Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.cer
File:                     D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.cer (raw, json)
Hash identifier:          clf/ZOh08mkC2GZFLA+EzjCQQ4orCMcdie179qlmwYY=
Subject key identifier:   D4:10:BC:FC:F3:7E:A8:EB:76:A7:D3:DF:9C:B0:18:03:C2:83:D2:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74411C1FF0AF81617CDE20FAC98B56623F7E3B62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Aug 2024 13:15:06 +0000
Certificate not after:    Thu 07 Aug 2025 13:20:06 +0000
Subordinate resources:    AS: 264268
                          IP: 138.118.176.0/22
                          IP: 191.7.112.0/22
                          IP: 2804:2540::/32

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 17:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:1c:1f:f0:af:81:61:7c:de:20:fa:c9:8b:56:62:3f:7e:3b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  8 13:15:06 2024 GMT
            Not After : Aug  7 13:20:06 2025 GMT
        Subject: CN=D410BCFCF37EA8EB76A7D3DF9CB01803C283D292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:c7:22:e6:d0:ee:85:81:bf:ce:d6:22:b9:
                    d1:28:71:55:a8:87:07:d5:9a:89:5b:63:91:35:66:
                    c4:3d:08:f1:fe:ed:db:b9:2f:13:f8:4a:bf:c8:78:
                    35:b2:59:f3:2a:5c:fa:8a:42:73:27:d6:c1:0e:a4:
                    9c:ce:f0:1d:78:27:58:f4:61:d2:4f:61:a3:1e:14:
                    2c:05:2c:53:47:03:27:14:e8:24:7f:00:f7:7f:f8:
                    0a:7c:97:b8:ba:cf:1d:39:92:65:eb:e3:ba:78:5f:
                    59:f4:fa:e4:7b:ec:17:b9:ba:ca:36:f0:30:b9:ae:
                    40:b0:c2:19:8a:e4:fd:87:b0:92:da:c9:5a:a0:64:
                    a2:0f:31:21:df:31:92:f5:fc:c5:af:93:65:12:83:
                    57:fa:24:fb:4d:3d:a7:6e:aa:e8:f6:26:8b:30:51:
                    5e:72:68:e6:54:29:6d:b4:fa:9c:9f:f6:3b:e0:08:
                    14:b2:56:81:b4:27:85:fb:2e:94:26:60:15:47:b4:
                    ac:ac:44:24:b2:f6:40:9b:a1:94:9c:69:55:c0:35:
                    b6:69:cc:2a:fc:6a:b5:3e:6d:05:bb:2c:e7:c2:e3:
                    80:2d:cc:4f:0d:74:c2:d3:b0:25:6b:d5:f7:62:a0:
                    71:81:95:e4:b3:1b:6f:22:33:d4:08:5e:63:23:50:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:10:BC:FC:F3:7E:A8:EB:76:A7:D3:DF:9C:B0:18:03:C2:83:D2:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.176.0/22
                  191.7.112.0/22
                IPv6:
                  2804:2540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264268

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:8f:c5:90:7b:de:8d:72:2e:e5:d5:2c:fc:ba:0c:ee:9c:
         f6:86:63:49:d3:d9:23:10:e5:d6:7f:26:19:2e:83:90:70:67:
         af:e5:05:ee:58:be:a6:c3:72:18:29:a8:d2:70:ab:a8:e6:ba:
         6e:f1:32:91:11:81:63:dc:94:ab:72:c1:ae:b0:8e:b3:b6:3f:
         e1:01:65:a4:3b:78:a7:85:ec:e6:d8:b6:3c:bc:27:e2:dc:a1:
         a8:6e:59:7c:f0:95:53:14:f4:b2:73:ba:22:46:3e:68:d5:39:
         82:51:26:5c:75:b5:ee:82:14:52:9b:01:b7:51:90:96:aa:19:
         94:64:a5:c2:0a:e9:ea:b3:4f:87:12:bf:63:f9:e0:95:dc:5b:
         b0:6d:2f:90:1f:e0:b1:b0:53:7d:d4:1f:45:1b:b5:d6:61:8b:
         0b:e5:8b:4e:02:04:97:a7:21:47:e7:61:71:eb:12:97:ed:16:
         9f:4c:47:74:37:e5:af:e5:76:a3:9a:f8:be:3d:0b:e1:b3:25:
         6b:32:22:4d:cc:6f:5f:d7:f0:1a:a8:c8:60:8b:10:43:ee:6d:
         41:be:b4:c2:86:b3:b1:f3:5b:fc:0f:40:c3:1d:46:54:39:dd:
         ce:60:6f:3c:72:40:f2:5a:4e:50:aa:fb:36:a4:12:8e:35:97:
         a8:71:63:b2
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUdEEcH/CvgWF83iD6yYtWYj9+O2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDgxMzE1MDZaFw0yNTA4MDcxMzIwMDZaMDMxMTAvBgNV
BAMTKEQ0MTBCQ0ZDRjM3RUE4RUI3NkE3RDNERjlDQjAxODAzQzI4M0QyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jcci5tDuhYG/ztYiudEocVWo
hwfVmolbY5E1ZsQ9CPH+7du5LxP4Sr/IeDWyWfMqXPqKQnMn1sEOpJzO8B14J1j0
YdJPYaMeFCwFLFNHAycU6CR/APd/+Ap8l7i6zx05kmXr47p4X1n0+uR77Be5uso2
8DC5rkCwwhmK5P2HsJLayVqgZKIPMSHfMZL1/MWvk2USg1f6JPtNPaduquj2Josw
UV5yaOZUKW20+pyf9jvgCBSyVoG0J4X7LpQmYBVHtKysRCSy9kCboZScaVXANbZp
zCr8arU+bQW7LOfC44AtzE8NdMLTsCVr1fdioHGBleSzG28iM9QIXmMjUH45AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUELz8836o63an
09+csBgDwoPSkjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDd5
aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3MmtKbXZSTnpiOGsvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g3
eWhVRGZ1bjRYTEVBZXJ5NzFudTNqOHlTY0xtRTNqdzJrSm12Uk56YjhrLzEvRDQx
MEJDRkNGMzdFQThFQjc2QTdEM0RGOUNCMDE4MDNDMjgzRDI5Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCinawAwQCvwdwMA0EAgACMAcDBQAoBCVAMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQITDANBgkqhkiG9w0BAQsFAAOCAQEAgcKPxZB7
3o1yLuXVLPy6DO6c9oZjSdPZIxDl1n8mGS6DkHBnr+UF7li+psNyGCmo0nCrqOa6
bvEykRGBY9yUq3LBrrCOs7Y/4QFlpDt4p4Xs5ti2PLwn4tyhqG5ZfPCVUxT0snO6
IkY+aNU5glEmXHW17oIUUpsBt1GQlqoZlGSlwgrp6rNPhxK/Y/ngldxbsG0vkB/g
sbBTfdQfRRu11mGLC+WLTgIEl6chR+dhcesSl+0Wn0xHdDflr+V2o5r4vj0L4bMl
azIiTcxvX9fwGqjIYIsQQ+5tQb60woazsfNb/A9Awx1GVDndzmBvPHJA8lpOUKr7
NqQSjjWXqHFjsg==
-----END CERTIFICATE-----
Generated at Sat Aug 10 18:56:38 2024 by rpki-client on console-ams.rpki-client.org