Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E75541AFB2132355032D6BE485091875DE54EDE.cer
File:                     9E75541AFB2132355032D6BE485091875DE54EDE.cer (raw, json)
Hash identifier:          0FlFAShFMZS5zYKwYcxCXREcTXIQCIYIQe3rvB0Dgpc=
Subject key identifier:   9E:75:54:1A:FB:21:32:35:50:32:D6:BE:48:50:91:87:5D:E5:4E:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE87A94573507BCF33E01BD3B813FED44EA2ED1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/9E75541AFB2132355032D6BE485091875DE54EDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 15:23:06 +0000
Certificate not after:    Mon 29 Sep 2025 15:28:06 +0000
Subordinate resources:    AS: 266406
                          IP: 170.81.120.0/22
                          IP: 2804:375c::/32

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 19:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:7a:94:57:35:07:bc:f3:3e:01:bd:3b:81:3f:ed:44:ea:2e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 15:23:06 2024 GMT
            Not After : Sep 29 15:28:06 2025 GMT
        Subject: CN=9E75541AFB2132355032D6BE485091875DE54EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:8a:1a:49:86:f5:58:68:97:47:f8:1a:92:
                    a6:c0:24:0a:a9:fa:2d:2f:eb:bf:1c:b4:51:50:0f:
                    d7:00:47:9b:ff:32:7a:af:ad:fa:c6:9a:24:4a:d8:
                    1e:12:3f:6a:6f:f9:97:90:08:c9:e6:43:b7:33:f9:
                    56:cc:69:71:fe:e1:ca:89:77:4e:eb:50:11:46:42:
                    d0:9b:50:67:49:36:15:5c:ac:f2:7a:90:58:76:e0:
                    92:08:c1:92:23:51:35:87:d2:dd:f1:30:2c:ca:83:
                    d3:e0:eb:e9:ce:46:4c:ba:7e:41:b1:65:9a:51:bd:
                    62:2a:26:58:71:a4:2d:72:9c:cc:e9:2d:a6:0b:de:
                    88:64:44:da:0a:18:34:59:9e:8f:a6:02:d5:6d:44:
                    50:bf:e7:09:22:38:0f:9c:40:a8:34:45:8b:e3:6a:
                    52:53:ad:05:92:dc:f5:65:42:10:09:31:07:6e:9b:
                    a0:63:28:ba:c0:e3:cf:e7:94:96:0b:99:bf:b3:94:
                    2e:66:59:c6:ed:23:30:74:cf:b7:cc:93:b6:9e:05:
                    0d:f1:31:22:36:6c:80:c1:03:71:92:e9:50:cd:0e:
                    b1:4c:d2:93:ef:1c:92:21:6e:b7:a6:91:cb:97:46:
                    41:29:be:56:6f:ee:2a:2b:17:e3:ae:db:5e:c2:5b:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:75:54:1A:FB:21:32:35:50:32:D6:BE:48:50:91:87:5D:E5:4E:DE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/9E75541AFB2132355032D6BE485091875DE54EDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.120.0/22
                IPv6:
                  2804:375c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266406

    Signature Algorithm: sha256WithRSAEncryption
         a7:82:9e:4f:d7:5b:84:5c:ed:81:35:a2:73:8e:62:ae:11:90:
         dc:c8:88:61:cf:50:cd:02:0f:f8:d8:14:f3:89:e1:29:39:9a:
         d6:78:20:05:2c:a7:e0:e0:8c:05:e3:80:ba:fb:49:6b:2f:4e:
         db:ee:93:da:7c:50:84:f1:74:cb:cd:18:97:5c:56:6e:1b:ae:
         45:94:11:3a:39:ec:39:5f:46:ae:cb:0a:99:5f:04:43:2f:ea:
         cd:bd:60:a0:3e:9e:86:4d:82:4d:92:c2:e8:2e:d6:c7:ee:63:
         96:ff:9e:65:e0:68:37:05:22:02:8b:7e:3a:56:87:54:23:61:
         3c:4b:fd:e3:6d:a3:70:a9:0b:63:2a:15:65:d0:2d:e1:de:9d:
         a4:54:01:27:d2:43:e8:4b:19:9e:45:2d:50:24:14:fc:bb:9d:
         14:82:28:2e:22:bd:53:1e:97:2a:17:a0:8a:03:a1:84:62:27:
         1d:b9:95:9f:85:c0:17:ee:47:03:f7:63:1c:17:4b:2c:5d:44:
         23:1a:47:e7:af:40:fb:4f:86:73:b4:58:fb:a7:b3:52:cd:85:
         c6:52:61:e9:ab:92:5f:c4:a6:09:0b:0a:d2:19:f4:d4:cc:51:
         46:5c:27:f7:08:35:82:17:8c:c7:0b:22:2a:48:fc:a7:3d:39:
         09:77:f3:e4
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUb+h6lFc1B7zzPgG9O4E/7UTqLtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAxNTIzMDZaFw0yNTA5MjkxNTI4MDZaMDMxMTAvBgNV
BAMTKDlFNzU1NDFBRkIyMTMyMzU1MDMyRDZCRTQ4NTA5MTg3NURFNTRFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDniIoaSYb1WGiXR/gakqbAJAqp
+i0v678ctFFQD9cAR5v/MnqvrfrGmiRK2B4SP2pv+ZeQCMnmQ7cz+VbMaXH+4cqJ
d07rUBFGQtCbUGdJNhVcrPJ6kFh24JIIwZIjUTWH0t3xMCzKg9Pg6+nORky6fkGx
ZZpRvWIqJlhxpC1ynMzpLaYL3ohkRNoKGDRZno+mAtVtRFC/5wkiOA+cQKg0RYvj
alJTrQWS3PVlQhAJMQdum6BjKLrA48/nlJYLmb+zlC5mWcbtIzB0z7fMk7aeBQ3x
MSI2bIDBA3GS6VDNDrFM0pPvHJIhbremkcuXRkEpvlZv7iorF+Ou217CW3k5AgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSedVQa+yEyNVAy
1r5IUJGHXeVO3jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlpp
UUdkNnVFM29pYnByeVk1NFNhZ25QaGdwc1dickh5dVh5N3Z3enlCbXIvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlpp
UUdkNnVFM29pYnByeVk1NFNhZ25QaGdwc1dickh5dVh5N3Z3enlCbXIvMC85RTc1
NTQxQUZCMjEzMjM1NTAzMkQ2QkU0ODUwOTE4NzVERTU0RURFLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKqUXgwDQQCAAIwBwMFACgEN1wwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBCmMA0GCSqGSIb3DQEBCwUAA4IBAQCngp5P11uEXO2BNaJz
jmKuEZDcyIhhz1DNAg/42BTzieEpOZrWeCAFLKfg4IwF44C6+0lrL07b7pPafFCE
8XTLzRiXXFZuG65FlBE6Oew5X0auywqZXwRDL+rNvWCgPp6GTYJNksLoLtbH7mOW
/55l4Gg3BSICi346VodUI2E8S/3jbaNwqQtjKhVl0C3h3p2kVAEn0kPoSxmeRS1Q
JBT8u50UgiguIr1THpcqF6CKA6GEYicduZWfhcAX7kcD92McF0ssXUQjGkfnr0D7
T4ZztFj7p7NSzYXGUmHpq5JfxKYJCwrSGfTUzFFGXCf3CDWCF4zHCyIqSPynPTkJ
d/Pk
-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:06 2024 by rpki-client on console-fra.rpki-client.org