Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer
File:                     9CDEE6CF6519966891D6D812879D24B89912ACB2.cer (raw, json)
Hash identifier:          zY0FVtPfdmu5BIQ5hg/bCPIKTDKXBzFvyouF+4og4qc=
Subject key identifier:   9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25EEE825FB925B64F877F6A910605E0555E0BBE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:54:02 +0000
Certificate not after:    Thu 03 Apr 2025 20:59:02 +0000
Subordinate resources:    AS: 265192
                          IP: 167.249.144.0/22
                          IP: 2804:2c10::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 16:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ee:e8:25:fb:92:5b:64:f8:77:f6:a9:10:60:5e:05:55:e0:bb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:54:02 2024 GMT
            Not After : Apr  3 20:59:02 2025 GMT
        Subject: CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b0:e6:c6:39:65:df:7f:92:b0:0d:39:db:ca:
                    5e:8e:8a:99:30:ac:7f:ce:4d:3a:c0:ed:58:27:31:
                    57:e6:65:57:b6:d4:b8:7a:93:5e:b6:c2:28:20:54:
                    4d:97:52:0d:ff:48:c0:90:0f:36:de:f2:33:02:2c:
                    f5:26:51:89:90:4b:16:3a:ed:80:1e:4d:09:86:db:
                    ff:3a:59:d5:bc:ed:83:8d:7b:92:f2:7e:05:66:e5:
                    b6:9a:3e:e2:34:bc:80:c0:11:d1:b6:9e:9b:f8:0f:
                    a5:e0:c9:60:44:a0:ee:78:c3:de:02:75:18:99:2b:
                    94:f3:be:78:16:0e:67:66:69:bf:51:48:bf:ab:ee:
                    cb:22:f2:3c:30:5b:0e:fd:07:df:f2:5d:cf:a2:91:
                    78:c6:d9:e8:c3:ab:9a:93:c8:e6:38:96:1e:dd:6a:
                    24:a2:23:66:f4:34:f5:79:c9:30:98:9d:1a:9c:e2:
                    c2:72:32:4c:a2:79:27:a1:27:86:43:b6:41:cf:db:
                    17:0d:0b:48:d7:98:c1:ae:fb:bf:be:75:ef:db:f6:
                    61:f1:bb:ac:2b:02:58:d5:c7:6e:b8:95:bd:dc:10:
                    9a:6a:80:9f:97:b7:7f:f5:e2:fc:3c:46:8b:ff:41:
                    d4:df:c0:ce:d9:f9:2a:24:15:46:03:d8:4c:ee:c1:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.144.0/22
                IPv6:
                  2804:2c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265192

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:61:3b:e8:e9:36:e4:fe:72:d6:9d:59:4d:6d:31:ab:cb:
         3b:52:58:7e:e5:c9:d6:6c:71:9b:67:c9:3a:17:49:43:a5:26:
         91:fb:5a:e9:72:12:55:4c:e9:ff:b2:91:ae:a4:9a:50:a0:9b:
         94:c8:a3:91:36:a9:a6:29:a3:4c:a1:99:ea:ee:11:a9:55:15:
         24:8f:75:3c:06:52:f1:3d:b4:22:03:2a:30:90:fc:cb:b1:30:
         3a:dc:ff:bd:3f:1e:a2:07:61:c2:d2:9c:75:1b:28:97:34:44:
         3c:81:09:84:99:2a:a0:d3:04:2d:f3:56:27:89:91:e1:6c:cd:
         a9:45:e9:d3:5e:5a:10:04:b8:dd:6a:e2:64:91:04:47:e4:61:
         7f:48:95:f3:bc:86:20:9f:0e:05:84:52:38:30:5f:82:41:18:
         45:59:c8:39:11:ed:9e:e2:ee:d4:1c:b0:01:d0:55:1c:40:75:
         99:c8:2a:09:bb:20:f6:bf:fe:b9:b8:c9:c2:76:37:2f:25:6c:
         3c:a8:3f:ea:aa:c9:58:bf:fe:7e:b2:03:12:55:5f:f4:35:d0:
         94:ed:99:24:40:d4:43:f6:72:2e:ba:e2:b9:0a:ca:8a:18:67:
         d5:00:96:69:86:70:9e:c1:88:4f:71:5d:c5:b0:ad:6b:62:9f:
         69:81:80:fa
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJe7oJfuSW2T4d/apEGBeBVXgu+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMDU0MDJaFw0yNTA0MDMyMDU5MDJaMDMxMTAvBgNV
BAMTKDlDREVFNkNGNjUxOTk2Njg5MUQ2RDgxMjg3OUQyNEI4OTkxMkFDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxsObGOWXff5KwDTnbyl6Oipkw
rH/OTTrA7VgnMVfmZVe21Lh6k162wiggVE2XUg3/SMCQDzbe8jMCLPUmUYmQSxY6
7YAeTQmG2/86WdW87YONe5LyfgVm5baaPuI0vIDAEdG2npv4D6XgyWBEoO54w94C
dRiZK5TzvngWDmdmab9RSL+r7ssi8jwwWw79B9/yXc+ikXjG2ejDq5qTyOY4lh7d
aiSiI2b0NPV5yTCYnRqc4sJyMkyieSehJ4ZDtkHP2xcNC0jXmMGu+7++de/b9mHx
u6wrAljVx264lb3cEJpqgJ+Xt3/14vw8Rov/QdTfwM7Z+SokFUYD2EzuwdsNAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSc3ubPZRmWaJHW
2BKHnSS4mRKssjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQThy
eThBSm1iMU12Z0pORGRuR3RZRXBBdXJ5ZkdoaVRQVUJ3VFNMUWZrV24vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E4
cnk4QUptYjFNdmdKTkRkbkd0WUVwQXVyeWZHaGlUUFVCd1RTTFFma1duLzEvOUNE
RUU2Q0Y2NTE5OTY2ODkxRDZEODEyODc5RDI0Qjg5OTEyQUNCMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCp/mQMA0EAgACMAcDBQAoBCwQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQL6DANBgkqhkiG9w0BAQsFAAOCAQEAGOphO+jpNuT+ctad
WU1tMavLO1JYfuXJ1mxxm2fJOhdJQ6Umkfta6XISVUzp/7KRrqSaUKCblMijkTap
pimjTKGZ6u4RqVUVJI91PAZS8T20IgMqMJD8y7EwOtz/vT8eogdhwtKcdRsolzRE
PIEJhJkqoNMELfNWJ4mR4WzNqUXp015aEAS43WriZJEER+Rhf0iV87yGIJ8OBYRS
ODBfgkEYRVnIORHtnuLu1BywAdBVHEB1mcgqCbsg9r/+ubjJwnY3LyVsPKg/6qrJ
WL/+frIDElVf9DXQlO2ZJEDUQ/ZyLrriuQrKihhn1QCWaYZwnsGIT3FdxbCta2Kf
aYGA+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org