Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer
File:                     8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer (raw, json)
Hash identifier:          MuU/FV5W0ZaT0VmgdxzHhYhZEsgsA8EljL35FugzOfc=
Subject key identifier:   87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BD5977FA0EE01B20DFF70257A360CCF43F84D13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Aug 2024 19:13:05 +0000
Certificate not after:    Wed 20 Aug 2025 19:18:05 +0000
Subordinate resources:    AS: 265493
                          IP: 168.197.160.0/22
                          IP: 2804:34fc::/32

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 16:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d5:97:7f:a0:ee:01:b2:0d:ff:70:25:7a:36:0c:cf:43:f8:4d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 19:13:05 2024 GMT
            Not After : Aug 20 19:18:05 2025 GMT
        Subject: CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:73:a9:00:f7:21:29:43:56:0f:29:82:9d:
                    01:05:c9:01:5f:8f:fd:0a:ff:48:0a:f9:ca:39:90:
                    d8:31:1a:4a:6d:92:56:77:50:90:98:0e:38:b2:5b:
                    62:d2:98:63:c1:57:60:82:16:c0:6a:c8:be:ef:b1:
                    a0:65:51:f7:29:99:6f:e1:ea:31:76:f3:ff:b4:f3:
                    01:ac:35:f2:75:21:10:9e:0c:d1:2b:95:56:68:29:
                    da:b9:5c:30:3f:11:ec:c0:58:2d:23:35:a1:f7:5a:
                    55:f1:a7:7a:73:20:2f:f3:a9:aa:94:b5:7f:3d:71:
                    72:68:f6:9d:de:d8:e4:fe:09:f8:5a:eb:30:85:a7:
                    e9:8b:75:e9:1d:ab:4a:61:3b:3b:cb:0c:b4:9a:e2:
                    12:ff:8f:3e:5c:b7:b9:c6:92:67:16:c6:62:67:82:
                    f4:11:22:c8:e0:f0:62:43:aa:e6:5f:21:fd:2f:5b:
                    b7:52:f5:9f:52:2c:63:20:f5:e5:e7:e7:8d:c1:aa:
                    3b:92:71:89:fe:1b:1f:ca:11:90:e6:3c:e7:7d:6b:
                    11:e3:ac:ae:37:fb:07:12:c2:ee:e9:19:bf:a8:00:
                    99:aa:1c:9a:05:73:fd:e0:2d:73:53:41:ca:bb:4a:
                    cc:18:f6:ed:b7:01:c4:af:e8:01:38:b7:96:be:af:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.160.0/22
                IPv6:
                  2804:34fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265493

    Signature Algorithm: sha256WithRSAEncryption
         02:82:e0:83:6a:5c:96:08:b5:c7:6a:9d:10:8f:2b:c2:69:f1:
         b7:64:c1:e2:c2:4c:41:15:2f:31:17:b6:2b:b3:5f:84:cf:3b:
         21:2e:53:41:f5:57:37:4d:af:94:c3:02:1b:83:54:ba:45:62:
         fd:7b:17:b3:7b:e2:56:f3:9d:ca:67:b2:17:02:92:dc:14:67:
         55:2d:28:e8:dc:a8:8f:3c:18:21:8f:15:d4:17:94:2e:48:4e:
         c7:0a:6c:92:58:d9:5f:78:c1:ed:6a:4a:df:44:7f:eb:b7:e7:
         9b:fa:10:ab:15:65:01:e2:3e:37:97:61:90:d1:07:00:2c:9b:
         6a:ed:d4:f5:5a:9f:bf:1b:32:ea:a3:10:00:de:15:d9:53:55:
         21:ed:a0:1d:6f:74:ae:d6:64:c3:aa:c7:2f:1e:3d:3a:cc:8f:
         90:d8:63:f6:41:60:c4:66:82:96:67:a6:7a:78:29:aa:68:4b:
         21:ca:95:3d:02:28:19:3a:3a:02:8b:3b:de:90:79:9d:48:16:
         8d:f9:2e:78:bf:39:d1:aa:63:04:a1:5f:a3:89:f6:d9:77:22:
         0d:9e:92:b8:63:6b:6a:3f:49:39:49:57:1e:6d:ab:32:f1:52:
         ad:b2:d8:07:bf:6e:18:a1:8d:53:32:2e:d2:51:28:38:94:55:
         e5:fc:20:fd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUe9WXf6DuAbIN/3AlejYMz0P4TRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MjExOTEzMDVaFw0yNTA4MjAxOTE4MDVaMDMxMTAvBgNV
BAMTKDg3MTdCMDBBRDE4RTgzN0Q2NjUxQjEzRUY3Q0VGMEQ4OTQ5QjM3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4x3OpAPchKUNWDymCnQEFyQFf
j/0K/0gK+co5kNgxGkptklZ3UJCYDjiyW2LSmGPBV2CCFsBqyL7vsaBlUfcpmW/h
6jF28/+08wGsNfJ1IRCeDNErlVZoKdq5XDA/EezAWC0jNaH3WlXxp3pzIC/zqaqU
tX89cXJo9p3e2OT+Cfha6zCFp+mLdekdq0phOzvLDLSa4hL/jz5ct7nGkmcWxmJn
gvQRIsjg8GJDquZfIf0vW7dS9Z9SLGMg9eXn543BqjuScYn+Gx/KEZDmPOd9axHj
rK43+wcSwu7pGb+oAJmqHJoFc/3gLXNTQcq7SswY9u23AcSv6AE4t5a+r9pjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHF7AK0Y6DfWZR
sT73zvDYlJs3SDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUg1
ekhhb3R4TGhKWGZxc0RpUEIyR0wzVGdXeW15VEJ4dUhoMktmWTRzV0gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVI
NXpIYW90eExoSlhmcXNEaVBCMkdMM1RnV3lteVRCeHVIaDJLZlk0c1dILzAvODcx
N0IwMEFEMThFODM3RDY2NTFCMTNFRjdDRUYwRDg5NDlCMzc0OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqMWgMA0EAgACMAcDBQAoBDT8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQNFTANBgkqhkiG9w0BAQsFAAOCAQEAAoLgg2pclgi1x2qd
EI8rwmnxt2TB4sJMQRUvMRe2K7NfhM87IS5TQfVXN02vlMMCG4NUukVi/XsXs3vi
VvOdymeyFwKS3BRnVS0o6NyojzwYIY8V1BeULkhOxwpskljZX3jB7WpK30R/67fn
m/oQqxVlAeI+N5dhkNEHACybau3U9Vqfvxsy6qMQAN4V2VNVIe2gHW90rtZkw6rH
Lx49OsyPkNhj9kFgxGaClmemengpqmhLIcqVPQIoGTo6Aos73pB5nUgWjfkueL85
0apjBKFfo4n22XciDZ6SuGNraj9JOUlXHm2rMvFSrbLYB79uGKGNUzIu0lEoOJRV
5fwg/Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:48 2024 by rpki-client on console-ams.rpki-client.org