Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E5DD73DCDA3455C25B6F74D6FB56833C956360D.cer
File:                     9E5DD73DCDA3455C25B6F74D6FB56833C956360D.cer (raw, json)
Hash identifier:          /PCybIV1mAddiYxFbTgoDv8abF315xsP/AjcPwdSV4c=
Subject key identifier:   9E:5D:D7:3D:CD:A3:45:5C:25:B6:F7:4D:6F:B5:68:33:C9:56:36:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4607CD39CC320EF5AB7C6BFAD364DB2C7BB13B65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/9E5DD73DCDA3455C25B6F74D6FB56833C956360D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 18:54:26 +0000
Certificate not after:    Fri 08 Aug 2025 18:59:26 +0000
Subordinate resources:    AS: 52543
                          IP: 179.107.64.0/20
                          IP: 2804:e14::/32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 07:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:07:cd:39:cc:32:0e:f5:ab:7c:6b:fa:d3:64:db:2c:7b:b1:3b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 18:54:26 2024 GMT
            Not After : Aug  8 18:59:26 2025 GMT
        Subject: CN=9E5DD73DCDA3455C25B6F74D6FB56833C956360D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:3e:a4:d4:b2:f1:4d:2f:5d:bf:7a:dc:39:
                    b7:b8:e6:7a:e6:fb:e2:34:80:88:b4:09:7f:b9:de:
                    22:7f:b1:db:77:52:55:0e:b7:68:28:a7:aa:a2:d3:
                    6a:f2:57:e0:72:d1:df:74:f4:71:08:bb:92:46:2c:
                    0a:5b:55:3f:a1:30:b6:45:df:a1:04:d5:0d:3f:2b:
                    7e:04:91:e9:f1:ae:14:6a:16:9e:9b:f1:ee:11:be:
                    b6:0d:a9:05:2b:90:ff:d8:a9:77:70:cf:1c:88:f4:
                    8f:cd:b3:ae:cb:ac:2a:93:10:15:55:ea:d7:be:f3:
                    d9:36:32:ef:62:43:d0:98:b1:88:f8:1d:5e:cc:b5:
                    e3:91:39:3e:8e:00:b3:99:b1:a1:54:01:da:b2:39:
                    2c:26:91:b9:7d:52:ed:47:52:5e:a2:ea:16:2b:fe:
                    4a:29:fc:e0:87:94:39:88:71:01:b7:41:35:e0:b7:
                    1e:71:e2:ff:6d:87:8b:ed:4d:19:c5:17:f3:84:d3:
                    10:f7:c1:e8:8d:ba:5e:a8:b3:86:ff:58:55:c0:af:
                    8f:34:97:fc:45:6e:7b:d0:d7:6c:5b:66:a9:67:3f:
                    dc:04:db:ce:33:5c:b5:c1:6b:09:62:a1:05:ea:d6:
                    9b:12:db:1b:83:ed:87:91:60:dc:d6:02:86:7a:73:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:5D:D7:3D:CD:A3:45:5C:25:B6:F7:4D:6F:B5:68:33:C9:56:36:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/9E5DD73DCDA3455C25B6F74D6FB56833C956360D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20
                IPv6:
                  2804:e14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52543

