Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer
File:                     C21506A6156B7F8310321D898139CEE0A28D6935.cer (raw, json)
Hash identifier:          /ouwqK4X/CEar7grP3uAdYfL2LYbNCsWsuvh6HoM9po=
Subject key identifier:   C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2625E3FCB7383F344BA8ADF6B20BC6F82D7DD3E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:17:41 +0000
Certificate not after:    Thu 03 Apr 2025 07:22:41 +0000
Subordinate resources:    AS: 53195
                          IP: 187.121.144.0/21
                          IP: 201.87.240.0/20
                          IP: 2804:3a8::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 06:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:25:e3:fc:b7:38:3f:34:4b:a8:ad:f6:b2:0b:c6:f8:2d:7d:d3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:17:41 2024 GMT
            Not After : Apr  3 07:22:41 2025 GMT
        Subject: CN=C21506A6156B7F8310321D898139CEE0A28D6935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:63:09:aa:fa:e7:10:86:b0:81:fb:7d:cd:
                    0f:01:c0:7f:15:1e:b4:4c:2c:96:1d:62:de:77:43:
                    6b:ca:53:da:16:73:e1:7f:28:91:f5:7a:a2:e7:5f:
                    94:17:de:45:ed:ad:5d:ac:cd:69:d3:1e:55:a6:3d:
                    6b:8a:4e:a1:ff:76:a3:53:80:a9:4d:93:f3:43:53:
                    58:83:49:19:13:f1:9b:16:39:3c:ec:8d:97:6d:ed:
                    53:90:bc:91:ae:a1:8a:08:82:0b:01:8e:fb:24:24:
                    8a:ec:af:0f:b8:90:56:4b:f1:a7:b5:55:e2:ff:d2:
                    9b:3a:f6:a3:c4:9b:4c:29:64:a3:7e:aa:00:cb:7a:
                    91:04:6e:81:72:fa:d0:6e:f9:c2:96:46:17:23:40:
                    c2:6d:77:a7:8e:91:16:c1:a6:36:d7:53:ff:47:6a:
                    79:3e:52:b4:f3:55:20:28:bb:56:28:17:59:65:85:
                    95:f8:9d:4d:8e:d1:88:1e:01:d2:d0:74:c4:08:b3:
                    a4:95:d5:26:a7:ee:7a:ed:87:71:fd:09:26:42:18:
                    05:52:2d:e5:17:d6:7a:a6:57:00:11:e5:ae:b1:db:
                    4a:ce:03:4a:86:1d:65:4b:d3:91:16:01:09:99:db:
                    af:9a:61:dc:b7:f9:91:99:ef:12:55:cd:1c:3c:c1:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21
                  201.87.240.0/20
                IPv6:
                  2804:3a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53195

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:4d:0e:e3:c3:88:34:58:10:f2:d2:81:64:20:f3:4c:b5:
         c3:9a:bf:f7:69:df:0c:b8:d5:38:6d:24:28:f0:37:bd:36:b0:
         03:9b:f6:90:74:c3:49:5f:5c:f5:25:a0:c4:08:82:d3:40:ef:
         5b:ee:d3:b1:73:dd:d4:f6:22:1e:e9:90:36:c0:f6:21:1f:43:
         23:cb:7d:14:3e:18:f8:f0:f7:be:98:0e:e7:ce:8f:3b:5c:54:
         4d:f7:7a:13:66:f1:d6:0f:47:1a:35:98:32:1f:8d:1e:0e:8a:
         d2:25:08:f0:3f:7c:46:15:19:95:a2:69:cb:85:ea:db:9a:f3:
         ca:df:23:18:58:09:3b:08:b8:6a:e5:ab:94:9f:6d:1d:42:0a:
         c8:c7:47:28:86:e5:a5:0f:22:eb:c4:84:8d:e9:37:a8:2f:3b:
         02:b5:77:fd:a7:45:ad:7c:38:f7:cc:88:d6:18:4c:3e:83:c3:
         7c:d2:0b:44:76:cc:9a:b7:79:67:b5:06:04:5c:79:4e:73:a2:
         23:57:08:43:8e:07:0e:82:8d:c7:90:08:e0:3f:7c:52:61:d3:
         5d:4a:81:ba:02:90:32:17:94:35:4f:64:85:15:6e:8d:6a:56:
         0c:9d:49:61:c3:48:db:e8:30:37:49:f4:a7:f7:41:78:05:f7:
         24:a5:7a:28
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUJiXj/Lc4PzRLqK32sgvG+C190+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzE3NDFaFw0yNTA0MDMwNzIyNDFaMDMxMTAvBgNV
BAMTKEMyMTUwNkE2MTU2QjdGODMxMDMyMUQ4OTgxMzlDRUUwQTI4RDY5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5WMJqvrnEIawgft9zQ8BwH8V
HrRMLJYdYt53Q2vKU9oWc+F/KJH1eqLnX5QX3kXtrV2szWnTHlWmPWuKTqH/dqNT
gKlNk/NDU1iDSRkT8ZsWOTzsjZdt7VOQvJGuoYoIggsBjvskJIrsrw+4kFZL8ae1
VeL/0ps69qPEm0wpZKN+qgDLepEEboFy+tBu+cKWRhcjQMJtd6eOkRbBpjbXU/9H
ank+UrTzVSAou1YoF1llhZX4nU2O0YgeAdLQdMQIs6SV1San7nrth3H9CSZCGAVS
LeUX1nqmVwAR5a6x20rOA0qGHWVL05EWAQmZ26+aYdy3+ZGZ7xJVzRw8we/vAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCFQamFWt/gxAy
HYmBOc7goo1pNTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE1M
YkV4a21zclFUaTNHV3BaVTVnOXBob2dwYkdiNmhKbVg3WlYyVzJNU0ovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hN
TGJFeGttc3JRVGkzR1dwWlU1ZzlwaG9ncGJHYjZoSm1YN1pWMlcyTVNKLzEvQzIx
NTA2QTYxNTZCN0Y4MzEwMzIxRDg5ODEzOUNFRTBBMjhENjkzNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQDu3mQAwQEyVfwMA0EAgACMAcDBQAoBAOoMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDPyzANBgkqhkiG9w0BAQsFAAOCAQEAdS1NDuPD
iDRYEPLSgWQg80y1w5q/92nfDLjVOG0kKPA3vTawA5v2kHTDSV9c9SWgxAiC00Dv
W+7TsXPd1PYiHumQNsD2IR9DI8t9FD4Y+PD3vpgO586PO1xUTfd6E2bx1g9HGjWY
Mh+NHg6K0iUI8D98RhUZlaJpy4Xq25rzyt8jGFgJOwi4auWrlJ9tHUIKyMdHKIbl
pQ8i68SEjek3qC87ArV3/adFrXw498yI1hhMPoPDfNILRHbMmrd5Z7UGBFx5TnOi
I1cIQ44HDoKNx5AI4D98UmHTXUqBugKQMheUNU9khRVujWpWDJ1JYcNI2+gwN0n0
p/dBeAX3JKV6KA==
-----END CERTIFICATE-----
Generated at Mon Jul 15 08:34:29 2024 by rpki-client on console-fra.rpki-client.org