Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer
File:                     97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer (raw, json)
Hash identifier:          gLVFJC4afSA0kKUyHT9XUafsK5xGmSUSrx/T3gEmEmY=
Subject key identifier:   97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       261572E6985D0427FFDAA5F3347A322D99A14C55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 23:04:03 +0000
Certificate not after:    Thu 03 Apr 2025 23:09:03 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 16:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:15:72:e6:98:5d:04:27:ff:da:a5:f3:34:7a:32:2d:99:a1:4c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 23:04:03 2024 GMT
            Not After : Apr  3 23:09:03 2025 GMT
        Subject: CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:a2:aa:1e:6b:40:df:30:5e:d9:23:ef:5f:
                    c8:94:d2:a5:2c:0e:2d:30:ab:62:43:6d:0d:4d:a9:
                    01:78:ba:df:02:db:8a:b2:1e:81:6c:d4:c2:c0:b8:
                    e6:c7:44:04:28:6a:98:52:59:59:21:b4:5a:a0:47:
                    3b:ed:05:a1:ca:6f:9f:9f:49:c6:15:3f:a2:de:e9:
                    7b:f7:9c:b8:c7:5a:e1:8f:c8:3a:39:55:82:74:59:
                    a8:df:36:71:b7:ec:b2:12:03:33:81:4f:9b:17:44:
                    21:01:a0:a9:73:c4:94:95:be:f9:ef:09:b8:07:3d:
                    45:58:87:99:32:5a:f7:2a:c2:54:fd:97:6f:fb:43:
                    8f:fd:b8:29:50:e4:4d:20:59:66:7a:c4:87:bc:77:
                    1a:64:b1:17:2f:ea:b6:22:8c:6b:89:03:61:22:c3:
                    01:6b:ed:01:35:00:b9:f4:76:54:b7:08:91:32:9a:
                    58:24:d4:8e:38:71:8a:0e:e8:f2:4f:b3:bf:c6:6c:
                    5b:75:56:66:0a:39:56:a5:c0:bc:4c:18:03:15:f9:
                    85:08:c0:16:c8:8a:5d:66:8b:53:bf:a7:1e:6c:1a:
                    00:b5:de:1a:e1:4c:ff:de:cd:4e:63:d7:19:21:67:
                    19:31:1b:7f:d5:a5:90:10:a8:d2:28:83:6f:bc:4d:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:49:4b:7a:80:4f:9c:6c:e1:86:9d:9b:d1:d4:ab:c8:eb:
         7f:96:0e:86:af:02:3b:87:d3:29:bb:9d:0a:2d:0e:52:33:07:
         05:b9:86:d3:ad:cb:0d:12:87:f1:c0:88:1e:6c:b4:f9:fd:8d:
         f0:33:38:49:3e:87:03:73:7b:17:1a:82:23:82:23:13:70:3e:
         1e:2f:e0:a3:cb:99:a4:26:c9:6c:d4:38:c1:6d:ee:03:d7:b7:
         d9:51:be:56:1c:90:08:7b:e6:35:e3:b1:78:51:5b:ee:65:e9:
         dd:bf:72:92:9e:98:66:32:50:f7:b6:7e:15:6d:32:9a:d1:e6:
         f2:62:a3:4e:b1:29:42:f4:9b:51:ab:06:78:59:6c:2d:eb:e7:
         66:2f:8c:65:f1:e4:86:83:4d:ff:5c:b7:c0:5a:2a:d3:93:b0:
         b1:82:a7:ab:f5:4d:eb:cd:fc:c8:17:7c:c3:fb:5c:23:83:fa:
         2c:85:ca:af:bd:f0:bd:4c:b9:a4:3a:ab:97:cd:68:45:8f:70:
         6a:37:bb:bc:f2:1b:8a:c5:f7:65:b4:5d:23:36:bd:fb:c4:66:
         71:fe:75:6e:f1:82:e8:b8:00:4d:f6:34:e7:74:95:8e:b9:ff:
         6d:83:a9:b9:90:b3:63:67:db:5d:67:2e:50:90:92:6d:c3:e4:
         08:65:8c:4e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJhVy5phdBCf/2qXzNHoyLZmhTFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMzA0MDNaFw0yNTA0MDMyMzA5MDNaMDMxMTAvBgNV
BAMTKDk3REZBNUI5QUFENUZBOTE0MUY0RUNDRUNCMDZENzJBQUJEQjBFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNaKqHmtA3zBe2SPvX8iU0qUs
Di0wq2JDbQ1NqQF4ut8C24qyHoFs1MLAuObHRAQoaphSWVkhtFqgRzvtBaHKb5+f
ScYVP6Le6Xv3nLjHWuGPyDo5VYJ0WajfNnG37LISAzOBT5sXRCEBoKlzxJSVvvnv
CbgHPUVYh5kyWvcqwlT9l2/7Q4/9uClQ5E0gWWZ6xIe8dxpksRcv6rYijGuJA2Ei
wwFr7QE1ALn0dlS3CJEymlgk1I44cYoO6PJPs7/GbFt1VmYKOValwLxMGAMV+YUI
wBbIil1mi1O/px5sGgC13hrhTP/ezU5j1xkhZxkxG3/VpZAQqNIog2+8TfdlAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSX36W5qtX6kUH0
7M7LBtcqq9sOMjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQW1Q
akVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ft
UGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzIvOTdE
RkE1QjlBQUQ1RkE5MTQxRjRFQ0NFQ0IwNkQ3MkFBQkRCMEUzMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLadsMA0EAgACMAcDBQAoBFZ0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQW3zANBgkqhkiG9w0BAQsFAAOCAQEAX1NJS3qAT5xs4Yad
m9HUq8jrf5YOhq8CO4fTKbudCi0OUjMHBbmG063LDRKH8cCIHmy0+f2N8DM4ST6H
A3N7FxqCI4IjE3A+Hi/go8uZpCbJbNQ4wW3uA9e32VG+VhyQCHvmNeOxeFFb7mXp
3b9ykp6YZjJQ97Z+FW0ymtHm8mKjTrEpQvSbUasGeFlsLevnZi+MZfHkhoNN/1y3
wFoq05OwsYKnq/VN6838yBd8w/tcI4P6LIXKr73wvUy5pDqrl81oRY9waje7vPIb
isX3ZbRdIza9+8Rmcf51bvGC6LgATfY053SVjrn/bYOpuZCzY2fbXWcuUJCSbcPk
CGWMTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org