Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.cer
File:                     C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.cer (raw, json)
Hash identifier:          AHXDYssxNVI6njxwi4ZUyvvDLXWwZ2YtJQBmWYn69eg=
Subject key identifier:   C2:B0:D6:82:8E:49:5E:CD:AB:60:D1:DE:0E:34:A7:A3:A2:A8:67:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7750C324D83518F184296BE08A829DFFBA56F8B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jul 2024 20:33:01 +0000
Certificate not after:    Fri 11 Jul 2025 20:38:01 +0000
Subordinate resources:    AS: 269523
                          IP: 45.188.68.0/22
                          IP: 2804:65ec::/32

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 23:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:c3:24:d8:35:18:f1:84:29:6b:e0:8a:82:9d:ff:ba:56:f8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 12 20:33:01 2024 GMT
            Not After : Jul 11 20:38:01 2025 GMT
        Subject: CN=C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:89:80:b2:e1:5b:94:b5:d1:4a:ea:3b:76:
                    82:19:a3:b7:4d:21:42:d2:22:fe:fb:dc:75:38:22:
                    22:a8:17:43:60:3f:b7:19:8e:55:a1:b3:83:29:a2:
                    0d:e4:01:3b:df:94:64:43:99:a0:d6:33:5b:c0:bc:
                    c2:2d:42:13:70:cf:f3:96:24:da:7c:23:2b:f0:ae:
                    3b:5e:55:a9:60:00:cd:df:eb:66:a3:55:01:33:a6:
                    4e:74:c4:5d:86:a1:99:eb:45:c0:29:36:34:c5:31:
                    86:69:41:3c:df:c6:9f:92:83:8b:de:7c:2b:7f:13:
                    08:33:4f:d3:65:1a:ff:6f:76:4e:a7:a2:f9:a4:83:
                    c2:83:88:89:90:88:1d:61:28:5a:38:64:36:e6:a6:
                    a6:01:be:2f:1e:53:93:ff:88:54:da:09:e2:46:04:
                    ea:5f:b9:a5:b1:98:81:66:21:09:cd:ab:ef:73:12:
                    f0:a3:1a:29:f9:39:42:45:63:dc:ab:6b:c1:08:87:
                    01:5f:39:66:20:d3:a6:cd:fa:d1:89:63:e1:12:85:
                    e8:4e:a6:de:e4:b1:f6:ce:f7:f9:45:84:91:c9:41:
                    79:32:0d:77:16:af:d6:84:9e:43:e0:9a:d9:0d:81:
                    f7:c9:07:ac:65:99:fe:52:ac:bb:67:a8:28:65:6d:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:B0:D6:82:8E:49:5E:CD:AB:60:D1:DE:0E:34:A7:A3:A2:A8:67:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22
                IPv6:
                  2804:65ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269523

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:1e:ed:b0:08:d6:64:d8:55:58:75:8a:65:f2:07:18:ef:
         fa:79:3c:fc:60:ee:ba:76:82:64:46:64:22:bb:bf:9e:cd:6d:
         0b:bc:0e:5b:28:6a:15:00:ef:16:68:04:89:e9:09:9b:74:45:
         6a:94:0a:ed:89:82:22:09:21:85:97:95:fc:8a:85:5c:8d:a4:
         4b:9e:98:b4:e3:3d:47:5d:12:32:d5:75:8e:84:ca:6b:7c:9a:
         5f:dd:e3:44:9c:5a:fc:58:20:19:e2:65:0a:94:58:b8:ef:5b:
         5d:0b:e0:1b:a4:36:4f:10:92:ce:4b:2b:fc:0b:9e:c1:92:6d:
         85:31:fa:d4:93:2a:7e:31:af:17:a9:c1:6d:80:45:0d:64:e8:
         12:d3:04:7c:47:52:55:bb:b2:c6:51:28:05:71:81:14:72:92:
         1a:e8:0e:6c:5a:d3:f0:31:2b:ed:55:98:13:30:ae:26:f3:84:
         a2:d4:7a:15:46:21:b5:cd:46:2e:1f:cc:16:41:9f:bb:78:60:
         d9:f3:25:5c:d1:0c:c4:01:d7:58:62:39:21:e3:3f:c6:d9:9d:
         47:ab:e9:a3:4f:f3:f4:e8:b2:26:0f:26:72:a1:77:1c:de:a4:
         26:35:7f:f3:ed:d1:7d:87:81:90:c3:ab:c5:c8:1a:b3:33:73:
         4a:c1:a4:37
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUd1DDJNg1GPGEKWvgioKd/7pW+LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTIyMDMzMDFaFw0yNTA3MTEyMDM4MDFaMDMxMTAvBgNV
BAMTKEMyQjBENjgyOEU0OTVFQ0RBQjYwRDFERTBFMzRBN0EzQTJBODY3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpYmAsuFblLXRSuo7doIZo7dN
IULSIv773HU4IiKoF0NgP7cZjlWhs4Mpog3kATvflGRDmaDWM1vAvMItQhNwz/OW
JNp8IyvwrjteValgAM3f62ajVQEzpk50xF2GoZnrRcApNjTFMYZpQTzfxp+Sg4ve
fCt/EwgzT9NlGv9vdk6novmkg8KDiImQiB1hKFo4ZDbmpqYBvi8eU5P/iFTaCeJG
BOpfuaWxmIFmIQnNq+9zEvCjGin5OUJFY9yra8EIhwFfOWYg06bN+tGJY+EShehO
pt7ksfbO9/lFhJHJQXkyDXcWr9aEnkPgmtkNgffJB6xlmf5SrLtnqChlbc6fAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCsNaCjklezatg
0d4ONKejoqhnUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkF0
SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQMUM0NGduZnVFUXQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JB
dEh5OTRQWnhldUg5OEpOeER6cnR1d3A3TDRIV0pwUDFDNDRnbmZ1RVF0LzAvQzJC
MEQ2ODI4RTQ5NUVDREFCNjBEMURFMEUzNEE3QTNBMkE4Njc1Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbxEMA0EAgACMAcDBQAoBGXsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc0zANBgkqhkiG9w0BAQsFAAOCAQEAZeQe7bAI1mTYVVh1
imXyBxjv+nk8/GDuunaCZEZkIru/ns1tC7wOWyhqFQDvFmgEiekJm3RFapQK7YmC
IgkhhZeV/IqFXI2kS56YtOM9R10SMtV1joTKa3yaX93jRJxa/FggGeJlCpRYuO9b
XQvgG6Q2TxCSzksr/AuewZJthTH61JMqfjGvF6nBbYBFDWToEtMEfEdSVbuyxlEo
BXGBFHKSGugObFrT8DEr7VWYEzCuJvOEotR6FUYhtc1GLh/MFkGfu3hg2fMlXNEM
xAHXWGI5IeM/xtmdR6vpo0/z9OiyJg8mcqF3HN6kJjV/8+3RfYeBkMOrxcgaszNz
SsGkNw==
-----END CERTIFICATE-----
Generated at Tue Sep 3 01:42:39 2024 by rpki-client on console-ams.rpki-client.org