Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B68DA7B706E25B61C60524C162EBC4FB58C73505.cer
File:                     B68DA7B706E25B61C60524C162EBC4FB58C73505.cer (raw, json)
Hash identifier:          VAeBQx1i5il+gPVQd69Owcif97A7cn+mtua8xnaQEaQ=
Subject key identifier:   B6:8D:A7:B7:06:E2:5B:61:C6:05:24:C1:62:EB:C4:FB:58:C7:35:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A568B2CCA66AC6C0811E23840384C3F91857B34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/B68DA7B706E25B61C60524C162EBC4FB58C73505.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 12:44:14 +0000
Certificate not after:    Fri 01 Aug 2025 12:49:14 +0000
Subordinate resources:    AS: 268704
                          IP: 45.171.88.0/22
                          IP: 2804:5978::/32

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 03:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:56:8b:2c:ca:66:ac:6c:08:11:e2:38:40:38:4c:3f:91:85:7b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 12:44:14 2024 GMT
            Not After : Aug  1 12:49:14 2025 GMT
        Subject: CN=B68DA7B706E25B61C60524C162EBC4FB58C73505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:30:ae:8c:aa:b8:ac:b8:bc:eb:d9:e4:59:
                    98:b3:97:20:bc:c5:1c:ae:71:8f:b1:29:45:fc:76:
                    33:c3:26:d4:fa:cb:a2:82:e2:3c:d8:db:90:04:5b:
                    e4:63:80:b1:49:74:30:56:e9:97:a2:e0:76:b8:bc:
                    64:30:38:51:81:34:53:6e:7c:e9:ce:3d:b5:fb:34:
                    2a:0e:17:09:b4:36:42:a1:41:e4:32:1d:e0:fb:ff:
                    5e:33:ec:4a:5e:33:a5:c1:6f:66:21:c1:58:e6:65:
                    44:d0:93:68:3e:9e:ed:72:0a:0c:ad:44:33:2d:59:
                    40:75:0d:b8:b5:32:a0:55:ef:56:21:b3:b1:dd:f0:
                    05:cc:37:20:14:55:9f:df:e6:96:80:c2:f7:67:28:
                    a1:46:88:8c:75:32:19:17:fa:ca:41:e1:ba:e7:8f:
                    5c:93:0d:b8:ca:45:ac:bb:c6:c7:00:72:11:5f:e2:
                    32:8f:f3:72:b9:61:a2:3e:18:e9:8d:30:0d:f4:2c:
                    5c:21:13:48:7d:96:4c:76:92:8e:f5:ee:18:3c:bb:
                    fa:00:8c:1f:9d:5d:46:57:a0:8b:f1:98:d1:b3:27:
                    69:5e:e2:31:84:6e:b6:44:bf:fc:95:a3:1e:46:49:
                    66:0c:fa:a0:01:4c:34:59:a6:aa:26:fd:22:e9:aa:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:8D:A7:B7:06:E2:5B:61:C6:05:24:C1:62:EB:C4:FB:58:C7:35:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/B68DA7B706E25B61C60524C162EBC4FB58C73505.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.88.0/22
                IPv6:
                  2804:5978::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268704

    Signature Algorithm: sha256WithRSAEncryption
         bc:19:e1:34:17:21:36:72:21:30:ca:b0:d5:e1:7c:d2:61:83:
         cc:88:cb:93:10:df:e0:68:32:81:0c:1f:0c:0a:d4:0d:aa:83:
         0d:c5:68:c1:d2:94:a7:c1:7b:48:8f:74:90:20:f7:88:92:eb:
         e9:e3:8b:a4:f9:49:19:85:b8:25:59:0c:76:01:ae:96:49:7a:
         7f:5b:09:5b:bd:8d:45:54:87:17:89:da:db:24:8f:82:28:a1:
         75:52:e8:65:12:f9:03:f7:41:5f:38:20:4e:5c:6d:bb:e0:f9:
         8b:78:c5:e6:27:70:f3:a5:2b:ef:6e:3c:3a:b7:98:14:25:a7:
         87:4e:40:99:60:7e:78:56:40:cd:91:96:53:34:dc:8e:82:27:
         a0:63:d5:ac:f0:de:16:1d:53:47:ba:83:1a:0d:ef:90:af:3d:
         22:23:11:a5:5e:cc:c0:66:83:83:ed:61:c4:bb:0b:d1:3d:d1:
         78:8a:ae:d3:70:ed:7b:fc:68:52:93:81:34:89:94:c5:68:9a:
         23:9e:48:d4:62:fe:ce:23:7d:31:f8:21:b2:06:d1:65:e2:48:
         10:c1:d0:48:d3:91:88:ab:12:f6:ae:92:f8:39:30:5e:e9:a9:
         41:af:dd:50:d1:b1:88:29:ce:15:52:a9:46:71:3c:53:3c:c7:
         ec:0b:44:e0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSlaLLMpmrGwIEeI4QDhMP5GFezQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDIxMjQ0MTRaFw0yNTA4MDExMjQ5MTRaMDMxMTAvBgNV
BAMTKEI2OERBN0I3MDZFMjVCNjFDNjA1MjRDMTYyRUJDNEZCNThDNzM1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazTCujKq4rLi869nkWZizlyC8
xRyucY+xKUX8djPDJtT6y6KC4jzY25AEW+RjgLFJdDBW6Zei4Ha4vGQwOFGBNFNu
fOnOPbX7NCoOFwm0NkKhQeQyHeD7/14z7EpeM6XBb2YhwVjmZUTQk2g+nu1yCgyt
RDMtWUB1Dbi1MqBV71Yhs7Hd8AXMNyAUVZ/f5paAwvdnKKFGiIx1MhkX+spB4brn
j1yTDbjKRay7xscAchFf4jKP83K5YaI+GOmNMA30LFwhE0h9lkx2ko717hg8u/oA
jB+dXUZXoIvxmNGzJ2le4jGEbrZEv/yVox5GSWYM+qABTDRZpqom/SLpqjdbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2jae3BuJbYcYF
JMFi68T7WMc1BTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWVr
YlhMcUZpWlZxcmdHTVlnS3ZCSEVMMk1vejZLbzdBdzNlQmV4Nk1FcFYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vl
a2JYTHFGaVpWcXJnR01ZZ0t2QkhFTDJNb3o2S283QXczZUJleDZNRXBWLzAvQjY4
REE3QjcwNkUyNUI2MUM2MDUyNEMxNjJFQkM0RkI1OEM3MzUwNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLatYMA0EAgACMAcDBQAoBFl4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZoDANBgkqhkiG9w0BAQsFAAOCAQEAvBnhNBchNnIhMMqw
1eF80mGDzIjLkxDf4GgygQwfDArUDaqDDcVowdKUp8F7SI90kCD3iJLr6eOLpPlJ
GYW4JVkMdgGulkl6f1sJW72NRVSHF4na2ySPgiihdVLoZRL5A/dBXzggTlxtu+D5
i3jF5idw86Ur7248OreYFCWnh05AmWB+eFZAzZGWUzTcjoInoGPVrPDeFh1TR7qD
Gg3vkK89IiMRpV7MwGaDg+1hxLsL0T3ReIqu03Dte/xoUpOBNImUxWiaI55I1GL+
ziN9MfghsgbRZeJIEMHQSNORiKsS9q6S+DkwXumpQa/dUNGxiCnOFVKpRnE8UzzH
7AtE4A==
-----END CERTIFICATE-----
Generated at Mon Aug 5 04:58:19 2024 by rpki-client on console-ams.rpki-client.org