Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.cer
File:                     A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.cer (raw, json)
Hash identifier:          g2FXfW9ow/lPFpLW3+qmYQ87LhNiR+VaA21pv/vwI1Y=
Subject key identifier:   A4:CC:1E:89:E3:27:97:2A:B3:16:12:1D:F9:E8:C6:C9:B5:EF:EE:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       681D123A29E1FD4DB81A9D1F50D138E59CC40A2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:40:31 +0000
Certificate not after:    Thu 03 Apr 2025 19:45:31 +0000
Subordinate resources:    AS: 266399
                          IP: 170.81.92.0/22
                          IP: 2804:3740::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1d:12:3a:29:e1:fd:4d:b8:1a:9d:1f:50:d1:38:e5:9c:c4:0a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:40:31 2024 GMT
            Not After : Apr  3 19:45:31 2025 GMT
        Subject: CN=A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:d7:1d:88:29:7e:5c:83:d9:f3:f5:9e:62:
                    25:a1:6c:93:35:cc:97:b2:68:1c:54:ce:23:7c:32:
                    12:f0:cc:67:3d:f7:63:6e:8b:52:16:db:59:c5:a0:
                    f6:8a:5f:dc:4e:75:a9:d9:3f:b6:35:3c:30:14:9d:
                    b8:ee:61:cd:81:a7:8f:e7:58:a0:a4:2e:de:c1:e4:
                    4c:82:04:a8:28:ea:b9:ef:b6:c4:34:3d:3c:a4:60:
                    74:64:94:b8:77:f7:57:3f:c4:22:b7:16:c5:db:ef:
                    65:21:95:c4:45:72:4b:7b:47:09:52:78:6e:f4:2e:
                    72:e4:28:8d:e8:77:44:7c:7b:e2:04:cb:75:04:d4:
                    40:ab:1d:4a:57:32:1b:28:2a:88:b8:2f:74:a0:b8:
                    8d:28:43:21:27:0c:74:a4:1b:03:bd:d8:b7:48:76:
                    ba:20:e3:fa:3e:c1:6d:76:9d:0d:d2:08:e1:8b:37:
                    f9:59:db:68:11:5e:a8:ef:96:6a:65:37:4d:d3:98:
                    5e:33:98:50:3b:20:a9:a3:1d:44:70:fc:5c:d5:39:
                    e7:1b:eb:7a:e1:51:7b:6d:6f:36:00:98:24:ea:e6:
                    1a:41:a5:6f:b3:ed:66:19:02:17:41:ab:2e:d3:4f:
                    2e:2c:de:cd:7a:70:6d:59:f9:93:68:9b:c3:ec:55:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:CC:1E:89:E3:27:97:2A:B3:16:12:1D:F9:E8:C6:C9:B5:EF:EE:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22
                IPv6:
                  2804:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266399

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:8c:53:98:fa:5d:b9:5a:fa:66:88:e9:c9:ab:01:4b:dc:
         18:0b:46:c0:16:49:6c:64:87:6d:c3:d3:2e:ea:8d:14:3b:6b:
         90:bd:81:a9:22:4e:0c:45:68:94:48:51:6d:4a:4f:28:32:85:
         43:d6:38:83:e7:9b:69:b2:2a:11:de:f1:10:4c:21:a7:a5:1b:
         7f:76:12:62:af:2e:0f:68:03:ec:aa:eb:2d:3a:59:9f:a4:3a:
         c8:b6:43:4f:86:39:e6:e2:ba:ec:df:42:15:a4:63:92:ea:d5:
         4a:29:d0:b8:8c:ce:8d:27:68:f9:cb:a6:e1:2c:13:ca:07:cc:
         e6:44:70:05:45:a3:c2:73:1b:59:e5:bc:cf:6c:ae:3b:88:6f:
         1b:63:ae:9e:52:cb:cd:66:45:f6:c7:b3:40:20:3c:9e:5e:39:
         42:34:c2:8d:a0:0e:43:c1:59:0e:96:60:6e:81:19:6b:5a:00:
         5f:92:08:32:1d:51:54:5b:fc:6b:3f:9c:6a:1f:9f:85:52:5b:
         90:c2:fd:82:61:ad:b4:51:28:60:3a:7e:85:33:07:88:39:0e:
         52:b7:2a:1e:9a:9d:fa:d2:9e:0c:87:2b:f0:21:37:28:59:5b:
         44:ac:9c:16:57:a7:26:82:c9:af:f9:7e:28:8d:25:3c:c1:4d:
         0c:e1:6d:f8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUaB0SOinh/U24Gp0fUNE45ZzECi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxOTQwMzFaFw0yNTA0MDMxOTQ1MzFaMDMxMTAvBgNV
BAMTKEE0Q0MxRTg5RTMyNzk3MkFCMzE2MTIxREY5RThDNkM5QjVFRkVFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLBtcdiCl+XIPZ8/WeYiWhbJM1
zJeyaBxUziN8MhLwzGc992Nui1IW21nFoPaKX9xOdanZP7Y1PDAUnbjuYc2Bp4/n
WKCkLt7B5EyCBKgo6rnvtsQ0PTykYHRklLh391c/xCK3FsXb72UhlcRFckt7RwlS
eG70LnLkKI3od0R8e+IEy3UE1ECrHUpXMhsoKoi4L3SguI0oQyEnDHSkGwO92LdI
drog4/o+wW12nQ3SCOGLN/lZ22gRXqjvlmplN03TmF4zmFA7IKmjHURw/FzVOecb
63rhUXttbzYAmCTq5hpBpW+z7WYZAhdBqy7TTy4s3s16cG1Z+ZNom8PsVepFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkzB6J4yeXKrMW
Eh356MbJte/uxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnJp
UlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFkeHEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jy
aVJZM1JVWEExMXdQUVVlSk5TeDhYY1hmd1hXVEFhV0puc0hUZnJRZHhxLzEvQTRD
QzFFODlFMzI3OTcyQUIzMTYxMjFERjlFOEM2QzlCNUVGRUVDNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlFcMA0EAgACMAcDBQAoBDdAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQnzANBgkqhkiG9w0BAQsFAAOCAQEAQPeMU5j6Xbla+maI
6cmrAUvcGAtGwBZJbGSHbcPTLuqNFDtrkL2BqSJODEVolEhRbUpPKDKFQ9Y4g+eb
abIqEd7xEEwhp6Ubf3YSYq8uD2gD7KrrLTpZn6Q6yLZDT4Y55uK67N9CFaRjkurV
SinQuIzOjSdo+cum4SwTygfM5kRwBUWjwnMbWeW8z2yuO4hvG2OunlLLzWZF9sez
QCA8nl45QjTCjaAOQ8FZDpZgboEZa1oAX5IIMh1RVFv8az+cah+fhVJbkML9gmGt
tFEoYDp+hTMHiDkOUrcqHpqd+tKeDIcr8CE3KFlbRKycFlenJoLJr/l+KI0lPMFN
DOFt+A==
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:45:38 2024 by rpki-client on console-ams.rpki-client.org