Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer
File:                     B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer (raw, json)
Hash identifier:          99duu7ZjW7zEbfoJCtDWAw/FXXWxcpqPhzCUyOUcWWI=
Subject key identifier:   B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A6367A0C8F9260C7987C8CB18C3872788E5C867
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 17:50:46 +0000
Certificate not after:    Fri 01 Aug 2025 17:55:46 +0000
Subordinate resources:    AS: 52539
                          IP: 179.106.176.0/20
                          IP: 2804:3404::/32

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 05:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:63:67:a0:c8:f9:26:0c:79:87:c8:cb:18:c3:87:27:88:e5:c8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 17:50:46 2024 GMT
            Not After : Aug  1 17:55:46 2025 GMT
        Subject: CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:85:ef:cf:38:01:1d:01:fe:ca:27:8d:0d:
                    21:d9:87:f4:8d:ec:de:9b:b0:64:14:55:1a:c8:73:
                    5f:22:60:36:ba:dd:51:f5:ed:b1:2b:f7:91:94:ec:
                    51:c4:31:c0:fa:10:8e:3b:0c:17:a0:5a:1d:92:c8:
                    02:43:a6:7e:55:9c:f3:03:c7:cd:4b:f9:e9:7a:a5:
                    7b:de:6a:48:bd:e8:58:79:f8:85:a6:a1:f5:bc:7d:
                    73:e2:c8:1c:23:1e:b2:60:7e:e2:d4:df:02:bd:0b:
                    7b:02:71:a5:86:11:8c:c3:fc:7e:ac:44:23:72:15:
                    0e:3f:32:da:3f:3e:85:68:c9:a3:af:54:ed:d6:2f:
                    1e:dc:f6:95:87:b9:14:86:ea:87:4f:8d:b0:45:d0:
                    2c:14:e6:05:6a:02:c3:bb:5e:81:54:02:c8:41:18:
                    ea:e0:73:e7:44:4d:34:d6:02:ad:fd:ce:cf:95:3d:
                    d5:6e:a0:1c:13:37:d3:ee:fe:ed:50:be:61:5d:65:
                    d4:fc:25:b1:ff:cf:dd:9f:dc:76:57:45:5b:7b:13:
                    fb:69:6a:49:87:d4:46:18:ee:e3:3e:53:43:7c:db:
                    a0:c4:c5:d4:a1:d3:37:34:2a:d2:b5:a2:97:93:e4:
                    a4:8c:2c:2a:f4:92:30:98:65:b0:5c:99:88:fa:f7:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.176.0/20
                IPv6:
                  2804:3404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52539

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:c7:a8:20:b9:fd:ec:25:70:93:7d:a2:75:4e:77:bd:97:
         15:58:58:ee:d9:33:4d:06:d5:2e:fe:2d:70:51:22:b0:b9:6d:
         c4:82:a4:19:c9:4f:81:20:a5:96:b9:d6:fb:4e:e0:d0:c2:18:
         ec:bd:94:4f:b0:63:81:b3:47:d8:c8:7c:33:10:8c:50:da:1c:
         f8:20:45:df:0d:9c:bd:11:1e:72:80:a0:b7:cd:e5:64:e2:95:
         2f:20:62:b7:cd:d3:bb:f5:de:e5:71:a5:b5:a4:75:2b:2f:cb:
         60:a8:65:56:d1:56:62:dd:34:90:f5:20:b1:c0:73:83:01:a3:
         52:29:f5:7b:b6:de:a5:c1:ed:50:53:9f:8b:9a:93:56:84:8b:
         40:41:63:51:36:18:b6:b8:0c:94:27:2b:be:6d:2b:69:ff:65:
         2b:69:01:f4:8e:24:6e:af:d9:0a:23:df:e8:91:ce:a2:ee:9b:
         13:b0:2a:69:32:7f:fe:7b:2e:99:c5:48:15:69:15:85:68:b7:
         25:c2:90:d8:de:e8:e1:98:c2:9f:76:71:b7:01:24:77:f2:54:
         93:ea:60:87:d7:30:ba:41:ef:c0:8a:2e:ef:d1:c3:ac:e7:ea:
         da:63:45:c8:92:cc:10:36:04:43:5a:61:f8:7c:d8:53:85:8b:
         16:5a:52:73
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWmNnoMj5Jgx5h8jLGMOHJ4jlyGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDIxNzUwNDZaFw0yNTA4MDExNzU1NDZaMDMxMTAvBgNV
BAMTKEIxMjE0Q0JCMUQzODcyRTVEQTJGODI2MUY3NDI3NzJCODhDQzNCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvIXvzzgBHQH+yieNDSHZh/SN
7N6bsGQUVRrIc18iYDa63VH17bEr95GU7FHEMcD6EI47DBegWh2SyAJDpn5VnPMD
x81L+el6pXveaki96Fh5+IWmofW8fXPiyBwjHrJgfuLU3wK9C3sCcaWGEYzD/H6s
RCNyFQ4/Mto/PoVoyaOvVO3WLx7c9pWHuRSG6odPjbBF0CwU5gVqAsO7XoFUAshB
GOrgc+dETTTWAq39zs+VPdVuoBwTN9Pu/u1QvmFdZdT8JbH/z92f3HZXRVt7E/tp
akmH1EYY7uM+U0N826DExdSh0zc0KtK1opeT5KSMLCr0kjCYZbBcmYj694ydAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxIUy7HThy5dov
gmH3QncriMw7nTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG0z
TGNMNmI0WVZyRUZIc0ZOd0RrWnRNUzJwY2piaFEzNWZGYkRWRUNFZkEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzht
M0xjTDZiNFlWckVGSHNGTndEa1p0TVMycGNqYmhRMzVmRmJEVkVDRWZBLzAvQjEy
MTRDQkIxRDM4NzJFNURBMkY4MjYxRjc0Mjc3MkI4OENDM0I5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEs2qwMA0EAgACMAcDBQAoBDQEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDNOzANBgkqhkiG9w0BAQsFAAOCAQEAJ73HqCC5/ewlcJN9
onVOd72XFVhY7tkzTQbVLv4tcFEisLltxIKkGclPgSCllrnW+07g0MIY7L2UT7Bj
gbNH2Mh8MxCMUNoc+CBF3w2cvREecoCgt83lZOKVLyBit83Tu/Xe5XGltaR1Ky/L
YKhlVtFWYt00kPUgscBzgwGjUin1e7bepcHtUFOfi5qTVoSLQEFjUTYYtrgMlCcr
vm0raf9lK2kB9I4kbq/ZCiPf6JHOou6bE7AqaTJ//nsumcVIFWkVhWi3JcKQ2N7o
4ZjCn3ZxtwEkd/JUk+pgh9cwukHvwIou79HDrOfq2mNFyJLMEDYEQ1ph+HzYU4WL
FlpScw==
-----END CERTIFICATE-----
Generated at Tue Aug 27 07:57:22 2024 by rpki-client on console-fra.rpki-client.org