Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.cer
File:                     D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.cer (raw, json)
Hash identifier:          E6HZoyruJLfEaaeqoQ4nHvhesw4y0szh9COd6kruuig=
Subject key identifier:   D3:93:B0:F5:EB:55:52:13:6D:6D:9C:1D:AC:00:12:8C:7C:E0:75:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1456DDCE4E65079262102D6D4D7E5ACDA85AEFF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jun 2024 18:56:40 +0000
Certificate not after:    Fri 20 Jun 2025 19:01:40 +0000
Subordinate resources:    AS: 268502
                          IP: 45.161.80.0/22
                          IP: 2804:5234::/32

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 14:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:56:dd:ce:4e:65:07:92:62:10:2d:6d:4d:7e:5a:cd:a8:5a:ef:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 21 18:56:40 2024 GMT
            Not After : Jun 20 19:01:40 2025 GMT
        Subject: CN=D393B0F5EB5552136D6D9C1DAC00128C7CE0750B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:7f:95:6c:00:80:d5:b9:e0:e2:4d:4d:bc:
                    33:65:2f:83:60:4e:cf:b1:dc:13:9c:7e:dc:79:90:
                    65:00:c2:96:02:e3:a2:ea:48:20:fc:2c:1d:1b:27:
                    74:45:d3:63:3b:c2:e3:6d:92:69:f0:fe:e0:07:26:
                    f8:0a:7c:ce:f8:cc:91:2a:5d:a8:26:ce:7b:ca:db:
                    84:3c:03:df:e3:28:63:69:01:e5:33:49:12:f0:f1:
                    51:df:e1:49:99:2b:c0:e5:0c:9c:6f:48:54:f6:4a:
                    05:45:1b:95:ee:4e:53:21:95:07:a4:c6:52:92:14:
                    26:8a:90:1f:6e:e9:f4:39:9b:a1:27:68:e4:6e:7c:
                    c7:49:60:80:16:85:7b:8c:92:00:e1:51:70:3c:25:
                    f1:4d:44:a0:50:05:87:6e:33:0a:63:71:03:49:ce:
                    59:df:37:2e:ed:ef:30:29:23:6d:26:e8:d4:5a:26:
                    21:c5:5e:54:61:a1:26:1c:93:72:ad:fc:84:96:d5:
                    c6:69:fc:3c:24:77:13:07:ea:ff:44:2b:79:29:e4:
                    df:19:12:5c:62:6d:ae:97:bc:2f:d6:1b:09:5a:0e:
                    40:05:14:f0:dc:3a:0e:0e:1d:2a:58:ae:84:55:a0:
                    4b:98:22:fe:c5:4a:1e:e7:2f:02:f1:8c:64:0e:6a:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:93:B0:F5:EB:55:52:13:6D:6D:9C:1D:AC:00:12:8C:7C:E0:75:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.80.0/22
                IPv6:
                  2804:5234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268502

    Signature Algorithm: sha256WithRSAEncryption
         85:28:1f:dc:dd:53:6d:21:0f:32:cf:35:de:b3:df:a6:6c:84:
         20:4a:66:1a:6e:e7:69:4e:b4:0d:b9:9e:34:ae:55:90:16:1f:
         13:79:8c:95:4e:75:3d:c8:ef:40:45:b7:42:32:43:e9:ad:13:
         e6:c8:c6:50:23:cd:57:6c:c3:ed:a6:03:4c:26:b2:43:40:13:
         2b:b5:29:4f:3c:d4:4d:0c:1b:2c:2f:4f:ea:9d:bf:f4:d2:86:
         b8:7e:ea:90:3c:62:bc:4f:42:69:df:44:0f:44:a9:0b:b5:ae:
         1e:c1:c1:71:1d:7f:aa:9c:10:5c:de:f7:98:1c:ed:d9:fd:5b:
         e1:c7:78:99:ab:53:34:44:fb:63:e5:f6:d7:29:0c:cf:68:8a:
         5a:51:7f:90:7a:21:b4:16:15:38:7e:83:7b:58:29:c9:79:53:
         45:ba:e6:28:1a:87:66:16:50:a9:f1:49:d6:37:05:59:56:f8:
         07:7f:29:2a:43:a9:5e:bc:c0:ae:03:77:2a:a0:68:3f:f9:8c:
         ea:b9:bb:cb:a1:e0:48:d1:b1:1e:59:32:90:36:dc:48:4b:ac:
         c1:27:47:26:85:59:46:58:f6:ba:d2:ae:f0:b7:70:f5:ba:b7:
         ae:26:ae:af:8c:d9:95:6c:dc:d6:05:6f:59:cb:45:46:a0:d0:
         fb:0a:fa:54
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFFbdzk5lB5JiEC1tTX5azaha7/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjExODU2NDBaFw0yNTA2MjAxOTAxNDBaMDMxMTAvBgNV
BAMTKEQzOTNCMEY1RUI1NTUyMTM2RDZEOUMxREFDMDAxMjhDN0NFMDc1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/n+VbACA1bng4k1NvDNlL4Ng
Ts+x3BOcftx5kGUAwpYC46LqSCD8LB0bJ3RF02M7wuNtkmnw/uAHJvgKfM74zJEq
XagmznvK24Q8A9/jKGNpAeUzSRLw8VHf4UmZK8DlDJxvSFT2SgVFG5XuTlMhlQek
xlKSFCaKkB9u6fQ5m6EnaORufMdJYIAWhXuMkgDhUXA8JfFNRKBQBYduMwpjcQNJ
zlnfNy7t7zApI20m6NRaJiHFXlRhoSYck3Kt/ISW1cZp/DwkdxMH6v9EK3kp5N8Z
Elxiba6XvC/WGwlaDkAFFPDcOg4OHSpYroRVoEuYIv7FSh7nLwLxjGQOaoARAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTk7D161VSE21t
nB2sABKMfOB1CzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkUz
UFhYTnRXNFpaSm56d3ZyeDE2cGZXQWZtekhhSkZVdXVTMWdGVDQ5UmIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JF
M1BYWE50VzRaWkpuend2cngxNnBmV0FmbXpIYUpGVXV1UzFnRlQ0OVJiLzAvRDM5
M0IwRjVFQjU1NTIxMzZENkQ5QzFEQUMwMDEyOEM3Q0UwNzUwQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaFQMA0EAgACMAcDBQAoBFI0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQY1jANBgkqhkiG9w0BAQsFAAOCAQEAhSgf3N1TbSEPMs81
3rPfpmyEIEpmGm7naU60DbmeNK5VkBYfE3mMlU51PcjvQEW3QjJD6a0T5sjGUCPN
V2zD7aYDTCayQ0ATK7UpTzzUTQwbLC9P6p2/9NKGuH7qkDxivE9Cad9ED0SpC7Wu
HsHBcR1/qpwQXN73mBzt2f1b4cd4matTNET7Y+X21ykMz2iKWlF/kHohtBYVOH6D
e1gpyXlTRbrmKBqHZhZQqfFJ1jcFWVb4B38pKkOpXrzArgN3KqBoP/mM6rm7y6Hg
SNGxHlkykDbcSEuswSdHJoVZRlj2utKu8Ldw9bq3riaur4zZlWzc1gVvWctFRqDQ
+wr6VA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:45:14 2024 by rpki-client on console-ams.rpki-client.org