Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C2570D6244208B182BEF831EA64C321F3A297F0A.cer
File:                     C2570D6244208B182BEF831EA64C321F3A297F0A.cer (raw, json)
Hash identifier:          +H1MnsfTSCTW2Az6DX9XvfW9c1SRUyJBKuLkIkuEnhE=
Subject key identifier:   C2:57:0D:62:44:20:8B:18:2B:EF:83:1E:A6:4C:32:1F:3A:29:7F:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62B8FD17FBA4CF0CE0EEF7E3625A6ADA470EAD6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/C2570D6244208B182BEF831EA64C321F3A297F0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 20:16:05 +0000
Certificate not after:    Tue 01 Jul 2025 20:21:05 +0000
Subordinate resources:    AS: 272164
                          IP: 2804:82e8::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 12:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b8:fd:17:fb:a4:cf:0c:e0:ee:f7:e3:62:5a:6a:da:47:0e:ad:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 20:16:05 2024 GMT
            Not After : Jul  1 20:21:05 2025 GMT
        Subject: CN=C2570D6244208B182BEF831EA64C321F3A297F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:f7:bc:a0:49:99:6a:a5:74:cc:70:d9:de:
                    69:d9:0d:4e:58:a0:68:43:67:65:52:e3:e6:7c:c2:
                    e8:fd:19:a8:78:21:92:1d:e2:87:38:4b:e3:d3:8b:
                    08:6a:28:32:01:bb:05:cf:24:20:88:2c:22:25:c2:
                    4f:e7:44:17:ea:73:39:35:af:73:54:b5:50:eb:ba:
                    34:7e:3b:31:e6:39:27:5d:f4:00:df:a5:b9:96:a2:
                    d9:e5:d1:09:fd:01:39:a3:ad:7e:eb:87:6d:83:6c:
                    03:41:c0:81:7a:12:42:a7:df:41:5c:85:e5:95:85:
                    a3:eb:23:f4:69:41:58:fe:67:04:af:4d:9e:82:a7:
                    55:53:77:27:d5:5a:3d:4e:11:fa:7b:29:5e:12:bd:
                    3e:a5:fa:8e:44:6c:15:c4:4e:da:8a:c1:c9:22:38:
                    dc:1c:00:1c:c6:fe:1e:93:56:7d:3b:78:6c:17:34:
                    ed:b2:96:c1:49:99:5d:cd:c8:d2:de:3e:cd:bf:c6:
                    92:72:68:9e:07:ef:1f:c8:f9:a1:40:82:81:cb:c6:
                    97:9a:cc:3e:59:de:79:69:51:c7:fd:f4:b8:27:a2:
                    a7:18:4e:00:15:6d:00:b7:27:dd:c5:ea:8a:94:6f:
                    46:ef:89:b5:a2:df:99:6a:91:30:b9:d4:fa:19:98:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:57:0D:62:44:20:8B:18:2B:EF:83:1E:A6:4C:32:1F:3A:29:7F:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/C2570D6244208B182BEF831EA64C321F3A297F0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272164

    Signature Algorithm: sha256WithRSAEncryption
         61:38:9f:02:12:a3:6f:cc:ef:cb:36:e5:f0:00:80:55:bf:73:
         8a:58:f8:3f:df:cb:4c:71:d9:b9:79:c8:8c:24:26:b4:55:22:
         ee:c8:ca:7f:0b:5c:e6:9e:d8:59:62:2c:09:b7:4c:db:be:7c:
         55:60:65:8e:45:f5:61:eb:f7:82:de:e3:9d:e7:c2:37:42:c2:
         06:0e:01:1d:36:8c:be:2c:bc:c7:5f:df:25:68:82:7f:68:87:
         73:c9:27:a1:4f:e9:91:39:e8:ba:61:40:6f:cc:3d:f6:5f:c8:
         b2:2c:26:4d:85:f9:64:08:15:2d:ac:63:7e:74:d7:67:3f:f2:
         39:ef:d0:f9:57:d7:ad:88:0e:9c:a0:49:ee:57:03:fe:69:d0:
         ba:31:aa:c1:a7:95:c0:5c:a9:40:37:3f:5c:8b:47:62:b7:a6:
         d7:cb:5a:e6:62:22:96:09:df:47:9e:91:9d:27:7b:9d:82:13:
         49:f3:ba:03:13:ea:f4:8c:8f:93:9b:da:1d:63:85:42:3f:06:
         52:2a:aa:e0:97:ab:37:f9:f7:72:5e:56:7d:7c:79:4f:c2:70:
         94:c9:59:76:1b:97:94:42:fc:e9:79:1e:ce:c1:7e:1c:4d:9d:
         98:c7:c9:10:2b:69:bf:7e:7c:ca:34:92:e0:c0:b0:fc:b2:5c:
         50:76:ae:b8
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUYrj9F/ukzwzg7vfjYlpq2kcOrW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDIyMDE2MDVaFw0yNTA3MDEyMDIxMDVaMDMxMTAvBgNV
BAMTKEMyNTcwRDYyNDQyMDhCMTgyQkVGODMxRUE2NEMzMjFGM0EyOTdGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfVfe8oEmZaqV0zHDZ3mnZDU5Y
oGhDZ2VS4+Z8wuj9Gah4IZId4oc4S+PTiwhqKDIBuwXPJCCILCIlwk/nRBfqczk1
r3NUtVDrujR+OzHmOSdd9ADfpbmWotnl0Qn9ATmjrX7rh22DbANBwIF6EkKn30Fc
heWVhaPrI/RpQVj+ZwSvTZ6Cp1VTdyfVWj1OEfp7KV4SvT6l+o5EbBXETtqKwcki
ONwcABzG/h6TVn07eGwXNO2ylsFJmV3NyNLePs2/xpJyaJ4H7x/I+aFAgoHLxpea
zD5Z3nlpUcf99LgnoqcYTgAVbQC3J93F6oqUb0bvibWi35lqkTC51PoZmPy5AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCVw1iRCCLGCvv
gx6mTDIfOil/CjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRU5B
c0FlQnZxc3NMdmdYa005anIzelRUQ1R5c2E1dm9OWXo0YnU0VnRtYmovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VO
QXNBZUJ2cXNzTHZnWGtNOWpyM3pUVENUeXNhNXZvTll6NGJ1NFZ0bWJqLzAvQzI1
NzBENjI0NDIwOEIxODJCRUY4MzFFQTY0QzMyMUYzQTI5N0YwQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASC6DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
JyQwDQYJKoZIhvcNAQELBQADggEBAGE4nwISo2/M78s25fAAgFW/c4pY+D/fy0xx
2bl5yIwkJrRVIu7Iyn8LXOae2FliLAm3TNu+fFVgZY5F9WHr94Le453nwjdCwgYO
AR02jL4svMdf3yVogn9oh3PJJ6FP6ZE56LphQG/MPfZfyLIsJk2F+WQIFS2sY350
12c/8jnv0PlX162IDpygSe5XA/5p0LoxqsGnlcBcqUA3P1yLR2K3ptfLWuZiIpYJ
30eekZ0ne52CE0nzugMT6vSMj5Ob2h1jhUI/BlIqquCXqzf593JeVn18eU/CcJTJ
WXYbl5RC/Ol5Hs7BfhxNnZjHyRArab9+fMo0kuDAsPyyXFB2rrg=
-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org