Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A00BE71307FA4D2CF599FF88953B4CE81782C6E.cer
File:                     9A00BE71307FA4D2CF599FF88953B4CE81782C6E.cer (raw, json)
Hash identifier:          esjkH+n8nrSnLCZTgu6QOLzg/mOyJ1E8w1dD/F32FPc=
Subject key identifier:   9A:00:BE:71:30:7F:A4:D2:CF:59:9F:F8:89:53:B4:CE:81:78:2C:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A7D8621826CA6B8B917077FC3F76CEFE2EE3A2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/9A00BE71307FA4D2CF599FF88953B4CE81782C6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Oct 2024 03:10:26 +0000
Certificate not after:    Wed 08 Oct 2025 03:15:26 +0000
Subordinate resources:    AS: 268235
                          IP: 45.236.116.0/22
                          IP: 2804:4e08::/32

Validation:               Failed, certificate revoked on Sat 02 Nov 2024 05:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7d:86:21:82:6c:a6:b8:b9:17:07:7f:c3:f7:6c:ef:e2:ee:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  9 03:10:26 2024 GMT
            Not After : Oct  8 03:15:26 2025 GMT
        Subject: CN=9A00BE71307FA4D2CF599FF88953B4CE81782C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:07:3c:f0:d9:cb:07:5b:5c:e0:00:25:b3:
                    26:0f:d9:d1:b0:45:24:d5:d0:97:17:d7:d6:0d:42:
                    f6:8a:45:e5:9f:cd:ac:91:2f:ed:f7:e6:6a:9e:ac:
                    4b:ae:e4:03:c1:7a:7f:5f:5f:1b:58:ff:40:cd:9e:
                    32:30:60:e8:69:4b:9f:02:e6:a1:eb:53:ae:1d:96:
                    d1:bd:5c:2f:e0:dd:0c:ac:24:81:60:32:8c:54:4e:
                    df:f6:98:52:7e:89:01:5c:1f:9b:ee:1e:72:ee:2c:
                    d5:66:c5:6d:b8:a3:54:e2:6e:e8:9e:a5:ec:8b:73:
                    48:12:41:26:72:01:18:d0:af:38:f7:89:e2:de:7e:
                    64:16:20:f2:cb:bd:09:75:8f:86:76:aa:db:d9:17:
                    c4:66:bc:ae:e2:cd:cd:fb:e4:cc:a0:d1:b0:6d:6b:
                    7a:fd:4d:5e:6a:a1:03:77:9d:b0:e2:4c:06:6e:9a:
                    4b:0a:fc:29:39:56:c5:31:1d:8c:6f:60:39:5d:30:
                    61:a7:44:65:f3:61:e1:e4:38:99:fd:7d:69:fc:ff:
                    70:0a:2d:79:e6:6c:11:e3:38:73:00:84:ec:10:63:
                    dd:eb:89:ed:f7:e0:c2:0e:57:9c:90:18:15:b0:8d:
                    94:4f:35:c5:b9:62:10:79:86:2a:22:24:aa:dc:b6:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:00:BE:71:30:7F:A4:D2:CF:59:9F:F8:89:53:B4:CE:81:78:2C:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/9A00BE71307FA4D2CF599FF88953B4CE81782C6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.116.0/22
                IPv6:
                  2804:4e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268235

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:6f:28:e5:53:c5:7e:46:d7:5f:ad:32:1c:29:ad:03:6b:
         a7:78:5f:aa:e7:ac:da:07:7e:05:e6:86:93:d5:13:7b:2f:82:
         90:e3:14:e9:35:3e:f5:6c:6a:4b:b1:40:ed:b5:c3:5b:2e:c1:
         eb:f0:97:6f:cb:df:27:5c:cc:f5:9d:0c:10:af:ba:11:19:57:
         66:91:25:0e:c4:b9:a6:72:79:de:1c:f6:53:d2:5f:d1:0b:ac:
         ac:42:a9:23:16:b9:2d:85:53:af:b3:47:e8:81:ca:1a:fb:a4:
         5e:5a:09:6d:b8:b5:13:00:cc:c0:0a:51:bf:74:89:a2:b4:68:
         53:37:84:78:87:67:31:67:bb:9a:3e:ee:d9:93:b8:8b:f9:61:
         60:2d:cd:56:86:ed:c1:75:23:3a:42:84:32:79:c5:55:b4:d4:
         ce:56:dc:78:8d:5a:16:dc:26:73:77:23:ab:d9:73:ae:58:13:
         e6:14:f4:24:83:ae:5a:67:c4:80:fa:ac:b8:a3:ac:ff:40:75:
         c5:2a:7a:2c:c7:d0:0b:bc:a8:71:df:4f:41:8c:56:c3:3a:f1:
         28:7b:71:3e:23:b4:6c:1c:c4:30:e8:c8:04:9b:7f:a9:7a:e8:
         78:fa:6a:0d:08:4d:f4:87:1a:ee:73:f5:7d:69:f7:f4:68:69:
         08:40:24:ba
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUen2GIYJspri5Fwd/w/ds7+LuOi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDkwMzEwMjZaFw0yNTEwMDgwMzE1MjZaMDMxMTAvBgNV
BAMTKDlBMDBCRTcxMzA3RkE0RDJDRjU5OUZGODg5NTNCNENFODE3ODJDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpgc88NnLB1tc4AAlsyYP2dGw
RSTV0JcX19YNQvaKReWfzayRL+335mqerEuu5APBen9fXxtY/0DNnjIwYOhpS58C
5qHrU64dltG9XC/g3QysJIFgMoxUTt/2mFJ+iQFcH5vuHnLuLNVmxW24o1Tibuie
peyLc0gSQSZyARjQrzj3ieLefmQWIPLLvQl1j4Z2qtvZF8RmvK7izc375Myg0bBt
a3r9TV5qoQN3nbDiTAZumksK/Ck5VsUxHYxvYDldMGGnRGXzYeHkOJn9fWn8/3AK
LXnmbBHjOHMAhOwQY93rie334MIOV5yQGBWwjZRPNcW5YhB5hioiJKrctrVXAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaAL5xMH+k0s9Z
n/iJU7TOgXgsbjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzNu
a0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002S3IvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzNu
a0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002S3IvMC85QTAw
QkU3MTMwN0ZBNEQyQ0Y1OTlGRjg4OTUzQjRDRTgxNzgyQzZFLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt7HQwDQQCAAIwBwMFACgETggwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBfLMA0GCSqGSIb3DQEBCwUAA4IBAQB8eG8o5VPFfkbXX60y
HCmtA2uneF+q56zaB34F5oaT1RN7L4KQ4xTpNT71bGpLsUDttcNbLsHr8Jdvy98n
XMz1nQwQr7oRGVdmkSUOxLmmcnneHPZT0l/RC6ysQqkjFrkthVOvs0fogcoa+6Re
WgltuLUTAMzAClG/dImitGhTN4R4h2cxZ7uaPu7Zk7iL+WFgLc1Whu3BdSM6QoQy
ecVVtNTOVtx4jVoW3CZzdyOr2XOuWBPmFPQkg65aZ8SA+qy4o6z/QHXFKnosx9AL
vKhx309BjFbDOvEoe3E+I7RsHMQw6MgEm3+peuh4+moNCE30hxruc/V9aff0aGkI
QCS6
-----END CERTIFICATE-----
Generated at Sat Nov 2 07:44:22 2024 by rpki-client on console-ams.rpki-client.org