Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer
File:                     A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer (raw, json)
Hash identifier:          gTDOcpeMCWgslDWyFuMWHiUR3yYRjjenX1UlySZtnLE=
Subject key identifier:   A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5ACC441DC53B29B97E24E4268D9522F9E015EC11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jul 2024 19:19:26 +0000
Certificate not after:    Thu 17 Jul 2025 19:24:26 +0000
Subordinate resources:    AS: 264047
                          IP: 143.137.220.0/22
                          IP: 2804:29f4::/32

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 14:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cc:44:1d:c5:3b:29:b9:7e:24:e4:26:8d:95:22:f9:e0:15:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 18 19:19:26 2024 GMT
            Not After : Jul 17 19:24:26 2025 GMT
        Subject: CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:0e:f5:e0:08:00:6b:eb:e8:69:69:c3:0e:
                    45:be:9d:2e:b1:d0:85:35:c9:67:ad:cb:fa:96:08:
                    7f:27:b8:22:90:72:96:b2:90:7c:02:90:65:66:20:
                    fd:8d:45:f3:fb:22:ef:be:c5:96:04:f2:6c:aa:55:
                    a5:9f:61:8f:19:cd:a3:2b:03:c6:90:b8:85:97:e4:
                    ac:5f:bc:b2:1a:de:dc:a8:d5:ed:b9:bc:83:78:4f:
                    95:0e:c2:92:fd:0c:11:3b:26:74:3e:85:b5:da:e9:
                    cc:e9:01:4c:f6:e9:7b:be:9e:e4:4d:90:35:7f:d2:
                    3d:8f:f6:a7:d6:1c:d5:56:21:24:a9:8b:54:8e:23:
                    41:a6:4f:e2:f7:aa:ba:c2:df:a6:f4:47:5d:b0:26:
                    cc:19:84:35:8d:a5:3f:44:48:f1:83:84:c9:54:00:
                    de:75:e3:78:a1:82:1e:2d:d5:6f:98:c0:f1:40:cb:
                    93:34:0a:8d:2a:19:ff:15:a6:e0:d1:5b:24:b8:28:
                    97:89:fd:c7:49:37:a4:a3:c2:a8:8b:84:ac:99:8c:
                    6f:8a:f2:7b:22:4f:ae:36:62:a4:2f:0a:3f:10:1c:
                    4d:06:99:f1:57:77:49:9a:2d:32:70:65:63:ef:0d:
                    53:bd:bf:88:9c:a6:c0:55:af:c6:e1:ed:4e:40:1b:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/22
                IPv6:
                  2804:29f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264047

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:44:70:e0:62:c4:e2:cc:18:50:fb:d5:d4:16:32:c8:5e:
         40:95:8c:4d:cd:fb:a7:65:3d:7c:f2:c3:58:d9:a5:45:97:4f:
         24:e8:70:34:f2:27:f4:7a:11:c8:19:9b:f4:a5:be:84:86:0b:
         ad:91:5c:49:de:4b:6e:10:b3:54:9a:3b:8a:ea:3e:cf:20:a1:
         e8:88:ab:73:f7:0e:89:75:d1:3e:31:b2:31:e6:e4:c1:db:96:
         2c:b2:d1:2b:b5:19:f0:4a:60:06:88:43:75:3c:d2:33:6c:fe:
         ce:40:49:15:c7:45:8a:01:b9:4e:90:ae:f6:f9:75:c1:8c:84:
         c8:5b:1a:71:8e:41:36:d9:e7:05:63:99:5a:fd:90:fd:e1:47:
         bc:d7:4e:22:8b:e2:ca:25:28:eb:6c:71:ca:bd:3e:37:a3:df:
         de:7c:ac:e9:82:53:52:18:bf:25:ec:3a:09:bc:59:b4:f4:57:
         c9:ed:fb:4c:d9:20:c7:c6:87:a3:6a:e5:fa:6c:6a:ca:11:7a:
         24:db:85:6d:17:70:e4:d5:44:33:df:d1:74:00:61:34:be:72:
         98:f5:72:1d:77:16:40:cd:04:00:27:49:ef:83:87:4e:72:b4:
         d5:98:fd:8a:f0:95:5f:f3:be:31:20:66:fa:a2:42:63:b7:06:
         56:76:03:fb
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUWsxEHcU7Kbl+JOQmjZUi+eAV7BEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTgxOTE5MjZaFw0yNTA3MTcxOTI0MjZaMDMxMTAvBgNV
BAMTKEEyRTc1NTU2NkI0QkRGQTBFNzU4QjQyRDNENUY5OUE2RjA3NUEzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENg714AgAa+voaWnDDkW+nS6x
0IU1yWety/qWCH8nuCKQcpaykHwCkGVmIP2NRfP7Iu++xZYE8myqVaWfYY8ZzaMr
A8aQuIWX5KxfvLIa3tyo1e25vIN4T5UOwpL9DBE7JnQ+hbXa6czpAUz26Xu+nuRN
kDV/0j2P9qfWHNVWISSpi1SOI0GmT+L3qrrC36b0R12wJswZhDWNpT9ESPGDhMlU
AN5143ihgh4t1W+YwPFAy5M0Co0qGf8VpuDRWyS4KJeJ/cdJN6SjwqiLhKyZjG+K
8nsiT642YqQvCj8QHE0GmfFXd0maLTJwZWPvDVO9v4icpsBVr8bh7U5AG/hHAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSi51VWa0vfoOdY
tC09X5mm8HWjxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdF
akF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hWb2UvMjCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdF
akF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hWb2UvMi9BMkU3
NTU1NjZCNEJERkEwRTc1OEI0MkQzRDVGOTlBNkYwNzVBM0M1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKPidwwDQQCAAIwBwMFACgEKfQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBAdvMA0GCSqGSIb3DQEBCwUAA4IBAQCCX0Rw4GLE4swYUPvV
1BYyyF5AlYxNzfunZT188sNY2aVFl08k6HA08if0ehHIGZv0pb6EhgutkVxJ3ktu
ELNUmjuK6j7PIKHoiKtz9w6JddE+MbIx5uTB25YsstErtRnwSmAGiEN1PNIzbP7O
QEkVx0WKAblOkK72+XXBjITIWxpxjkE22ecFY5la/ZD94Ue8104ii+LKJSjrbHHK
vT43o9/efKzpglNSGL8l7DoJvFm09FfJ7ftM2SDHxoejauX6bGrKEXok24VtF3Dk
1UQz39F0AGE0vnKY9XIddxZAzQQAJ0nvg4dOcrTVmP2K8JVf874xIGb6okJjtwZW
dgP7
-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:13 2024 by rpki-client on console-fra.rpki-client.org