Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.cer
File:                     A7295431F9C859586A0B3D2EB4893FF4084176BD.cer (raw, json)
Hash identifier:          yOIJOEIdLqNaZjO8Jaf0mXvpoQzwXJ3cVcVClmBm5wg=
Subject key identifier:   A7:29:54:31:F9:C8:59:58:6A:0B:3D:2E:B4:89:3F:F4:08:41:76:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       179B351A27820F5086F4D7E46BF42F546B71B60E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:01:09 +0000
Certificate not after:    Thu 03 Apr 2025 00:06:09 +0000
Subordinate resources:    AS: 270776
                          IP: 200.39.140.0/22
                          IP: 2804:713c::/32

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 05:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:35:1a:27:82:0f:50:86:f4:d7:e4:6b:f4:2f:54:6b:71:b6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:01:09 2024 GMT
            Not After : Apr  3 00:06:09 2025 GMT
        Subject: CN=A7295431F9C859586A0B3D2EB4893FF4084176BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:41:c2:21:3f:30:09:92:ea:3b:6f:6d:ef:
                    90:50:a4:b1:0e:61:22:f0:51:03:81:05:7a:c6:fa:
                    54:3b:91:91:47:2e:b2:cb:2a:e4:29:84:6c:0e:01:
                    d9:9b:b8:a9:f5:67:0d:0f:67:d7:95:74:08:ba:17:
                    34:b7:83:a4:64:d2:5c:d9:6a:cd:43:08:85:9f:b6:
                    36:7f:b5:cb:c8:d9:94:7f:5c:2a:6f:2e:6d:de:41:
                    31:eb:78:c6:4c:05:77:c7:74:d0:9d:17:0a:bb:55:
                    44:98:9c:fe:63:b8:58:90:78:50:b6:3f:54:3a:5c:
                    cc:d1:d3:4f:8a:7d:e5:20:de:1c:c5:de:fe:f5:b8:
                    b3:63:a7:67:55:3e:35:ba:3b:97:3d:68:ea:6f:00:
                    7f:2e:64:0f:81:15:f5:f5:b5:92:0c:ba:03:46:a8:
                    ce:fe:b0:83:e2:a9:4d:69:5d:ed:14:6c:c8:89:bd:
                    31:8e:93:fd:58:b8:60:3f:0a:aa:e1:71:b2:e0:db:
                    54:40:5f:52:07:12:51:8f:3b:e9:3a:24:b5:9e:0d:
                    ee:16:f3:b7:4b:05:85:f2:9f:3d:39:2c:3f:7a:e6:
                    39:ac:22:d0:2e:6a:2e:02:a1:c3:c7:1b:3f:7f:e0:
                    06:cb:4e:41:71:74:00:05:b9:ac:ac:fc:45:44:81:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:29:54:31:F9:C8:59:58:6A:0B:3D:2E:B4:89:3F:F4:08:41:76:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.140.0/22
                IPv6:
                  2804:713c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270776

    Signature Algorithm: sha256WithRSAEncryption
         cf:e4:2f:d3:25:9d:07:68:9d:92:df:24:9c:61:de:76:12:28:
         91:2c:07:6c:bf:ad:d4:5d:08:89:09:cc:c3:74:40:ba:7e:00:
         77:72:67:c6:d8:84:29:e4:c7:f1:2a:e3:e2:25:48:25:f9:f6:
         8d:e9:fb:da:f4:74:ae:7b:74:04:18:34:d7:ad:35:68:3f:f5:
         9a:2d:f5:b0:aa:ef:43:77:6a:f2:5d:9e:f3:af:28:e7:02:5f:
         b5:d3:07:5c:fe:06:b0:fe:9a:5a:6f:27:07:55:52:51:ea:d2:
         e1:8f:19:15:07:d9:b4:75:65:d1:cb:e9:e9:17:42:a5:0b:b9:
         e9:0f:2c:52:35:2a:59:ae:8d:9b:c4:33:6a:af:00:57:83:f0:
         eb:fd:d2:a6:c2:64:9a:a7:39:9a:1b:67:0c:91:6c:f8:12:bb:
         23:f3:4b:9f:5c:45:48:ba:2b:0f:aa:51:85:cc:bf:2e:26:65:
         39:79:bc:64:cb:02:57:2a:d6:1a:98:b4:fb:75:fd:64:6f:77:
         7e:28:54:1d:a1:e6:36:5f:c0:d9:cd:9f:29:6f:fc:cf:e6:41:
         52:3c:95:ca:11:57:28:8a:69:e5:1e:04:53:17:a7:ba:7c:0f:
         4d:c9:f6:04:fd:34:50:b8:1b:b8:03:f6:07:ca:92:fb:a7:0e:
         aa:d6:d8:4a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUF5s1GieCD1CG9Nfka/QvVGtxtg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMDAxMDlaFw0yNTA0MDMwMDA2MDlaMDMxMTAvBgNV
BAMTKEE3Mjk1NDMxRjlDODU5NTg2QTBCM0QyRUI0ODkzRkY0MDg0MTc2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mUHCIT8wCZLqO29t75BQpLEO
YSLwUQOBBXrG+lQ7kZFHLrLLKuQphGwOAdmbuKn1Zw0PZ9eVdAi6FzS3g6Rk0lzZ
as1DCIWftjZ/tcvI2ZR/XCpvLm3eQTHreMZMBXfHdNCdFwq7VUSYnP5juFiQeFC2
P1Q6XMzR00+KfeUg3hzF3v71uLNjp2dVPjW6O5c9aOpvAH8uZA+BFfX1tZIMugNG
qM7+sIPiqU1pXe0UbMiJvTGOk/1YuGA/CqrhcbLg21RAX1IHElGPO+k6JLWeDe4W
87dLBYXynz05LD965jmsItAuai4CocPHGz9/4AbLTkFxdAAFuays/EVEgVxFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnKVQx+chZWGoL
PS60iT/0CEF2vTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2o5
RXhKeFA0OUNKN21XOFFUQ0FXRkdRNDhQeFNXYndNenc5ZG5LTmFNWGUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nq
OUV4SnhQNDlDSjdtVzhRVENBV0ZHUTQ4UHhTV2J3TXp3OWRuS05hTVhlLzEvQTcy
OTU0MzFGOUM4NTk1ODZBMEIzRDJFQjQ4OTNGRjQwODQxNzZCRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyCeMMA0EAgACMAcDBQAoBHE8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhuDANBgkqhkiG9w0BAQsFAAOCAQEAz+Qv0yWdB2idkt8k
nGHedhIokSwHbL+t1F0IiQnMw3RAun4Ad3JnxtiEKeTH8Srj4iVIJfn2jen72vR0
rnt0BBg01601aD/1mi31sKrvQ3dq8l2e868o5wJftdMHXP4GsP6aWm8nB1VSUerS
4Y8ZFQfZtHVl0cvp6RdCpQu56Q8sUjUqWa6Nm8Qzaq8AV4Pw6/3SpsJkmqc5mhtn
DJFs+BK7I/NLn1xFSLorD6pRhcy/LiZlOXm8ZMsCVyrWGpi0+3X9ZG93fihUHaHm
Nl/A2c2fKW/8z+ZBUjyVyhFXKIpp5R4EUxenunwPTcn2BP00ULgbuAP2B8qS+6cO
qtbYSg==
-----END CERTIFICATE-----
Generated at Sun Jul 28 07:26:17 2024 by rpki-client on console-fra.rpki-client.org