    Signature Algorithm: sha256WithRSAEncryption
         9d:45:b4:97:ba:d0:1a:0e:05:bc:65:45:3f:a9:07:5a:d6:dc:
         9c:35:65:f3:75:63:1c:eb:a8:42:ae:4d:13:f5:5f:45:46:d8:
         ff:cc:d0:12:f8:08:03:7d:ae:af:54:eb:c4:9a:55:83:36:ad:
         f4:dd:c7:f9:90:ac:5b:39:72:4b:6f:1b:e2:be:e1:29:98:59:
         8f:20:25:e9:9b:b9:57:e7:c2:b0:aa:46:38:f4:47:26:99:c8:
         2e:de:ef:7e:68:b1:46:da:78:95:87:62:48:98:d0:ce:bb:6a:
         c4:3d:44:4f:bc:46:7a:ed:10:8c:bc:09:9d:7b:87:1e:77:a8:
         0f:fa:a7:01:b8:88:4b:c6:05:11:e2:18:16:38:d8:0e:c3:68:
         85:68:e4:7e:b4:e3:40:ff:40:61:1c:88:5f:e2:92:15:96:44:
         01:6e:dc:08:02:e4:16:73:77:d2:b3:57:de:c2:1b:06:b9:3c:
         95:89:13:4c:66:b8:b1:e9:eb:e9:23:34:f9:94:a1:57:9a:c0:
         da:31:5d:5d:b8:84:e2:5f:fe:bd:a1:55:d0:11:a2:5d:13:da:
         0a:86:23:0b:4a:eb:54:9c:35:77:d1:e1:25:d9:47:fa:64:f4:
         a9:3b:de:84:fd:ad:1e:c0:1c:f7:2a:cf:de:49:2d:c8:db:b9:
         15:e2:82:18
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURgfNOcwyDvWrfGv602TbLHuxO2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDkxODU0MjZaFw0yNTA4MDgxODU5MjZaMDMxMTAvBgNV
BAMTKDlFNURENzNEQ0RBMzQ1NUMyNUI2Rjc0RDZGQjU2ODMzQzk1NjM2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+D6k1LLxTS9dv3rcObe45nrm
++I0gIi0CX+53iJ/sdt3UlUOt2gop6qi02ryV+By0d909HEIu5JGLApbVT+hMLZF
36EE1Q0/K34EkenxrhRqFp6b8e4RvrYNqQUrkP/YqXdwzxyI9I/Ns67LrCqTEBVV
6te+89k2Mu9iQ9CYsYj4HV7MteOROT6OALOZsaFUAdqyOSwmkbl9Uu1HUl6i6hYr
/kop/OCHlDmIcQG3QTXgtx5x4v9th4vtTRnFF/OE0xD3weiNul6os4b/WFXAr480
l/xFbnvQ12xbZqlnP9wE284zXLXBawlioQXq1psS2xuD7YeRYNzWAoZ6c8MbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeXdc9zaNFXCW2
901vtWgzyVY2DTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTZI
dG1RaTI5U3FRazh2dDdSNmhKOTc3VFBYQUNXbjRCdVhFY2FjRGpwcTkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E2
SHRtUWkyOVNxUWs4dnQ3UjZoSjk3N1RQWEFDV240QnVYRWNhY0RqcHE5LzAvOUU1
REQ3M0RDREEzNDU1QzI1QjZGNzRENkZCNTY4MzNDOTU2MzYwRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEs2tAMA0EAgACMAcDBQAoBA4UMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDNPzANBgkqhkiG9w0BAQsFAAOCAQEAnUW0l7rQGg4FvGVF
P6kHWtbcnDVl83VjHOuoQq5NE/VfRUbY/8zQEvgIA32ur1TrxJpVgzat9N3H+ZCs
WzlyS28b4r7hKZhZjyAl6Zu5V+fCsKpGOPRHJpnILt7vfmixRtp4lYdiSJjQzrtq
xD1ET7xGeu0QjLwJnXuHHneoD/qnAbiIS8YFEeIYFjjYDsNohWjkfrTjQP9AYRyI
X+KSFZZEAW7cCALkFnN30rNX3sIbBrk8lYkTTGa4senr6SM0+ZShV5rA2jFdXbiE
4l/+vaFV0BGiXRPaCoYjC0rrVJw1d9HhJdlH+mT0qTvehP2tHsAc9yrP3kktyNu5
FeKCGA==
-----END CERTIFICATE-----
Generated at Tue Nov 5 09:40:59 2024 by rpki-client on console-ams.rpki-client.org