Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8ABB6A2294CEA33843E7E6859153ED5228C357F6.cer
File:                     8ABB6A2294CEA33843E7E6859153ED5228C357F6.cer (raw, json)
Hash identifier:          j4vIA67jtWwSOng0HqAqaev0HnGPA4Ux9wwZhNMvB3g=
Subject key identifier:   8A:BB:6A:22:94:CE:A3:38:43:E7:E6:85:91:53:ED:52:28:C3:57:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B271C9102446FC57D8E609DB02F35E9A14D4A7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/8ABB6A2294CEA33843E7E6859153ED5228C357F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 May 2024 19:08:43 +0000
Certificate not after:    Wed 14 May 2025 19:13:43 +0000
Subordinate resources:    AS: 262789
                          IP: 177.221.120.0/21
                          IP: 186.233.128.0/21
                          IP: 2804:208::/32

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 04:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:1c:91:02:44:6f:c5:7d:8e:60:9d:b0:2f:35:e9:a1:4d:4a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 15 19:08:43 2024 GMT
            Not After : May 14 19:13:43 2025 GMT
        Subject: CN=8ABB6A2294CEA33843E7E6859153ED5228C357F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:b3:48:c8:05:e5:19:0c:76:58:6a:f5:bd:
                    91:d6:98:7b:34:d7:ad:aa:ab:b3:44:f5:0d:2d:c4:
                    0a:33:3d:22:a5:ba:bd:fd:9a:34:5d:fb:f6:40:71:
                    8d:53:d0:a5:9c:8d:96:24:96:b3:d7:0b:4f:ba:ff:
                    b1:27:d7:40:7c:da:b1:95:b7:a4:94:ab:bb:1a:cd:
                    96:7b:45:1b:ae:8d:9f:06:ca:31:e8:59:2f:25:ff:
                    e9:1e:25:40:64:8d:64:e0:7f:c6:f7:76:75:75:9b:
                    71:2e:63:25:18:98:37:e3:72:8f:b2:bb:e4:d5:b2:
                    6d:3c:e4:a1:8c:25:4a:75:d0:eb:ce:60:7d:88:5d:
                    2c:a4:e8:35:b8:89:5c:32:8e:87:ab:c9:d1:46:56:
                    c3:f6:ea:2e:88:4e:9f:25:4e:43:0b:7f:f9:52:8c:
                    f2:71:0b:2e:12:18:5e:a4:5a:fc:88:d8:a3:33:98:
                    7a:3b:dd:18:e7:4b:54:56:6b:10:33:db:0f:e8:67:
                    7b:db:4d:e8:62:b4:73:c1:85:0f:8f:8e:9d:e3:8f:
                    f2:ac:67:7a:21:d4:70:ba:bb:0c:e5:cf:73:95:46:
                    41:bc:3c:f1:b8:2f:c5:fe:94:84:a0:7c:53:9a:83:
                    56:93:2c:84:07:25:87:40:64:7f:1c:03:17:7e:1c:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:BB:6A:22:94:CE:A3:38:43:E7:E6:85:91:53:ED:52:28:C3:57:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/8ABB6A2294CEA33843E7E6859153ED5228C357F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21
                  186.233.128.0/21
                IPv6:
                  2804:208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262789

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:94:f7:9c:6c:3a:ea:55:27:6b:6b:4a:77:5c:bc:9b:b5:
         7c:04:a2:82:76:b5:a5:41:99:84:5e:11:7d:08:db:0e:7e:d9:
         4b:b6:19:a9:86:1b:81:2c:0f:e9:8f:1d:a0:4e:53:5c:a7:f5:
         9e:36:81:ea:4f:a0:a6:f7:ea:96:df:0c:59:d9:e5:5c:26:fc:
         59:6f:12:08:fc:2b:dc:c6:47:d6:de:d6:c5:6c:a0:53:b7:d4:
         5f:ce:47:84:1d:8d:70:25:a6:5f:79:6e:ec:35:7f:84:3a:aa:
         1f:2b:4b:2f:af:0b:53:69:dc:64:8e:5a:35:9e:4c:f6:ac:d6:
         9d:6e:4e:c1:a8:a4:a8:a3:d0:44:48:46:43:d7:cf:93:ce:ed:
         1d:50:c5:f8:db:6c:8f:11:b7:e4:61:8f:16:c9:b6:77:f5:13:
         0e:d4:d9:6e:54:fb:db:d4:51:5c:3d:54:71:21:66:ca:b3:2d:
         ee:ac:ff:c0:07:e5:20:71:92:49:25:9c:6e:e5:2b:e3:fc:69:
         55:21:ca:ec:b6:4c:c4:2a:e6:8d:81:03:a0:66:55:2e:4c:2d:
         ac:ae:26:10:04:d7:5c:4d:b8:e7:69:bd:1e:51:3c:23:82:22:
         39:87:42:88:e9:b7:09:68:0e:58:f9:a1:05:dc:15:25:55:ba:
         f3:a3:3a:44
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUWycckQJEb8V9jmCdsC816aFNSnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MTUxOTA4NDNaFw0yNTA1MTQxOTEzNDNaMDMxMTAvBgNV
BAMTKDhBQkI2QTIyOTRDRUEzMzg0M0U3RTY4NTkxNTNFRDUyMjhDMzU3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4LNIyAXlGQx2WGr1vZHWmHs0
162qq7NE9Q0txAozPSKlur39mjRd+/ZAcY1T0KWcjZYklrPXC0+6/7En10B82rGV
t6SUq7sazZZ7RRuujZ8GyjHoWS8l/+keJUBkjWTgf8b3dnV1m3EuYyUYmDfjco+y
u+TVsm085KGMJUp10OvOYH2IXSyk6DW4iVwyjoerydFGVsP26i6ITp8lTkMLf/lS
jPJxCy4SGF6kWvyI2KMzmHo73RjnS1RWaxAz2w/oZ3vbTehitHPBhQ+Pjp3jj/Ks
Z3oh1HC6uwzlz3OVRkG8PPG4L8X+lISgfFOag1aTLIQHJYdAZH8cAxd+HDqdAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKu2oilM6jOEPn
5oWRU+1SKMNX9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmth
WXV4ZUV0VXlWdUN3YWUxM1BhNVVjWTNBVG9BS1VhTXp1eXdWcHRMTGMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jr
YVl1eGVFdFV5VnVDd2FlMTNQYTVVY1kzQVRvQUtVYU16dXl3VnB0TExjLzAvOEFC
QjZBMjI5NENFQTMzODQzRTdFNjg1OTE1M0VENTIyOEMzNTdGNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQDsd14AwQDuumAMA0EAgACMAcDBQAoBAIIMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQChTANBgkqhkiG9w0BAQsFAAOCAQEAlZ+U95xs
OupVJ2trSndcvJu1fASigna1pUGZhF4RfQjbDn7ZS7YZqYYbgSwP6Y8doE5TXKf1
njaB6k+gpvfqlt8MWdnlXCb8WW8SCPwr3MZH1t7WxWygU7fUX85HhB2NcCWmX3lu
7DV/hDqqHytLL68LU2ncZI5aNZ5M9qzWnW5OwaikqKPQREhGQ9fPk87tHVDF+Nts
jxG35GGPFsm2d/UTDtTZblT729RRXD1UcSFmyrMt7qz/wAflIHGSSSWcbuUr4/xp
VSHK7LZMxCrmjYEDoGZVLkwtrK4mEATXXE2452m9HlE8I4IiOYdCiOm3CWgOWPmh
BdwVJVW686M6RA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 05:45:27 2024 by rpki-client on console-fra.rpki-client.org