aa:49:3d:a9:64:ca:73:72:29:60:d3:91:7b:3d:de:
                    8c:81:fc:42:f9:08:10:0e:11:27:23:d6:55:21:09:
                    d3:06:a0:ea:3f:0b:ed:ab:c9:e6:be:1f:00:c7:23:
                    f8:3f:30:1b:9a:7e:84:0e:9f:5e:94:3f:cb:77:d8:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22
                IPv6:
                  2804:2e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265328

    Signature Algorithm: sha256WithRSAEncryption
         d0:21:bf:f8:76:ab:b5:33:2f:57:21:22:20:47:15:2b:45:1e:
         7f:86:6a:28:c1:91:a9:ec:ef:65:c6:e8:57:31:cf:45:69:21:
         e9:da:14:bb:1c:f7:64:84:3e:68:0c:0f:fa:57:8c:3f:b4:d0:
         fe:90:bc:4c:f2:12:98:bf:60:6f:76:c4:a0:cf:c2:04:b8:e5:
         dc:a4:5c:a1:39:6f:40:ee:fe:02:7c:32:be:75:be:bc:25:45:
         65:04:aa:04:bb:61:24:bb:80:c9:a4:f1:69:2c:23:f5:68:2d:
         28:2b:b8:78:01:94:2b:d8:03:09:7f:97:af:d8:79:c6:54:c8:
         03:53:17:70:e2:33:28:54:03:f1:71:9b:05:90:40:01:f0:71:
         60:7e:5b:77:fb:b7:3a:b7:c5:79:85:31:a5:b9:9c:f9:73:4f:
         30:ed:e5:10:0c:ea:0e:68:5f:df:30:0e:d3:8e:c1:55:2a:01:
         99:7b:8f:97:51:08:52:b2:d2:4d:0d:be:5c:34:36:01:c6:9b:
         6a:16:95:2b:e9:8c:e4:c2:cd:3e:10:7f:d8:7f:eb:42:b2:44:
         0f:81:1c:c2:59:5a:a4:12:f6:5a:2c:ab:f0:1b:89:0d:e1:23:
         1d:f4:71:3b:0e:dc:7c:d5:e4:cb:b0:1b:3f:59:95:d8:44:c1:
         20:41:a9:c3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUZVuiqMurkaQI50UDR6630qFR8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTExMDJaFw0yNTA0MDIxOTE2MDJaMDMxMTAvBgNV
BAMTKDdGNEI4OEI1QkVEQkNBQTVGRTI1RjA0ODFDNjlGQ0M3RUQ3MDFDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHn5ZnxOj3qNywAt4b4NDSaed
5YEFs96H5qEmu18rJQmJUjST0W1om7nwFW8Ff014+hTWI8rO1YosNrha7IE2/EPO
34bdHBvt1iMVQtubVsvUQ9KKx9JzUP6L9nPOFRg5+DQJ5rHv3zAG/TthVt0t3TiI
fTd9zDkmywORMTUH3e5pd+rSNivP8oLEtU4Qw0UlE7hx4T4DpSbh07M5sK8fvccg
dAkEN42O5yb/DGF71SRY2j2EtXkCNH0/TaoxmB40X6pJPalkynNyKWDTkXs93oyB
/EL5CBAOEScj1lUhCdMGoOo/C+2ryea+HwDHI/g/MBuafoQOn16UP8t32C8TAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/S4i1vtvKpf4l
8EgcafzH7XAcEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVRZ
Nkc5a0tTWVZicVBzUmtrYnhuZEdldjVDbUFvZXRIZThoODNLVFFFelUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlU
WTZHOWtLU1lWYnFQc1Jra2J4bmRHZXY1Q21Bb2V0SGU4aDgzS1RRRXpVLzEvN0Y0
Qjg4QjVCRURCQ0FBNUZFMjVGMDQ4MUM2OUZDQzdFRDcwMUMxMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqLVAMA0EAgACMAcDBQAoBC4oMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMcDANBgkqhkiG9w0BAQsFAAOCAQEA0CG/+HartTMvVyEi
IEcVK0Uef4ZqKMGRqezvZcboVzHPRWkh6doUuxz3ZIQ+aAwP+leMP7TQ/pC8TPIS
mL9gb3bEoM/CBLjl3KRcoTlvQO7+AnwyvnW+vCVFZQSqBLthJLuAyaTxaSwj9Wgt
KCu4eAGUK9gDCX+Xr9h5xlTIA1MXcOIzKFQD8XGbBZBAAfBxYH5bd/u3OrfFeYUx
pbmc+XNPMO3lEAzqDmhf3zAO047BVSoBmXuPl1EIUrLSTQ2+XDQ2AcabahaVK+mM
5MLNPhB/2H/rQrJED4EcwllapBL2Wiyr8BuJDeEjHfRxOw7cfNXky7AbP1mV2ETB
IEGpww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org