Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D460B0A2184DAF32ED05714AF875B44AF758CE6.cer
File:                     9D460B0A2184DAF32ED05714AF875B44AF758CE6.cer (raw, json)
Hash identifier:          Y3GsN1jHHCV8AMA8YarKMn6FYfiqDPRjLqRrk4j+t/w=
Subject key identifier:   9D:46:0B:0A:21:84:DA:F3:2E:D0:57:14:AF:87:5B:44:AF:75:8C:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F64BB8B532742A834DF35325820D2D4B2095AA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/9D460B0A2184DAF32ED05714AF875B44AF758CE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jul 2024 13:49:08 +0000
Certificate not after:    Tue 15 Jul 2025 13:54:08 +0000
Subordinate resources:    AS: 265919
                          IP: 131.196.196.0/22
                          IP: 2804:3fd8::/32

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 15:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:64:bb:8b:53:27:42:a8:34:df:35:32:58:20:d2:d4:b2:09:5a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 16 13:49:08 2024 GMT
            Not After : Jul 15 13:54:08 2025 GMT
        Subject: CN=9D460B0A2184DAF32ED05714AF875B44AF758CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:16:2c:eb:2a:84:8f:91:d4:1c:3e:93:f8:
                    51:4a:bb:78:55:49:0d:58:bd:25:77:a6:cb:43:5e:
                    f0:c1:7c:37:d0:46:de:38:5f:f6:73:a0:66:40:ba:
                    a9:e0:b4:c0:d1:2a:5a:ea:68:15:3e:f6:20:88:31:
                    f2:f5:e9:8b:03:e3:51:ba:46:de:9a:17:6c:72:9b:
                    e9:e1:24:50:eb:4d:88:51:e7:27:db:40:1e:b4:e5:
                    54:65:16:6f:94:bc:95:fe:bd:f0:09:5e:11:9f:3a:
                    9b:b9:b9:7d:58:fc:b0:ed:15:9c:f9:a8:56:a5:65:
                    1e:7f:c1:3e:f6:9a:68:bb:78:4d:2a:49:6c:a8:ae:
                    77:84:ea:c1:a2:a0:d9:a0:b6:e8:c2:ac:92:74:7d:
                    46:8b:c9:79:23:53:2d:fb:22:c3:6a:45:5f:cb:59:
                    27:b0:6a:b7:87:9d:68:c5:b7:64:c0:4a:f1:e7:28:
                    e2:1d:c1:99:5e:31:36:9b:92:9d:8e:6b:bd:fe:f6:
                    eb:93:34:ef:87:f7:f7:cb:f7:aa:a4:7e:2f:27:80:
                    fc:9e:17:e8:7a:6b:09:36:58:d8:e4:91:1f:15:f4:
                    8b:83:cc:3b:a6:db:ed:22:86:e5:a5:13:26:1a:82:
                    ba:19:8e:5c:52:ba:a5:49:92:99:bb:0e:91:7e:bb:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:46:0B:0A:21:84:DA:F3:2E:D0:57:14:AF:87:5B:44:AF:75:8C:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/9D460B0A2184DAF32ED05714AF875B44AF758CE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/22
                IPv6:
                  2804:3fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265919

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:d3:b3:e6:85:74:72:79:e5:fe:27:8f:0f:92:d3:bb:29:
         be:eb:e5:e9:34:a4:00:6c:c9:23:99:bb:3d:39:e4:46:c4:b9:
         0d:7a:00:f5:28:01:2e:da:c0:8f:3a:89:b5:e0:e0:14:f9:1d:
         4e:65:51:c0:39:a8:83:28:df:01:76:18:e9:9e:ff:de:b6:6e:
         53:cc:98:27:88:de:4c:a6:c7:70:b9:7d:8d:5b:68:e0:ba:2f:
         b7:79:e4:4a:8c:df:93:c9:82:6b:3f:15:33:9e:21:6a:4e:74:
         a3:f0:e1:df:e6:31:81:1b:1e:1d:e9:59:86:b5:75:b4:c0:82:
         2d:98:6e:25:cb:58:c5:b7:7a:70:e7:4e:82:df:69:44:19:a3:
         8a:82:34:eb:19:8b:0e:08:d1:ca:02:ec:40:0f:f0:09:b5:72:
         c2:d9:5f:b0:85:2b:5f:17:05:e7:cd:77:63:56:98:4d:06:4e:
         64:37:7d:63:b9:ec:15:c3:98:5e:65:51:6e:0a:78:02:4e:70:
         1d:36:4f:c1:d7:ef:a1:3e:c1:ee:e1:43:43:f1:99:07:47:2e:
         28:b8:09:05:25:e3:c9:5e:e7:b3:a1:29:1a:66:72:4d:05:aa:
         21:20:3b:fe:8d:69:3c:b7:dc:2e:99:06:41:26:38:b6:17:d2:
         0d:d3:8e:12
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUf2S7i1MnQqg03zUyWCDS1LIJWqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTYxMzQ5MDhaFw0yNTA3MTUxMzU0MDhaMDMxMTAvBgNV
BAMTKDlENDYwQjBBMjE4NERBRjMyRUQwNTcxNEFGODc1QjQ0QUY3NThDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ORYs6yqEj5HUHD6T+FFKu3hV
SQ1YvSV3pstDXvDBfDfQRt44X/ZzoGZAuqngtMDRKlrqaBU+9iCIMfL16YsD41G6
Rt6aF2xym+nhJFDrTYhR5yfbQB605VRlFm+UvJX+vfAJXhGfOpu5uX1Y/LDtFZz5
qFalZR5/wT72mmi7eE0qSWyorneE6sGioNmgtujCrJJ0fUaLyXkjUy37IsNqRV/L
WSewareHnWjFt2TASvHnKOIdwZleMTabkp2Oa73+9uuTNO+H9/fL96qkfi8ngPye
F+h6awk2WNjkkR8V9IuDzDum2+0ihuWlEyYagroZjlxSuqVJkpm7DpF+u8SpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdRgsKIYTa8y7Q
VxSvh1tEr3WM5jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREZB
cFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFhbzQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RG
QXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAvOUQ0
NjBCMEEyMTg0REFGMzJFRDA1NzE0QUY4NzVCNDRBRjc1OENFNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg8TEMA0EAgACMAcDBQAoBD/YMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQOvzANBgkqhkiG9w0BAQsFAAOCAQEAmozTs+aFdHJ55f4n
jw+S07spvuvl6TSkAGzJI5m7PTnkRsS5DXoA9SgBLtrAjzqJteDgFPkdTmVRwDmo
gyjfAXYY6Z7/3rZuU8yYJ4jeTKbHcLl9jVto4Lovt3nkSozfk8mCaz8VM54hak50
o/Dh3+YxgRseHelZhrV1tMCCLZhuJctYxbd6cOdOgt9pRBmjioI06xmLDgjRygLs
QA/wCbVywtlfsIUrXxcF5813Y1aYTQZOZDd9Y7nsFcOYXmVRbgp4Ak5wHTZPwdfv
oT7B7uFDQ/GZB0cuKLgJBSXjyV7ns6EpGmZyTQWqISA7/o1pPLfcLpkGQSY4thfS
DdOOEg==
-----END CERTIFICATE-----
Generated at Thu Sep 26 17:49:42 2024 by rpki-client on console-fra.rpki-client.org