Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer
File:                     850B9B1F006AF477CB0A41524901057E62779AF9.cer (raw, json)
Hash identifier:          u4kTNQ0jVrTZe2PLxQpOtDDBtBRYmWEk2g2LkeuNbS8=
Subject key identifier:   85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55445C1EBC642424B1B2528FC334C6E4AF9B74EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Oct 2024 18:05:07 +0000
Certificate not after:    Mon 20 Oct 2025 18:10:07 +0000
Subordinate resources:    AS: 268247
                          IP: 45.236.216.0/22
                          IP: 2804:4e38::/32

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 01:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:5c:1e:bc:64:24:24:b1:b2:52:8f:c3:34:c6:e4:af:9b:74:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 21 18:05:07 2024 GMT
            Not After : Oct 20 18:10:07 2025 GMT
        Subject: CN=850B9B1F006AF477CB0A41524901057E62779AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:d5:f8:d2:8d:a2:6b:f5:6b:85:27:b8:6a:
                    9d:b3:31:f3:bf:0c:ad:b3:e7:67:14:8c:c1:bd:cc:
                    0b:90:d1:aa:80:7d:17:2e:ff:f3:37:94:f1:3e:40:
                    98:21:0d:c2:e0:57:0d:66:67:7c:3d:0f:5a:af:29:
                    08:b1:c8:30:1b:1a:12:68:aa:b3:b6:b7:b5:1c:0c:
                    7c:70:85:57:0a:bb:30:a4:84:17:98:ad:5c:11:bf:
                    99:ae:78:5b:92:3e:c7:b9:9b:f9:9e:2c:08:a3:e4:
                    37:20:59:8d:75:de:73:b4:ef:d1:0c:a6:77:b0:7c:
                    ae:80:31:19:02:1a:21:f5:ba:e5:c3:48:a2:be:fc:
                    dc:31:cf:b9:24:dd:c9:55:84:d6:e4:03:90:e3:38:
                    5e:34:cf:69:15:2b:a6:a2:c8:43:9f:6e:5a:a5:ff:
                    33:62:a8:a6:82:b6:66:28:83:d6:2e:b2:1a:65:81:
                    86:32:cb:bc:bf:82:b7:d1:0a:bb:f6:c9:7c:e9:07:
                    ae:76:16:8c:5d:be:ab:a2:c4:c5:ba:de:b3:2a:0c:
                    be:c8:75:f0:ae:f0:be:ab:bc:e7:d8:4c:4f:32:be:
                    83:b0:b9:99:bc:1e:b5:9a:9a:cd:4d:3f:82:5f:e0:
                    86:5e:20:ef:14:a0:09:33:c9:bd:61:22:b7:be:8d:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.216.0/22
                IPv6:
                  2804:4e38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268247

    Signature Algorithm: sha256WithRSAEncryption
         56:53:82:c9:2a:42:89:49:45:49:62:38:a4:27:60:3b:da:91:
         de:f2:98:b7:b9:da:a2:64:6f:b0:e0:17:06:b6:85:28:43:eb:
         2e:14:30:18:bd:f8:15:d7:11:5f:3a:68:b6:2e:b6:b8:80:cc:
         02:28:b2:f8:65:bc:b8:7b:38:d2:ca:5f:e7:15:09:31:13:f5:
         36:e0:3e:88:b9:c3:7a:c0:59:b3:bc:62:1f:9b:f8:48:72:ad:
         40:92:98:3b:bd:b7:26:a8:fb:06:e2:5e:3c:c4:1c:d6:78:ca:
         18:31:39:c4:69:fe:3a:6a:b0:4c:61:32:9e:57:52:ca:f2:00:
         13:12:67:4c:51:b5:cb:78:08:53:2a:3c:bc:ae:ec:1b:41:98:
         b7:4c:e6:2f:15:b5:a1:ef:48:e2:18:9a:d0:af:2d:71:16:77:
         1a:7a:a0:da:e9:d3:cb:8e:f8:18:94:14:bc:7b:58:48:34:6c:
         78:f3:2b:6e:36:59:a3:40:73:60:68:e1:ca:fd:ef:0a:5b:88:
         13:7b:21:fe:6d:65:6a:b0:77:f2:0b:d1:8f:73:ce:60:a3:a7:
         3d:38:f6:2c:f3:08:e8:76:1f:da:40:8a:1f:a1:ca:8a:ec:bc:
         41:c5:8f:ab:aa:f7:1c:80:3e:6d:bd:0f:f0:c1:a4:43:4d:2a:
         64:97:cf:f5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVURcHrxkJCSxslKPwzTG5K+bdOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMjExODA1MDdaFw0yNTEwMjAxODEwMDdaMDMxMTAvBgNV
BAMTKDg1MEI5QjFGMDA2QUY0NzdDQjBBNDE1MjQ5MDEwNTdFNjI3NzlBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+tX40o2ia/VrhSe4ap2zMfO/
DK2z52cUjMG9zAuQ0aqAfRcu//M3lPE+QJghDcLgVw1mZ3w9D1qvKQixyDAbGhJo
qrO2t7UcDHxwhVcKuzCkhBeYrVwRv5mueFuSPse5m/meLAij5DcgWY113nO079EM
pnewfK6AMRkCGiH1uuXDSKK+/Nwxz7kk3clVhNbkA5DjOF40z2kVK6aiyEOfblql
/zNiqKaCtmYog9YushplgYYyy7y/grfRCrv2yXzpB652FoxdvquixMW63rMqDL7I
dfCu8L6rvOfYTE8yvoOwuZm8HrWams1NP4Jf4IZeIO8UoAkzyb1hIre+jcyLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFC5sfAGr0d8sK
QVJJAQV+Ynea+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1p6
VmVLbkhobmRwWDhLNUdMd1NjQnFhZmF2Mlo1bUw5dmM0NE1kdFFBcTUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Na
elZlS25IaG5kcFg4SzVHTHdTY0JxYWZhdjJaNW1MOXZjNDRNZHRRQXE1LzAvODUw
QjlCMUYwMDZBRjQ3N0NCMEE0MTUyNDkwMTA1N0U2Mjc3OUFGOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLezYMA0EAgACMAcDBQAoBE44MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQX1zANBgkqhkiG9w0BAQsFAAOCAQEAVlOCySpCiUlFSWI4
pCdgO9qR3vKYt7naomRvsOAXBraFKEPrLhQwGL34FdcRXzpoti62uIDMAiiy+GW8
uHs40spf5xUJMRP1NuA+iLnDesBZs7xiH5v4SHKtQJKYO723Jqj7BuJePMQc1njK
GDE5xGn+OmqwTGEynldSyvIAExJnTFG1y3gIUyo8vK7sG0GYt0zmLxW1oe9I4hia
0K8tcRZ3Gnqg2unTy474GJQUvHtYSDRsePMrbjZZo0BzYGjhyv3vCluIE3sh/m1l
arB38gvRj3POYKOnPTj2LPMI6HYf2kCKH6HKiuy8QcWPq6r3HIA+bb0P8MGkQ00q
ZJfP9Q==
-----END CERTIFICATE-----
Generated at Fri Nov 1 04:03:57 2024 by rpki-client on console-fra.rpki-client.org