Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.cer
File:                     9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.cer (raw, json)
Hash identifier:          9PtduWUuqL9WjwQRSNI0itlk1VmFGRyKGrp6Ibsnyu0=
Subject key identifier:   9E:0C:BB:5D:F0:52:22:AB:B1:DC:13:DB:72:BC:3E:96:95:5D:64:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30006A89E6A2B1C29DB41BE6E9E1E9A75A1B5102
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:31:09 +0000
Certificate not after:    Thu 03 Apr 2025 17:36:09 +0000
Subordinate resources:    AS: 269439
                          IP: 45.186.228.0/22
                          IP: 2804:64a0::/32

Validation:               Failed, certificate revoked on Fri 31 May 2024 08:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:00:6a:89:e6:a2:b1:c2:9d:b4:1b:e6:e9:e1:e9:a7:5a:1b:51:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:31:09 2024 GMT
            Not After : Apr  3 17:36:09 2025 GMT
        Subject: CN=9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d0:2b:6b:5c:fd:87:86:ef:b1:d2:39:28:c4:
                    cb:ff:18:5d:e6:31:52:5d:c9:02:82:ce:10:8c:62:
                    9b:42:2d:c8:ab:46:56:47:95:12:fc:ac:27:17:28:
                    9f:b7:5f:57:3e:0c:ac:7f:4f:e9:36:6d:eb:53:ef:
                    83:bd:98:b3:9f:b7:e0:34:75:0c:dc:ac:36:d8:d2:
                    b5:99:a9:a8:b8:61:0f:c0:5c:08:9e:1d:98:92:f5:
                    01:30:2c:8d:45:95:e3:f1:1b:5a:48:b7:6e:24:79:
                    af:48:90:b5:fd:4c:bf:02:63:fa:36:11:7d:71:37:
                    e3:07:dd:d8:b8:12:9b:6c:2d:4c:6c:36:37:88:6b:
                    85:9f:b4:3b:92:e4:bc:6a:93:b5:e1:de:53:7a:2d:
                    a9:3d:7f:a2:f3:50:e8:d2:0d:e2:78:2e:82:9b:a4:
                    b1:b9:1b:f6:df:ce:b1:b1:2e:35:08:37:03:13:d1:
                    3e:88:75:86:3b:87:99:84:b8:c8:b6:db:35:b0:7b:
                    bd:9c:3d:05:72:7a:70:79:88:fd:1c:ef:9e:e7:3d:
                    1b:58:19:fa:e7:ba:08:d0:df:4d:44:71:bb:db:e6:
                    1f:18:c1:bf:9a:69:07:d2:0f:c6:c0:10:da:fb:f4:
                    60:b1:e4:ea:e7:4d:36:62:ae:a2:d5:a9:ba:6d:b3:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:0C:BB:5D:F0:52:22:AB:B1:DC:13:DB:72:BC:3E:96:95:5D:64:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.228.0/22
                IPv6:
                  2804:64a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269439

    Signature Algorithm: sha256WithRSAEncryption
         dc:25:d9:79:96:57:df:8e:61:ee:46:43:d1:86:61:9d:71:b2:
         f3:bd:36:ca:40:3a:6b:60:41:9a:ac:42:e8:b7:a1:17:66:46:
         56:51:07:14:e4:f7:0d:0f:c4:d3:89:86:27:a0:30:69:d4:d4:
         be:f8:38:3d:cc:f5:fe:0d:82:61:41:bb:ce:7b:bd:45:0d:b6:
         c6:91:2a:67:66:a9:a2:cd:35:7e:83:39:a2:21:ce:82:c0:6a:
         08:48:fd:7f:20:a8:6c:b9:96:da:38:7f:52:36:d3:9b:dc:6f:
         fc:ce:51:e8:41:2a:04:70:68:a3:c3:f8:07:b1:2a:e3:32:4e:
         a0:52:ed:be:92:23:f1:62:18:87:3b:14:7b:8d:63:d8:6a:b5:
         b5:ce:c1:2a:53:1d:e6:65:5d:36:a0:cf:5f:cf:05:dd:ce:7f:
         41:ef:cc:e2:49:99:51:ad:6e:9d:b4:84:08:2f:a1:fa:9b:b4:
         62:cf:9e:c1:dd:4e:cc:c9:50:48:af:42:08:10:75:29:3a:66:
         72:0f:c9:d2:9b:8f:bf:94:06:39:0c:49:c0:74:be:41:12:55:
         54:24:12:84:9a:b2:02:b7:23:a1:4b:ea:41:99:ba:5d:83:16:
         67:0d:87:7a:1f:f5:50:04:21:f0:94:ef:5f:f0:6f:3b:52:1d:
         42:52:d7:b7
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMABqieaiscKdtBvm6eHpp1obUQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNzMxMDlaFw0yNTA0MDMxNzM2MDlaMDMxMTAvBgNV
BAMTKDlFMENCQjVERjA1MjIyQUJCMURDMTNEQjcyQkMzRTk2OTU1RDY0OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz0CtrXP2Hhu+x0jkoxMv/GF3m
MVJdyQKCzhCMYptCLcirRlZHlRL8rCcXKJ+3X1c+DKx/T+k2betT74O9mLOft+A0
dQzcrDbY0rWZqai4YQ/AXAieHZiS9QEwLI1FlePxG1pIt24kea9IkLX9TL8CY/o2
EX1xN+MH3di4EptsLUxsNjeIa4WftDuS5Lxqk7Xh3lN6Lak9f6LzUOjSDeJ4LoKb
pLG5G/bfzrGxLjUINwMT0T6IdYY7h5mEuMi22zWwe72cPQVyenB5iP0c757nPRtY
GfrnugjQ301Ecbvb5h8Ywb+aaQfSD8bAENr79GCx5OrnTTZirqLVqbpts0TnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeDLtd8FIiq7Hc
E9tyvD6WlV1kjzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFlC
VUZDTmFBWW40RVVGNEJxUjc4NVBGaVlKZHlWalpRTFJkQmo1V1F4VVovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hZ
QlVGQ05hQVluNEVVRjRCcVI3ODVQRmlZSmR5VmpaUUxSZEJqNVdReFVaLzEvOUUw
Q0JCNURGMDUyMjJBQkIxREMxM0RCNzJCQzNFOTY5NTVENjQ4Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbrkMA0EAgACMAcDBQAoBGSgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQcfzANBgkqhkiG9w0BAQsFAAOCAQEA3CXZeZZX345h7kZD
0YZhnXGy8702ykA6a2BBmqxC6LehF2ZGVlEHFOT3DQ/E04mGJ6AwadTUvvg4Pcz1
/g2CYUG7znu9RQ22xpEqZ2apos01foM5oiHOgsBqCEj9fyCobLmW2jh/UjbTm9xv
/M5R6EEqBHBoo8P4B7Eq4zJOoFLtvpIj8WIYhzsUe41j2Gq1tc7BKlMd5mVdNqDP
X88F3c5/Qe/M4kmZUa1unbSECC+h+pu0Ys+ewd1OzMlQSK9CCBB1KTpmcg/J0puP
v5QGOQxJwHS+QRJVVCQShJqyArcjoUvqQZm6XYMWZw2Heh/1UAQh8JTvX/BvO1Id
QlLXtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org