Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F80439E0AFC73FFC1C29E5F0887A89D62E83610.cer
File:                     7F80439E0AFC73FFC1C29E5F0887A89D62E83610.cer (raw, json)
Hash identifier:          gWJuUn44EFsCndQpdsEDOkxpH2o/JprRPfO1o+zxKjY=
Subject key identifier:   7F:80:43:9E:0A:FC:73:FF:C1:C2:9E:5F:08:87:A8:9D:62:E8:36:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AD5A275AE3C5E5A2D563F308671BFBC49E99D42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/7F80439E0AFC73FFC1C29E5F0887A89D62E83610.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 May 2024 18:52:48 +0000
Certificate not after:    Fri 09 May 2025 18:57:48 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32

Validation:               Failed, certificate revoked on Tue 14 May 2024 21:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d5:a2:75:ae:3c:5e:5a:2d:56:3f:30:86:71:bf:bc:49:e9:9d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 10 18:52:48 2024 GMT
            Not After : May  9 18:57:48 2025 GMT
        Subject: CN=7F80439E0AFC73FFC1C29E5F0887A89D62E83610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:e8:79:ea:31:9d:72:fd:26:8f:41:df:20:
                    f8:5d:64:19:79:c2:d7:9b:a5:f9:97:5d:88:01:51:
                    a0:8f:09:78:2f:cd:1e:6c:e2:62:79:49:86:fa:b1:
                    4a:86:01:37:19:83:14:4e:5a:ce:8b:91:a3:c2:37:
                    ba:db:90:28:6f:e6:ed:6e:88:d8:26:59:50:14:62:
                    44:f9:84:36:74:f8:9d:02:7a:2b:9c:a4:4f:f6:41:
                    82:f9:84:1a:15:c9:06:de:e3:e4:5c:66:6d:4c:6c:
                    ea:82:37:34:e7:ea:e3:17:00:d5:62:f0:b3:cc:9d:
                    8c:06:ed:57:50:ff:50:42:31:3f:48:33:09:f3:73:
                    af:03:14:7e:e8:46:3d:a9:6c:3d:68:b7:34:8f:3d:
                    73:c8:ca:2f:22:7a:66:10:16:bf:80:72:a8:ad:a6:
                    ed:a0:bf:cf:95:26:dc:b8:c7:bd:5b:f4:d2:1d:65:
                    a5:22:0a:4d:0f:3f:7f:8a:ee:64:20:68:22:e0:95:
                    a0:71:b7:0e:e6:08:6f:88:7f:20:49:4a:4c:ea:41:
                    02:50:ac:1e:df:08:6e:72:59:13:4c:90:76:cf:8e:
                    3f:29:40:f9:54:a8:51:ab:dd:aa:73:81:b1:5f:9c:
                    eb:86:a6:6d:af:23:06:2a:02:56:9f:57:dd:2f:b6:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:80:43:9E:0A:FC:73:FF:C1:C2:9E:5F:08:87:A8:9D:62:E8:36:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/7F80439E0AFC73FFC1C29E5F0887A89D62E83610.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         80:13:da:2e:52:2b:76:e3:26:46:af:83:af:ce:f6:7e:19:e5:
         4c:7a:73:9e:de:97:07:df:a1:0a:6a:1d:5e:ac:83:8a:f5:f8:
         22:51:49:57:ce:37:7e:a1:82:b1:54:08:57:dd:76:99:46:20:
         ba:df:f7:e1:45:cd:6f:ac:d4:a1:20:db:17:bd:e0:fd:9a:7d:
         69:cb:43:57:9e:fc:e5:d1:36:bd:24:8f:26:34:4b:19:3f:4c:
         1c:a2:9a:fb:45:aa:ea:b4:fc:13:b5:b1:d6:81:f8:95:98:da:
         e6:3c:51:3b:97:5e:03:01:84:ba:49:c2:59:85:12:de:78:a1:
         f4:81:7d:e8:63:af:92:ce:d1:39:40:f3:fd:78:a1:93:a5:09:
         29:83:f1:0e:ca:bf:89:1c:c2:40:5c:2b:c4:74:54:31:fd:22:
         5a:f2:1f:7e:52:84:a1:b1:3c:1c:1b:f8:09:81:54:50:93:cb:
         fb:3f:10:b6:eb:c9:26:c3:bc:90:eb:3e:45:fb:71:61:fe:e9:
         31:26:04:be:28:ee:79:8d:5f:4d:2a:f5:c1:f5:91:e6:4c:a0:
         3e:83:86:f8:2a:35:2b:b3:8b:58:9d:48:f9:2f:6e:6f:8c:2e:
         bb:85:35:72:34:8a:43:21:c0:79:c5:f9:e6:cd:fe:c5:81:08:
         7a:d4:5e:68
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWtWida48XlotVj8whnG/vEnpnUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MTAxODUyNDhaFw0yNTA1MDkxODU3NDhaMDMxMTAvBgNV
BAMTKDdGODA0MzlFMEFGQzczRkZDMUMyOUU1RjA4ODdBODlENjJFODM2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVeeh56jGdcv0mj0HfIPhdZBl5
wtebpfmXXYgBUaCPCXgvzR5s4mJ5SYb6sUqGATcZgxROWs6LkaPCN7rbkChv5u1u
iNgmWVAUYkT5hDZ0+J0CeiucpE/2QYL5hBoVyQbe4+RcZm1MbOqCNzTn6uMXANVi
8LPMnYwG7VdQ/1BCMT9IMwnzc68DFH7oRj2pbD1otzSPPXPIyi8iemYQFr+Acqit
pu2gv8+VJty4x71b9NIdZaUiCk0PP3+K7mQgaCLglaBxtw7mCG+IfyBJSkzqQQJQ
rB7fCG5yWRNMkHbPjj8pQPlUqFGr3apzgbFfnOuGpm2vIwYqAlafV90vtieLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/gEOeCvxz/8HC
nl8Ih6idYug2EDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkwx
NjJpTmlmU3ZBM2prY1dCclh0dm5hRk5SUEZNQ040aVJRdnBURUhQNmcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JM
MTYyaU5pZlN2QTNqa2NXQnJYdHZuYUZOUlBGTUNONGlSUXZwVEVIUDZnLzAvN0Y4
MDQzOUUwQUZDNzNGRkMxQzI5RTVGMDg4N0E4OUQ2MkU4MzYxMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCinnQMA0EAgACMAcDBQAoBCXQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCADANBgkqhkiG9w0BAQsFAAOCAQEAgBPaLlIrduMmRq+D
r872fhnlTHpznt6XB9+hCmodXqyDivX4IlFJV843fqGCsVQIV912mUYgut/34UXN
b6zUoSDbF73g/Zp9actDV5785dE2vSSPJjRLGT9MHKKa+0Wq6rT8E7Wx1oH4lZja
5jxRO5deAwGEuknCWYUS3nih9IF96GOvks7ROUDz/Xihk6UJKYPxDsq/iRzCQFwr
xHRUMf0iWvIfflKEobE8HBv4CYFUUJPL+z8QtuvJJsO8kOs+RftxYf7pMSYEviju
eY1fTSr1wfWR5kygPoOG+Co1K7OLWJ1I+S9ub4wuu4U1cjSKQyHAecX55s3+xYEI
etReaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org