Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer
File:                     CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer (raw, json)
Hash identifier:          n7pX1PKxYfBKaUBS5syWzoWSwlIaOvjTbRtOkC+30hI=
Subject key identifier:   CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       083929FAB7E657C5CEB8CDD26F003C5066E1B205
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:54:40 +0000
Certificate not after:    Thu 03 Apr 2025 07:59:40 +0000
Subordinate resources:    AS: 268936
                          IP: 45.175.240.0/22
                          IP: 2804:5ce0::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 04:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:29:fa:b7:e6:57:c5:ce:b8:cd:d2:6f:00:3c:50:66:e1:b2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:54:40 2024 GMT
            Not After : Apr  3 07:59:40 2025 GMT
        Subject: CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:80:99:31:a4:8f:ec:b4:32:44:24:c7:a5:
                    f8:4d:af:f4:90:e5:2c:ac:fb:08:84:85:88:6f:94:
                    4d:3e:e7:3d:d1:e6:64:5d:28:e5:ab:bc:44:41:74:
                    5d:39:a5:c2:ca:ed:06:23:08:35:68:f7:9e:38:cd:
                    fb:1f:39:e9:c6:95:2c:08:a4:79:52:26:b2:b6:3e:
                    be:49:5a:1f:4d:5d:14:f9:b4:91:ae:c6:b6:6e:2b:
                    2d:09:b2:73:57:15:92:db:1e:81:aa:89:1f:87:57:
                    28:21:21:e6:55:3c:85:25:64:dd:f1:22:20:ca:2d:
                    76:cc:9b:1b:03:bb:dc:78:e6:2f:c1:ee:11:ac:d9:
                    d6:2d:e4:ee:46:56:9c:e1:90:44:2e:11:f9:4e:5f:
                    3e:93:a1:d5:bf:85:f9:43:d9:e0:6b:78:10:13:2e:
                    8f:22:cc:9e:bb:b8:51:0d:6d:ca:22:54:ac:6c:36:
                    c4:78:cf:ad:f9:7f:8f:0c:6a:cc:c2:0e:55:d4:b2:
                    6d:bb:37:6b:a2:d4:45:a7:d3:d7:8b:2d:43:c8:93:
                    93:f9:5c:23:8d:2e:a1:cd:eb:28:31:a2:eb:67:58:
                    c2:60:9a:f8:24:f5:5a:65:11:0f:88:48:02:30:69:
                    44:96:75:eb:de:8e:6b:cd:c2:fd:38:a3:c9:9a:e1:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.240.0/22
                IPv6:
                  2804:5ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268936

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:8f:29:1b:6b:da:a5:4e:7d:e8:c3:83:9c:7e:d7:87:04:
         ef:2c:3d:c8:80:fc:85:a1:93:4c:c6:c8:85:d2:0f:83:63:2e:
         b6:b6:3b:1e:bf:c0:54:b6:33:67:76:46:1c:04:be:8b:97:1e:
         fe:e0:24:be:75:79:68:bb:9a:6a:d2:fe:f8:ec:59:9d:b2:2f:
         86:52:0d:67:7e:d3:b5:9c:5a:3a:c7:c7:b1:92:c2:97:14:5a:
         f8:36:85:c4:19:92:eb:9b:f3:58:f9:a1:ba:db:33:7e:25:db:
         0c:0c:6a:56:0d:c1:7a:26:35:ac:be:20:8b:42:82:fb:93:9c:
         ed:ce:2d:7e:08:75:cb:f7:fa:27:65:cb:45:e4:0f:55:f3:26:
         82:66:3c:b6:77:fd:4f:53:9a:9a:ac:69:76:2b:3c:59:3d:72:
         0c:8d:92:1d:be:5f:87:07:10:f7:8b:3f:ef:45:71:3f:81:f6:
         27:21:a7:f1:f0:92:38:b7:d8:c2:64:23:00:df:9b:2b:57:1e:
         74:71:1f:f6:68:63:50:8a:0e:24:bb:fb:d5:d1:44:17:34:a7:
         2d:9d:9f:c2:29:98:69:19:4a:bb:e9:05:61:a7:bc:81:1a:7b:
         88:0c:51:fe:2e:00:4f:5e:b1:20:94:25:45:f1:8c:e4:bc:ff:
         c3:91:41:72
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCDkp+rfmV8XOuM3SbwA8UGbhsgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzU0NDBaFw0yNTA0MDMwNzU5NDBaMDMxMTAvBgNV
BAMTKENDNzREN0ZGRUREMjJCNDY0NTkwQjhGQTlBMTNCRjNBQTFBRTEyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLoCZMaSP7LQyRCTHpfhNr/SQ
5Sys+wiEhYhvlE0+5z3R5mRdKOWrvERBdF05pcLK7QYjCDVo9544zfsfOenGlSwI
pHlSJrK2Pr5JWh9NXRT5tJGuxrZuKy0JsnNXFZLbHoGqiR+HVyghIeZVPIUlZN3x
IiDKLXbMmxsDu9x45i/B7hGs2dYt5O5GVpzhkEQuEflOXz6TodW/hflD2eBreBAT
Lo8izJ67uFENbcoiVKxsNsR4z635f48MaszCDlXUsm27N2ui1EWn09eLLUPIk5P5
XCONLqHN6ygxoutnWMJgmvgk9VplEQ+ISAIwaUSWdevejmvNwv04o8ma4YQ9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMdNf/7dIrRkWQ
uPqaE786oa4SIzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXBy
YVBFWjMzYzJWSlViMWhlUlY4NEt6VXh6NmJhYzlZMnE0QVplakpvNjMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlw
cmFQRVozM2MyVkpVYjFoZVJWODRLelV4ejZiYWM5WTJxNEFaZWpKbzYzLzEvQ0M3
NEQ3RkZFREQyMkI0NjQ1OTBCOEZBOUExM0JGM0FBMUFFMTIyMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa/wMA0EAgACMAcDBQAoBFzgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaiDANBgkqhkiG9w0BAQsFAAOCAQEAWimPKRtr2qVOfejD
g5x+14cE7yw9yID8haGTTMbIhdIPg2MutrY7Hr/AVLYzZ3ZGHAS+i5ce/uAkvnV5
aLuaatL++OxZnbIvhlINZ37TtZxaOsfHsZLClxRa+DaFxBmS65vzWPmhutszfiXb
DAxqVg3BeiY1rL4gi0KC+5Oc7c4tfgh1y/f6J2XLReQPVfMmgmY8tnf9T1Oamqxp
dis8WT1yDI2SHb5fhwcQ94s/70VxP4H2JyGn8fCSOLfYwmQjAN+bK1cedHEf9mhj
UIoOJLv71dFEFzSnLZ2fwimYaRlKu+kFYae8gRp7iAxR/i4AT16xIJQlRfGM5Lz/
w5FBcg==
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:40:40 2024 by rpki-client on console-fra.rpki-client.org