Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4793794BA6A11E1363EDBEEFAEBB52F5505E39F.cer
File:                     A4793794BA6A11E1363EDBEEFAEBB52F5505E39F.cer (raw, json)
Hash identifier:          wKi5lNFTYWNjYy+5eHW1HzIRr5KUtE/3zPZWRAU5WHI=
Subject key identifier:   A4:79:37:94:BA:6A:11:E1:36:3E:DB:EE:FA:EB:B5:2F:55:05:E3:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B2025B01E91E0474EF8EC205AFECF495E68540A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/A4793794BA6A11E1363EDBEEFAEBB52F5505E39F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 17:16:38 +0000
Certificate not after:    Mon 30 Jun 2025 17:21:38 +0000
Subordinate resources:    AS: 268234
                          IP: 45.236.112.0/22
                          IP: 2804:4e04::/32

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 16:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:20:25:b0:1e:91:e0:47:4e:f8:ec:20:5a:fe:cf:49:5e:68:54:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 17:16:38 2024 GMT
            Not After : Jun 30 17:21:38 2025 GMT
        Subject: CN=A4793794BA6A11E1363EDBEEFAEBB52F5505E39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:3e:32:ad:9f:21:87:ab:84:e9:5e:48:73:
                    a3:73:43:f9:ec:ba:73:e5:9e:e4:3a:9c:5c:41:2d:
                    28:20:37:a6:6e:4c:29:b6:aa:42:81:75:20:a7:c2:
                    bd:b4:40:91:a2:66:3a:e8:19:86:55:f8:66:b1:29:
                    27:b1:d7:37:9c:8b:1e:b9:0a:5f:71:1a:fd:67:4c:
                    a2:a1:98:12:b6:1e:02:af:9a:ba:82:1f:61:e9:42:
                    66:50:3b:b6:ef:67:e8:8e:60:63:bb:d4:0a:b2:5f:
                    88:ca:e7:04:08:50:0f:18:39:92:28:33:65:e0:d2:
                    e4:47:45:fe:66:7a:1a:67:6c:96:ad:84:b0:11:2b:
                    75:4b:86:a9:7c:1c:e1:a0:ff:a8:03:43:11:4c:7c:
                    f6:b1:a4:13:2b:df:2f:22:18:0a:08:7a:5c:76:ee:
                    b0:52:2e:a7:a0:92:cc:ff:3c:f8:dd:7e:80:77:11:
                    df:57:3c:e3:c1:f6:b4:6f:c5:1c:b1:0c:80:6c:f8:
                    df:d9:1f:a9:08:6d:32:55:71:24:ab:89:30:38:e3:
                    b7:56:9e:ee:53:90:fe:5f:28:4d:3a:b0:01:47:f1:
                    ed:9b:d4:5c:ca:80:e3:b0:a5:7e:cd:ff:e1:00:7e:
                    51:88:fc:b8:3c:80:ed:72:43:f0:b4:b0:7f:c2:a2:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:79:37:94:BA:6A:11:E1:36:3E:DB:EE:FA:EB:B5:2F:55:05:E3:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/A4793794BA6A11E1363EDBEEFAEBB52F5505E39F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.112.0/22
                IPv6:
                  2804:4e04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268234

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:75:7e:23:5f:03:a9:d6:4a:b6:5e:8e:12:09:18:34:13:
         36:c2:94:d9:82:dc:73:53:22:d2:1d:a9:ea:2a:f8:af:01:a7:
         e1:e5:37:c4:81:d5:66:7c:ae:fb:f1:4b:ad:57:97:f4:6d:5e:
         db:d7:a9:94:52:03:47:53:9e:04:34:98:f9:04:e1:4e:f3:a4:
         3c:dd:33:6e:81:48:10:07:cc:92:00:d9:54:63:99:60:0e:a0:
         65:0b:fc:f7:5a:30:b6:f9:81:64:a2:59:38:e3:3a:de:13:57:
         2e:47:e2:64:59:c5:8d:cc:08:8e:bc:f5:7f:e0:32:18:b6:93:
         52:67:f7:5f:a5:5c:71:8c:8d:56:a0:cb:19:bc:c5:81:c1:ba:
         c3:f1:59:be:7e:5a:b9:d6:8d:c5:88:b2:7c:6a:36:90:21:96:
         72:15:12:cf:c1:a7:67:69:6e:a5:27:4e:53:9d:ce:0a:99:50:
         74:bf:b8:51:7d:61:bf:ec:bc:88:41:9c:d3:63:6d:72:22:45:
         1f:ac:62:49:a6:df:3c:73:b9:69:e3:88:46:c5:ce:f2:ed:57:
         2f:c1:c6:0f:92:68:96:af:da:f6:ff:76:be:08:61:67:c5:34:
         dc:2a:36:23:3f:ee:7a:3a:ee:30:b4:8d:81:70:76:8e:29:df:
         15:37:dc:c2
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUayAlsB6R4EdO+OwgWv7PSV5oVAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDExNzE2MzhaFw0yNTA2MzAxNzIxMzhaMDMxMTAvBgNV
BAMTKEE0NzkzNzk0QkE2QTExRTEzNjNFREJFRUZBRUJCNTJGNTUwNUUzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuT4yrZ8hh6uE6V5Ic6NzQ/ns
unPlnuQ6nFxBLSggN6ZuTCm2qkKBdSCnwr20QJGiZjroGYZV+GaxKSex1zecix65
Cl9xGv1nTKKhmBK2HgKvmrqCH2HpQmZQO7bvZ+iOYGO71AqyX4jK5wQIUA8YOZIo
M2Xg0uRHRf5mehpnbJathLARK3VLhql8HOGg/6gDQxFMfPaxpBMr3y8iGAoIelx2
7rBSLqegksz/PPjdfoB3Ed9XPOPB9rRvxRyxDIBs+N/ZH6kIbTJVcSSriTA447dW
nu5TkP5fKE06sAFH8e2b1FzKgOOwpX7N/+EAflGI/Lg8gO1yQ/C0sH/ConEZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkeTeUumoR4TY+
2+7667UvVQXjnzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMldm
S0Fya0pmMW9VNjQ1Z2Y0YXhGalZXbjhGajl6bkpBVXJReFo1dlJWWUgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJX
ZktBcmtKZjFvVTY0NWdmNGF4RmpWV244Rmo5em5KQVVyUXhaNXZSVllILzAvQTQ3
OTM3OTRCQTZBMTFFMTM2M0VEQkVFRkFFQkI1MkY1NTA1RTM5Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLexwMA0EAgACMAcDBQAoBE4EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXyjANBgkqhkiG9w0BAQsFAAOCAQEAin11fiNfA6nWSrZe
jhIJGDQTNsKU2YLcc1Mi0h2p6ir4rwGn4eU3xIHVZnyu+/FLrVeX9G1e29eplFID
R1OeBDSY+QThTvOkPN0zboFIEAfMkgDZVGOZYA6gZQv891owtvmBZKJZOOM63hNX
LkfiZFnFjcwIjrz1f+AyGLaTUmf3X6VccYyNVqDLGbzFgcG6w/FZvn5audaNxYiy
fGo2kCGWchUSz8GnZ2lupSdOU53OCplQdL+4UX1hv+y8iEGc02NtciJFH6xiSabf
PHO5aeOIRsXO8u1XL8HGD5Jolq/a9v92vghhZ8U03Co2Iz/uejruMLSNgXB2jinf
FTfcwg==
-----END CERTIFICATE-----
Generated at Thu Jul 4 17:49:26 2024 by rpki-client on console-fra.rpki-client.org