Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.cer
File:                     8165B54E8405655BA46AF4CE440711AE717F2BE5.cer (raw, json)
Hash identifier:          YeZYNMTIrnW+TMKOiAyZGfEnWlHUq2CPb+ik2bAao9U=
Subject key identifier:   81:65:B5:4E:84:05:65:5B:A4:6A:F4:CE:44:07:11:AE:71:7F:2B:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18203FE8D04A8DCCE8B9075A33D03F5323214558
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Apr 2024 15:35:40 +0000
Certificate not after:    Mon 14 Apr 2025 15:40:40 +0000
Subordinate resources:    AS: 273431
                          IP: 186.227.76.0/22
                          IP: 191.7.0.0/23
                          IP: 2804:8e84::/32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 11:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:20:3f:e8:d0:4a:8d:cc:e8:b9:07:5a:33:d0:3f:53:23:21:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 15 15:35:40 2024 GMT
            Not After : Apr 14 15:40:40 2025 GMT
        Subject: CN=8165B54E8405655BA46AF4CE440711AE717F2BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:62:52:6f:40:b0:a8:0f:a2:94:12:21:57:
                    28:a0:0f:c6:cc:6c:31:c2:13:93:73:db:0c:97:7e:
                    10:16:78:3c:76:0f:c8:23:03:ad:c5:c8:3b:c6:51:
                    7b:74:ad:e9:2e:4b:80:c4:ab:7a:71:70:f6:f2:30:
                    c7:df:89:7e:f8:06:ae:fd:df:5a:bf:a1:43:c5:bb:
                    4d:b3:b9:b6:09:37:ae:e1:c8:ef:29:58:2c:24:26:
                    44:95:7a:7c:5a:8f:7f:10:05:f8:7f:4b:c5:d4:44:
                    08:c5:7d:eb:13:7b:9b:0e:ec:37:73:29:20:63:5b:
                    51:d2:7f:39:44:96:cd:83:12:3d:47:b4:cc:d5:c2:
                    59:60:fc:9a:97:b1:b4:cf:58:f6:b1:34:70:a7:ee:
                    74:05:51:79:f5:f6:ec:ee:84:e7:06:d2:a1:b3:0e:
                    e2:61:4c:61:77:c6:67:e2:c4:ac:23:42:ca:84:b3:
                    ec:c0:f6:35:54:01:15:1e:81:84:c9:13:f4:5a:65:
                    fc:57:24:78:2f:ad:0b:0e:ba:38:b9:8e:32:28:76:
                    f0:32:a4:10:eb:b0:72:b9:fb:41:d8:e5:18:76:c2:
                    1b:97:40:fd:a9:11:b8:1c:ba:75:95:d8:4b:c6:dc:
                    fd:97:91:68:14:f9:7d:69:4f:26:97:eb:fd:ee:e3:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:65:B5:4E:84:05:65:5B:A4:6A:F4:CE:44:07:11:AE:71:7F:2B:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/22
                  191.7.0.0/23
                IPv6:
                  2804:8e84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273431

    Signature Algorithm: sha256WithRSAEncryption
         b2:7a:db:f8:f2:cb:6c:30:77:71:1f:4b:c4:ec:77:48:c6:8f:
         d1:b5:2d:ae:d2:68:01:5c:e6:22:9d:cb:8b:7f:cf:02:ff:da:
         9d:20:38:61:d5:40:18:a3:c4:f6:1c:1f:46:da:78:f7:9e:07:
         3a:e7:26:24:95:14:b9:99:df:36:10:26:1e:f3:57:c9:71:4d:
         47:62:d7:e3:c4:5f:37:68:97:5f:ee:24:29:e1:9e:08:c9:6d:
         0c:cb:cc:c4:e0:70:99:46:1d:0b:a9:58:01:e5:23:7b:dc:0b:
         5b:df:10:4c:af:05:f4:98:63:5b:02:7e:61:0a:e0:99:52:8a:
         73:34:2e:8d:13:fc:38:09:91:9a:f2:e1:d8:6d:80:d0:64:0a:
         73:ef:ae:02:85:12:c1:9e:c9:d1:41:b9:6c:81:be:ee:07:67:
         c1:75:8e:aa:01:c4:fc:60:39:be:0f:ad:c6:5d:c7:1b:51:6e:
         b5:0d:1d:05:63:c5:dd:77:9e:e1:9b:83:fb:45:a0:33:6b:10:
         48:19:e0:68:8b:17:b5:d1:2e:0a:ce:f7:5d:77:df:8d:b0:f1:
         32:84:48:7c:5a:47:3e:21:0c:ca:ad:25:29:14:35:46:57:83:
         67:39:0b:bf:34:b7:6a:4f:64:0d:3a:0f:a1:50:22:00:dc:50:
         97:23:c2:46
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUGCA/6NBKjczouQdaM9A/UyMhRVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTUxNTM1NDBaFw0yNTA0MTQxNTQwNDBaMDMxMTAvBgNV
BAMTKDgxNjVCNTRFODQwNTY1NUJBNDZBRjRDRTQ0MDcxMUFFNzE3RjJCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XmJSb0CwqA+ilBIhVyigD8bM
bDHCE5Nz2wyXfhAWeDx2D8gjA63FyDvGUXt0rekuS4DEq3pxcPbyMMffiX74Bq79
31q/oUPFu02zubYJN67hyO8pWCwkJkSVenxaj38QBfh/S8XURAjFfesTe5sO7Ddz
KSBjW1HSfzlEls2DEj1HtMzVwllg/JqXsbTPWPaxNHCn7nQFUXn19uzuhOcG0qGz
DuJhTGF3xmfixKwjQsqEs+zA9jVUARUegYTJE/RaZfxXJHgvrQsOuji5jjIodvAy
pBDrsHK5+0HY5Rh2whuXQP2pEbgcunWV2EvG3P2XkWgU+X1pTyaX6/3u439DAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBZbVOhAVlW6Rq
9M5EBxGucX8r5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGlw
azRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRp
cGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzEvODE2
NUI1NEU4NDA1NjU1QkE0NkFGNENFNDQwNzExQUU3MTdGMkJFNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCuuNMAwQBvwcAMA0EAgACMAcDBQAoBI6EMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQsFzANBgkqhkiG9w0BAQsFAAOCAQEAsnrb+PLL
bDB3cR9LxOx3SMaP0bUtrtJoAVzmIp3Li3/PAv/anSA4YdVAGKPE9hwfRtp4954H
OucmJJUUuZnfNhAmHvNXyXFNR2LX48RfN2iXX+4kKeGeCMltDMvMxOBwmUYdC6lY
AeUje9wLW98QTK8F9JhjWwJ+YQrgmVKKczQujRP8OAmRmvLh2G2A0GQKc++uAoUS
wZ7J0UG5bIG+7gdnwXWOqgHE/GA5vg+txl3HG1FutQ0dBWPF3Xee4ZuD+0WgM2sQ
SBngaIsXtdEuCs73XXffjbDxMoRIfFpHPiEMyq0lKRQ1RleDZzkLvzS3ak9kDToP
oVAiANxQlyPCRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org