Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.cer
File:                     A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.cer (raw, json)
Hash identifier:          uED40UBeEDlk3l4b4JEtOpaG+vq8JQyXW/oJ+LQyc4Q=
Subject key identifier:   A6:BB:4B:54:E7:D9:FB:3B:44:3F:45:2E:AA:DE:7B:B2:B8:84:17:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D71A79F7697C56AFFDDE56F805EED4484BAD965
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jul 2024 12:02:10 +0000
Certificate not after:    Thu 10 Jul 2025 12:07:10 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 07:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:71:a7:9f:76:97:c5:6a:ff:dd:e5:6f:80:5e:ed:44:84:ba:d9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 12:02:10 2024 GMT
            Not After : Jul 10 12:07:10 2025 GMT
        Subject: CN=A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:5c:60:55:ae:a5:2e:a2:4a:ea:03:0c:30:
                    b6:65:91:bf:49:55:21:9d:6a:69:84:6e:f3:a4:08:
                    48:73:87:cf:f8:38:e2:78:01:47:2c:b3:e9:fa:a3:
                    19:09:21:23:b8:c9:e7:64:4a:8b:17:52:65:0f:c3:
                    8a:08:e6:2e:be:a8:00:73:c3:5d:30:f9:5f:92:c3:
                    1f:af:48:42:44:61:73:ec:7a:7a:0f:f5:46:44:bb:
                    b1:6b:d4:04:81:5d:f8:ca:dc:c7:00:03:ed:06:ce:
                    9d:bf:87:e5:fe:cb:69:b4:d0:55:14:e7:21:6c:6b:
                    57:69:ad:28:3f:42:85:0f:b7:58:f3:44:3b:7e:8e:
                    87:df:78:c0:10:76:65:5d:1d:1f:6b:ec:ea:fa:e7:
                    da:35:1e:e9:8f:e9:53:73:11:10:4b:e6:ee:9f:ff:
                    38:26:a7:5a:e4:d4:81:39:11:69:3b:20:bd:77:e4:
                    ee:26:b9:8f:b9:41:57:9e:8c:95:68:00:86:2d:77:
                    1d:48:36:f2:eb:09:00:d0:fa:47:a2:c9:b6:d8:77:
                    21:a1:05:da:81:fa:14:c6:dc:65:31:76:46:59:80:
                    2c:f9:41:36:53:5a:b6:91:18:54:10:f1:61:90:d7:
                    74:f0:b5:d2:81:58:72:ef:87:3c:c6:e1:3c:40:77:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:BB:4B:54:E7:D9:FB:3B:44:3F:45:2E:AA:DE:7B:B2:B8:84:17:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:a3:40:4c:65:bd:66:36:16:78:28:3b:90:e8:7f:9c:15:
         ec:44:61:4c:64:6d:5f:f6:e9:ef:37:6b:c1:e4:79:8a:65:b9:
         4c:39:a7:c9:55:af:00:e1:cb:fe:79:3f:97:e3:16:11:3b:aa:
         3a:b2:38:93:36:ea:d6:f5:40:8e:ef:10:10:38:99:70:95:3e:
         6c:ed:8b:2d:cb:74:f8:e8:95:20:68:8c:3d:0e:78:ed:de:54:
         41:47:7c:13:20:23:5f:04:5c:15:e3:21:62:fc:f0:48:0e:54:
         65:e4:e7:1c:34:69:e9:6e:c3:e5:8e:57:2a:60:3c:35:f3:62:
         48:f4:9c:e8:f1:bb:86:bd:9f:a1:eb:07:66:26:9a:a7:e5:66:
         61:63:30:42:24:3a:1c:1d:98:38:11:d7:17:d9:f5:6d:e7:e9:
         d6:54:ff:8a:c5:83:bb:1a:45:02:f5:5b:fb:7c:b3:5a:e3:c0:
         d1:76:01:23:d5:c3:0e:ac:6d:b0:21:3f:36:f0:e3:ba:2a:dd:
         37:15:1b:bf:b4:f9:3a:fe:db:b9:71:bb:51:80:d2:8f:1a:03:
         3c:bb:31:be:f6:c4:d8:3e:93:91:8c:7f:7a:29:5f:5d:81:29:
         05:d4:f3:97:28:4d:3b:d6:83:b5:1e:6e:44:c6:c8:f9:47:6f:
         df:fb:5d:53
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfXGnn3aXxWr/3eVvgF7tRIS62WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTExMjAyMTBaFw0yNTA3MTAxMjA3MTBaMDMxMTAvBgNV
BAMTKEE2QkI0QjU0RTdEOUZCM0I0NDNGNDUyRUFBREU3QkIyQjg4NDE3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQFxgVa6lLqJK6gMMMLZlkb9J
VSGdammEbvOkCEhzh8/4OOJ4AUcss+n6oxkJISO4yedkSosXUmUPw4oI5i6+qABz
w10w+V+Swx+vSEJEYXPsenoP9UZEu7Fr1ASBXfjK3McAA+0Gzp2/h+X+y2m00FUU
5yFsa1dprSg/QoUPt1jzRDt+joffeMAQdmVdHR9r7Or659o1HumP6VNzERBL5u6f
/zgmp1rk1IE5EWk7IL135O4muY+5QVeejJVoAIYtdx1INvLrCQDQ+keiybbYdyGh
BdqB+hTG3GUxdkZZgCz5QTZTWraRGFQQ8WGQ13TwtdKBWHLvhzzG4TxAd8P5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmu0tU59n7O0Q/
RS6q3nuyuIQXBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUdO
ZjNTNGo3WXQ4cFZObXpHREszUmNXZTlWY25UUXBTR3ozcWoxWUtuVFcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VH
TmYzUzRqN1l0OHBWTm16R0RLM1JjV2U5VmNuVFFwU0d6M3FqMVlLblRXLzAvQTZC
QjRCNTRFN0Q5RkIzQjQ0M0Y0NTJFQUFERTdCQjJCODg0MTcwNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb9cMA0EAgACMAcDBQAoBEEUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPEjANBgkqhkiG9w0BAQsFAAOCAQEADYejQExlvWY2Fngo
O5Dof5wV7ERhTGRtX/bp7zdrweR5imW5TDmnyVWvAOHL/nk/l+MWETuqOrI4kzbq
1vVAju8QEDiZcJU+bO2LLct0+OiVIGiMPQ547d5UQUd8EyAjXwRcFeMhYvzwSA5U
ZeTnHDRp6W7D5Y5XKmA8NfNiSPSc6PG7hr2foesHZiaap+VmYWMwQiQ6HB2YOBHX
F9n1befp1lT/isWDuxpFAvVb+3yzWuPA0XYBI9XDDqxtsCE/NvDjuirdNxUbv7T5
Ov7buXG7UYDSjxoDPLsxvvbE2D6TkYx/eilfXYEpBdTzlyhNO9aDtR5uRMbI+Udv
3/tdUw==
-----END CERTIFICATE-----
Generated at Wed Aug 14 10:43:37 2024 by rpki-client on console-fra.rpki-client.org