Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C229093821B288EE3264DE1144D4D961651D060.cer
File:                     8C229093821B288EE3264DE1144D4D961651D060.cer (raw, json)
Hash identifier:          RkUDaziRL3wMU5uYn+8GpZqMqCFJ0+TyF773NS+6sYM=
Subject key identifier:   8C:22:90:93:82:1B:28:8E:E3:26:4D:E1:14:4D:4D:96:16:51:D0:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EE6A52CAD5CF2CB19364FC1AFAE9F97B34EBA55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/8C229093821B288EE3264DE1144D4D961651D060.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 19:58:41 +0000
Certificate not after:    Mon 30 Jun 2025 20:03:41 +0000
Subordinate resources:    AS: 267128
                          IP: 45.229.138.0/23
                          IP: 2804:488c::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 03:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:a5:2c:ad:5c:f2:cb:19:36:4f:c1:af:ae:9f:97:b3:4e:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 19:58:41 2024 GMT
            Not After : Jun 30 20:03:41 2025 GMT
        Subject: CN=8C229093821B288EE3264DE1144D4D961651D060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:93:f3:45:a6:e0:1a:bb:06:36:b3:3b:07:
                    cb:99:e5:0c:75:10:5d:d1:9b:87:db:eb:a6:d2:40:
                    ea:5c:a7:73:e2:fb:ad:19:ca:1e:28:fc:34:dd:cd:
                    2b:db:20:6f:be:ce:85:11:2a:49:77:60:d6:22:02:
                    44:93:98:aa:bb:61:f6:16:0c:c4:23:83:6d:11:d9:
                    cf:ed:b0:2e:b9:0f:af:2d:38:d1:b8:f7:c1:64:e9:
                    52:d3:98:7d:b6:2b:76:ce:2d:a5:c4:25:56:97:bf:
                    6b:fb:fb:35:bf:6e:ef:9c:51:3a:94:b9:e3:c3:56:
                    74:4c:bc:1e:ab:a0:f1:c7:19:ab:d0:e6:a5:46:fa:
                    34:be:f0:04:e2:78:88:c8:7c:1c:ca:cb:63:af:ff:
                    41:05:d6:86:7c:20:ec:43:fd:63:4b:84:ec:40:e1:
                    e1:ca:c9:94:e8:09:58:26:91:2b:1f:32:56:78:0e:
                    c3:f6:0a:62:45:08:60:fb:0c:e1:75:a1:91:3e:9e:
                    52:6d:0e:a5:02:7f:39:b3:24:4e:62:ab:80:7e:86:
                    2f:80:1a:1d:b0:91:b9:67:0b:05:8d:94:d9:14:f5:
                    66:f3:a8:13:d1:67:e4:0c:24:64:c0:26:d9:b1:f1:
                    31:7a:2b:92:be:8e:4a:b0:b5:cb:c8:fc:3a:17:a4:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:22:90:93:82:1B:28:8E:E3:26:4D:E1:14:4D:4D:96:16:51:D0:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/8C229093821B288EE3264DE1144D4D961651D060.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23
                IPv6:
                  2804:488c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267128

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:2b:f6:ea:9c:9f:e9:4f:70:eb:a9:bc:25:52:80:1c:3f:
         6a:b2:33:5f:bf:01:9f:20:38:7d:ab:f9:0d:8a:b9:dd:32:8b:
         5e:ac:fa:08:00:0c:32:cd:16:94:3d:3c:4c:9a:a2:ec:0f:de:
         e0:50:80:05:a4:43:91:ce:7a:15:3e:5f:0a:1d:29:f5:f2:9c:
         19:d5:d2:b4:6e:95:27:fc:cb:27:d3:d7:47:75:82:0c:a9:89:
         5c:ea:c4:04:4c:d7:23:3d:6b:a3:5d:b6:f9:e9:73:90:64:2b:
         67:3b:36:60:ec:c4:b1:9b:bf:58:30:82:d7:7f:7f:13:b9:74:
         5d:bd:b8:94:1d:bf:53:42:96:e3:4e:1b:79:17:41:5e:d5:f2:
         3d:c1:29:86:3b:48:57:16:62:e0:77:67:06:2e:39:5b:b0:1a:
         be:da:ec:dc:bb:74:f3:38:bb:48:92:e4:47:3c:a2:c7:62:71:
         12:64:ea:9b:f9:8b:38:94:26:58:90:d2:dd:b3:3b:90:c4:5f:
         32:26:29:cf:97:2f:99:4b:89:4f:59:1c:24:61:70:d4:c0:02:
         3a:16:aa:15:5a:d2:10:a0:a9:d2:75:b8:7d:17:66:2b:7a:a5:
         52:54:f2:c5:54:c9:4f:2e:9d:ed:85:12:3b:d5:14:05:ea:68:
         be:f0:e4:87
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUTualLK1c8ssZNk/Br66fl7NOulUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDExOTU4NDFaFw0yNTA2MzAyMDAzNDFaMDMxMTAvBgNV
BAMTKDhDMjI5MDkzODIxQjI4OEVFMzI2NERFMTE0NEQ0RDk2MTY1MUQwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvJPzRabgGrsGNrM7B8uZ5Qx1
EF3Rm4fb66bSQOpcp3Pi+60Zyh4o/DTdzSvbIG++zoURKkl3YNYiAkSTmKq7YfYW
DMQjg20R2c/tsC65D68tONG498Fk6VLTmH22K3bOLaXEJVaXv2v7+zW/bu+cUTqU
uePDVnRMvB6roPHHGavQ5qVG+jS+8ATieIjIfBzKy2Ov/0EF1oZ8IOxD/WNLhOxA
4eHKyZToCVgmkSsfMlZ4DsP2CmJFCGD7DOF1oZE+nlJtDqUCfzmzJE5iq4B+hi+A
Gh2wkblnCwWNlNkU9WbzqBPRZ+QMJGTAJtmx8TF6K5K+jkqwtcvI/DoXpMDnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMIpCTghsojuMm
TeEUTU2WFlHQYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3pG
bWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1RaZmsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N6
Rm1nWUsyWlZ0c1doNHdOWVA1ZEpLdm9YQnh6RDlOcm5OdnhIMm9UWmZrLzAvOEMy
MjkwOTM4MjFCMjg4RUUzMjY0REUxMTQ0RDREOTYxNjUxRDA2MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBLeWKMA0EAgACMAcDBQAoBEiMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTeDANBgkqhkiG9w0BAQsFAAOCAQEAK7sr9uqcn+lPcOup
vCVSgBw/arIzX78BnyA4fav5DYq53TKLXqz6CAAMMs0WlD08TJqi7A/e4FCABaRD
kc56FT5fCh0p9fKcGdXStG6VJ/zLJ9PXR3WCDKmJXOrEBEzXIz1ro122+elzkGQr
Zzs2YOzEsZu/WDCC139/E7l0Xb24lB2/U0KW404beRdBXtXyPcEphjtIVxZi4Hdn
Bi45W7Aavtrs3Lt08zi7SJLkRzyix2JxEmTqm/mLOJQmWJDS3bM7kMRfMiYpz5cv
mUuJT1kcJGFw1MACOhaqFVrSEKCp0nW4fRdmK3qlUlTyxVTJTy6d7YUSO9UUBepo
vvDkhw==
-----END CERTIFICATE-----
Generated at Fri Nov 8 06:33:11 2024 by rpki-client on console-ams.rpki-client.org