Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
File:                     C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer (raw, json)
Hash identifier:          9Wmjy4qA7Nf54zfdJuFnQGilJXD/pjqHnO3CFFDeKIs=
Subject key identifier:   C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AD0FB3B168C2C476A309E08A0AFCC40A4DBC681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Nov 2024 11:57:05 +0000
Certificate not after:    Sat 15 Nov 2025 12:02:05 +0000
Subordinate resources:    AS: 265269
                          IP: 168.90.88.0/22
                          IP: 2804:2d40::/32

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:fb:3b:16:8c:2c:47:6a:30:9e:08:a0:af:cc:40:a4:db:c6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 16 11:57:05 2024 GMT
            Not After : Nov 15 12:02:05 2025 GMT
        Subject: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:fe:bc:96:72:52:ea:67:db:11:56:59:59:
                    bf:ea:cb:44:e0:5e:30:a7:55:70:d7:2e:1b:9f:1c:
                    61:d5:f6:bb:e0:c1:72:37:4b:2d:04:3d:5a:a1:d8:
                    8f:45:a2:7a:ee:36:1c:d8:58:e2:ad:a9:e6:4e:37:
                    57:ac:d1:e0:13:e4:ff:76:28:af:ca:a0:37:64:01:
                    c4:81:92:5b:7c:7e:da:68:ef:2d:e7:ef:b6:e0:45:
                    0e:18:63:6a:f9:86:04:d2:b5:ec:16:cb:a3:eb:f3:
                    74:22:0c:d2:43:55:1a:32:32:34:0a:63:80:73:35:
                    32:03:e9:8b:6a:e8:d9:b7:b0:c1:d8:fa:d9:bd:64:
                    94:cd:b5:e4:78:31:5d:d8:17:bb:54:6c:c6:57:d9:
                    e0:19:03:ad:66:23:58:e7:d3:33:7c:38:4f:d4:94:
                    77:ba:a7:b4:99:62:11:20:2a:70:6a:fb:31:b6:80:
                    53:ee:72:da:d0:44:7a:74:31:db:2c:4a:e2:1b:33:
                    3c:65:e0:de:ad:49:fb:ff:3e:7d:a5:32:68:ae:26:
                    72:62:65:f6:f7:54:ab:b8:e9:9f:9c:6f:9c:4e:52:
                    12:5b:25:4b:8f:13:0e:b8:6b:40:f4:93:67:db:d5:
                    31:d9:33:64:97:ce:13:7b:27:93:b3:dc:f4:cb:67:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22
                IPv6:
                  2804:2d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265269

    Signature Algorithm: sha256WithRSAEncryption
         50:48:4c:84:f3:11:83:6f:f5:e2:04:45:ae:d9:4d:81:d4:e5:
         ff:57:3b:ca:ef:e4:83:72:bb:71:0d:64:1d:b3:32:c3:00:1b:
         1d:fc:40:06:f9:43:24:7e:1b:05:cd:1f:40:68:18:14:14:63:
         cf:1a:a8:23:76:93:18:ad:ec:e3:d6:cf:c4:41:53:b9:43:c2:
         de:08:b3:2b:38:b1:22:2a:50:18:73:9e:34:61:b5:cd:75:80:
         a1:bd:18:13:a5:f1:f4:af:a2:bb:2e:23:b3:50:aa:42:de:b2:
         fa:ad:9e:9b:e7:a3:6a:7a:f5:61:bb:9e:b0:7c:95:10:1d:1a:
         5d:de:9e:3a:ab:5f:5d:35:b5:29:42:6e:26:55:58:bc:5f:52:
         13:4d:ba:02:b5:7a:a3:90:aa:84:48:c6:73:c8:16:02:b6:13:
         2b:a2:dd:71:d5:f4:fc:2e:b9:73:5f:68:f5:e5:2b:2e:33:49:
         65:1c:04:3c:9f:b2:72:b5:b1:fc:0e:ed:39:73:13:d4:fd:a6:
         b2:38:f4:a0:fe:67:41:c4:95:a5:1d:55:c2:45:08:a3:75:38:
         c0:e7:89:cc:c3:d7:da:97:05:88:b6:66:8e:9a:93:c5:3f:c6:
         35:e5:77:89:ea:10:53:2f:33:52:f9:8d:e0:37:e5:ee:3c:b0:
         85:dd:6e:11
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUKtD7OxaMLEdqMJ4IoK/MQKTbxoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMTYxMTU3MDVaFw0yNTExMTUxMjAyMDVaMDMxMTAvBgNV
BAMTKEMwRTdGNTZFNDM2MDA5QjhDMkQzMDJBRkFDNzk5NzhCRDkxM0JDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkP68lnJS6mfbEVZZWb/qy0Tg
XjCnVXDXLhufHGHV9rvgwXI3Sy0EPVqh2I9FonruNhzYWOKtqeZON1es0eAT5P92
KK/KoDdkAcSBklt8ftpo7y3n77bgRQ4YY2r5hgTStewWy6Pr83QiDNJDVRoyMjQK
Y4BzNTID6Ytq6Nm3sMHY+tm9ZJTNteR4MV3YF7tUbMZX2eAZA61mI1jn0zN8OE/U
lHe6p7SZYhEgKnBq+zG2gFPuctrQRHp0MdssSuIbMzxl4N6tSfv/Pn2lMmiuJnJi
Zfb3VKu46Z+cb5xOUhJbJUuPEw64a0D0k2fb1THZM2SXzhN7J5Oz3PTLZ2ytAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA5/VuQ2AJuMLT
Aq+seZeL2RO80jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Ju
SHFmcWt4SldNbmIxZWFpNGFxa3JHczVrS1NEaWpmYXBuSk11MlhvTHcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dy
bkhxZnFreEpXTW5iMWVhaTRhcWtyR3M1a0tTRGlqZmFwbkpNdTJYb0x3LzAvQzBF
N0Y1NkU0MzYwMDlCOEMyRDMwMkFGQUM3OTk3OEJEOTEzQkNEMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqFpYMA0EAgACMAcDBQAoBC1AMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMNTANBgkqhkiG9w0BAQsFAAOCAQEAUEhMhPMRg2/14gRF
rtlNgdTl/1c7yu/kg3K7cQ1kHbMywwAbHfxABvlDJH4bBc0fQGgYFBRjzxqoI3aT
GK3s49bPxEFTuUPC3gizKzixIipQGHOeNGG1zXWAob0YE6Xx9K+iuy4js1CqQt6y
+q2em+ejanr1YbuesHyVEB0aXd6eOqtfXTW1KUJuJlVYvF9SE026ArV6o5CqhEjG
c8gWArYTK6LdcdX0/C65c19o9eUrLjNJZRwEPJ+ycrWx/A7tOXMT1P2msjj0oP5n
QcSVpR1VwkUIo3U4wOeJzMPX2pcFiLZmjpqTxT/GNeV3ieoQUy8zUvmN4Dfl7jyw
hd1uEQ==
-----END CERTIFICATE-----
Generated at Sat Nov 16 14:43:01 2024 by rpki-client on console-ams.rpki-client.org