Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.cer
File:                     A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.cer (raw, json)
Hash identifier:          SzuV87sePfF7HFzlOyrno5oeRqywDlz/8ZXgfzcL7Oc=
Subject key identifier:   A4:C2:DF:8D:77:F6:DE:20:C7:1F:A6:2D:30:66:54:1A:14:0F:8B:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59B0B99C04B06033124D0E1119F9F2E4C0593113
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Oct 2024 23:33:52 +0000
Certificate not after:    Fri 10 Oct 2025 23:38:52 +0000
Subordinate resources:    AS: 262854
                          IP: 168.0.252.0/22
                          IP: 177.10.192.0/21
                          IP: 177.11.220.0/22
                          IP: 179.127.192.0/21
                          IP: 186.250.227.0/24
                          IP: 2804:109c::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b0:b9:9c:04:b0:60:33:12:4d:0e:11:19:f9:f2:e4:c0:59:31:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 11 23:33:52 2024 GMT
            Not After : Oct 10 23:38:52 2025 GMT
        Subject: CN=A4C2DF8D77F6DE20C71FA62D3066541A140F8B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:60:16:d5:cf:f4:1a:f5:f6:4b:01:70:4d:
                    7e:70:1f:aa:5e:74:d0:01:53:22:cb:b1:86:fe:1c:
                    30:31:10:c6:2f:7c:0e:46:b2:52:3b:6f:15:9a:e2:
                    53:7a:c4:2d:bd:39:4b:61:c1:9d:c1:47:26:61:ea:
                    2d:37:76:d5:dc:10:44:c3:0d:d2:3c:30:bc:a3:4a:
                    e6:13:1b:ac:e7:bf:e3:fe:ff:29:e5:96:ea:15:d1:
                    9f:74:20:86:c7:79:4c:b7:73:8d:50:eb:74:39:9c:
                    5c:15:35:33:04:d4:1b:bd:82:d7:a8:d3:43:f7:3c:
                    1c:4e:13:2a:5f:e0:74:e1:42:8c:9b:77:f2:95:cf:
                    d6:50:45:54:17:4c:b6:e5:08:56:7c:cd:f1:09:52:
                    ec:f7:c0:18:5f:ac:bf:23:c6:9b:9f:48:7b:fc:86:
                    e2:af:a4:52:9b:2f:ee:10:b8:79:cc:8f:63:3e:82:
                    f1:f6:0b:27:33:89:7a:64:26:8c:2f:52:e5:0e:e6:
                    bd:2c:f6:c0:04:09:67:85:3a:99:dc:30:f5:91:86:
                    24:1a:84:15:15:52:40:7e:a3:e6:56:68:cd:2e:d9:
                    7f:ef:59:2d:f5:6b:33:bf:b3:57:6f:91:68:fd:9b:
                    f4:7c:18:f5:ac:76:c8:79:9a:d1:8a:58:ad:ed:3d:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:C2:DF:8D:77:F6:DE:20:C7:1F:A6:2D:30:66:54:1A:14:0F:8B:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.252.0/22
                  177.10.192.0/21
                  177.11.220.0/22
                  179.127.192.0/21
                  186.250.227.0/24
                IPv6:
                  2804:109c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262854

    Signature Algorithm: sha256WithRSAEncryption
         00:7f:c3:c6:11:45:27:e7:75:06:10:ac:e8:73:ee:43:80:cf:
         bd:92:d9:6c:df:8f:43:dd:8c:07:bb:85:4a:50:16:a9:e3:77:
         b7:ea:fa:f5:13:2f:76:4f:fd:b6:7b:89:a2:f5:03:93:57:e9:
         ca:21:c9:11:ce:0b:f7:1f:a1:e6:1b:29:44:24:1b:f0:c7:24:
         d7:ca:9f:b3:79:ba:5c:d8:c1:71:69:bb:fd:0a:26:17:49:c1:
         b2:f9:0b:a1:f1:3b:2f:ee:89:6c:7c:a1:01:90:83:0e:82:17:
         5c:1b:53:5d:0e:65:6f:21:44:e1:04:36:8f:81:99:c4:b9:d8:
         c8:20:e5:72:98:e9:35:be:8b:eb:dd:3e:be:33:ee:50:a8:7a:
         da:c9:a9:24:5a:8e:5f:7d:b6:5b:39:df:49:0f:5c:0f:be:8b:
         7c:a0:ff:2e:c8:05:f2:e2:b3:f6:fe:df:ab:44:f1:9f:56:2c:
         a6:3d:2b:d9:5d:73:e2:38:5e:8e:4e:ee:d8:f1:d1:b7:6b:80:
         a6:96:f0:ea:b2:42:93:60:c5:11:fc:b6:77:24:53:d2:6f:3f:
         53:31:cb:16:d0:4c:aa:23:eb:0a:4a:63:a9:5c:56:f6:2b:01:
         56:8d:18:7b:b3:9a:37:5f:8a:2a:0f:57:83:19:03:42:b1:cb:
         e3:a5:6d:77
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUWbC5nASwYDMSTQ4RGfny5MBZMRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMTEyMzMzNTJaFw0yNTEwMTAyMzM4NTJaMDMxMTAvBgNV
BAMTKEE0QzJERjhENzdGNkRFMjBDNzFGQTYyRDMwNjY1NDFBMTQwRjhCMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HmAW1c/0GvX2SwFwTX5wH6pe
dNABUyLLsYb+HDAxEMYvfA5GslI7bxWa4lN6xC29OUthwZ3BRyZh6i03dtXcEETD
DdI8MLyjSuYTG6znv+P+/ynlluoV0Z90IIbHeUy3c41Q63Q5nFwVNTME1Bu9gteo
00P3PBxOEypf4HThQoybd/KVz9ZQRVQXTLblCFZ8zfEJUuz3wBhfrL8jxpufSHv8
huKvpFKbL+4QuHnMj2M+gvH2CycziXpkJowvUuUO5r0s9sAECWeFOpncMPWRhiQa
hBUVUkB+o+ZWaM0u2X/vWS31azO/s1dvkWj9m/R8GPWsdsh5mtGKWK3tPe6rAgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkwt+Nd/beIMcf
pi0wZlQaFA+LJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk5q
eng1VmRLS2ZWQThYNTRLWWpzQUJIc1lhRUF6YU43TTNNczJ4WFk3N1AvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZO
anp4NVZkS0tmVkE4WDU0S1lqc0FCSHNZYUVBemFON00zTXMyeFhZNzdQLzAvQTRD
MkRGOEQ3N0Y2REUyMEM3MUZBNjJEMzA2NjU0MUExNDBGOEIyNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCqAD8AwQDsQrAAwQCsQvcAwQDs3/AAwQAuvrjMA0E
AgACMAcDBQAoBBCcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQCxjANBgkqhkiG
9w0BAQsFAAOCAQEAAH/DxhFFJ+d1BhCs6HPuQ4DPvZLZbN+PQ92MB7uFSlAWqeN3
t+r69RMvdk/9tnuJovUDk1fpyiHJEc4L9x+h5hspRCQb8Mck18qfs3m6XNjBcWm7
/QomF0nBsvkLofE7L+6JbHyhAZCDDoIXXBtTXQ5lbyFE4QQ2j4GZxLnYyCDlcpjp
Nb6L690+vjPuUKh62smpJFqOX322WznfSQ9cD76LfKD/LsgF8uKz9v7fq0Txn1Ys
pj0r2V1z4jhejk7u2PHRt2uAppbw6rJCk2DFEfy2dyRT0m8/UzHLFtBMqiPrCkpj
qVxW9isBVo0Ye7OaN1+KKg9XgxkDQrHL46Vtdw==
-----END CERTIFICATE-----
Generated at Sun Nov 3 10:47:12 2024 by rpki-client on console-fra.rpki-client.org