Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.cer
File:                     D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.cer (raw, json)
Hash identifier:          Uro4qXWfIBTvSRwxiWfDldAoFvGjQ3YH7Q5t6DEIiqs=
Subject key identifier:   D4:4F:32:5C:7D:B3:DE:67:D8:77:62:90:A6:F5:5A:F2:69:8F:FF:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C595A913FE41F5748DBBA64EFD3EBDA3C3D0499
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 14:31:13 +0000
Certificate not after:    Thu 24 Apr 2025 14:36:13 +0000
Subordinate resources:    AS: 270929
                          IP: 186.26.96.0/22
                          IP: 2804:73a8::/32

Validation:               Failed, certificate revoked on Sat 25 May 2024 04:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:59:5a:91:3f:e4:1f:57:48:db:ba:64:ef:d3:eb:da:3c:3d:04:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 14:31:13 2024 GMT
            Not After : Apr 24 14:36:13 2025 GMT
        Subject: CN=D44F325C7DB3DE67D8776290A6F55AF2698FFF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:28:3e:98:63:3e:f5:98:ae:0a:0a:fa:53:ab:
                    cd:08:8f:0e:6c:fc:1a:d7:61:a8:64:4f:b0:ed:5f:
                    b0:fc:07:0a:26:57:46:da:cc:1a:53:6e:d1:14:21:
                    c4:15:40:de:c8:b2:e8:10:de:f8:15:c0:66:c5:82:
                    e5:5a:b1:bf:45:54:65:e4:d6:ff:f8:ca:bd:79:e6:
                    8b:ee:26:71:ff:b7:98:ec:6f:4f:e7:21:0c:05:67:
                    6f:c5:76:63:bc:17:b6:d5:6b:cd:3f:ff:ac:c1:5e:
                    9b:cb:7f:cb:23:82:e1:65:f5:70:c7:8d:22:48:df:
                    ff:97:7d:e7:19:3a:25:3d:47:b8:5d:b3:8a:ca:a0:
                    54:d4:82:62:26:33:26:c9:ac:19:05:87:46:34:9c:
                    03:ae:94:5b:cb:bf:15:82:04:b8:28:6c:ca:16:dd:
                    79:2d:98:f5:40:aa:f1:98:72:eb:c1:d0:46:02:65:
                    76:b7:8f:92:c1:67:c9:e5:99:cd:2d:c5:fb:06:4b:
                    18:d4:d4:94:f7:ba:99:94:f0:8d:f6:83:d5:af:08:
                    3b:c8:a0:71:66:2d:e5:01:3e:f2:85:14:91:7f:7c:
                    93:08:30:42:8a:e8:a5:56:a0:4b:48:ec:f1:14:d4:
                    dd:f8:59:6a:ce:e5:3b:57:c7:fb:4e:b0:0b:39:75:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:4F:32:5C:7D:B3:DE:67:D8:77:62:90:A6:F5:5A:F2:69:8F:FF:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.96.0/22
                IPv6:
                  2804:73a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270929

    Signature Algorithm: sha256WithRSAEncryption
         94:c5:d8:4d:62:8a:88:cb:b3:b3:d4:c6:8b:38:a0:4a:c4:06:
         2b:2f:53:ab:66:91:5e:6f:cc:fe:56:15:e7:02:c5:e3:1a:8b:
         65:34:4f:cd:e1:d8:f9:ed:a3:02:00:86:25:e6:db:14:f2:81:
         40:0f:38:13:b2:31:2d:25:be:85:85:11:24:13:c7:80:78:23:
         57:2e:8f:aa:b3:92:3b:f3:f6:9a:9a:e9:ab:89:14:7b:71:e4:
         6d:f5:5a:ac:8b:81:64:65:c3:c7:c7:69:b5:2d:2a:5b:e8:be:
         19:cc:e8:8b:a1:f0:42:46:87:ed:f2:6e:4d:91:7b:c4:f5:4f:
         1c:35:25:27:e3:6d:4e:00:39:7d:98:84:46:27:2a:00:02:1e:
         07:d3:8d:d3:04:97:db:ed:59:33:52:43:f1:ae:0b:80:59:f9:
         fa:e2:bc:3e:8d:90:40:b3:52:11:4e:06:fb:ea:37:10:7b:97:
         f8:63:40:4b:41:43:d7:01:3c:3e:c9:8f:12:7b:b9:64:83:45:
         1b:93:42:4b:80:b9:8f:3a:9c:0a:5d:dc:a7:74:80:38:5e:c3:
         72:e1:a2:ac:b5:f3:ef:9d:16:1c:29:fd:da:39:aa:15:9b:4d:
         c9:d3:3b:ed:b4:cf:d5:b6:7d:b9:dc:f1:6b:1e:85:b5:5d:c6:
         3a:04:6f:83
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXFlakT/kH1dI27pk79Pr2jw9BJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjUxNDMxMTNaFw0yNTA0MjQxNDM2MTNaMDMxMTAvBgNV
BAMTKEQ0NEYzMjVDN0RCM0RFNjdEODc3NjI5MEE2RjU1QUYyNjk4RkZGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuKD6YYz71mK4KCvpTq80Ijw5s
/BrXYahkT7DtX7D8BwomV0bazBpTbtEUIcQVQN7IsugQ3vgVwGbFguVasb9FVGXk
1v/4yr155ovuJnH/t5jsb0/nIQwFZ2/FdmO8F7bVa80//6zBXpvLf8sjguFl9XDH
jSJI3/+XfecZOiU9R7hds4rKoFTUgmImMybJrBkFh0Y0nAOulFvLvxWCBLgobMoW
3XktmPVAqvGYcuvB0EYCZXa3j5LBZ8nlmc0txfsGSxjU1JT3upmU8I32g9WvCDvI
oHFmLeUBPvKFFJF/fJMIMEKK6KVWoEtI7PEU1N34WWrO5TtXx/tOsAs5dcfpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUTzJcfbPeZ9h3
YpCm9VryaY//nDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2lK
M3gxcTd3SjEyYVg1eTNCWFd3a2R2Z2doZlFKTnljMnZ4dVlWalFYOUovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdp
SjN4MXE3d0oxMmFYNXkzQlhXd2tkdmdnaGZRSk55YzJ2eHVZVmpRWDlKLzAvRDQ0
RjMyNUM3REIzREU2N0Q4Nzc2MjkwQTZGNTVBRjI2OThGRkY5Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuhpgMA0EAgACMAcDBQAoBHOoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiUTANBgkqhkiG9w0BAQsFAAOCAQEAlMXYTWKKiMuzs9TG
izigSsQGKy9Tq2aRXm/M/lYV5wLF4xqLZTRPzeHY+e2jAgCGJebbFPKBQA84E7Ix
LSW+hYURJBPHgHgjVy6PqrOSO/P2mprpq4kUe3HkbfVarIuBZGXDx8dptS0qW+i+
Gczoi6HwQkaH7fJuTZF7xPVPHDUlJ+NtTgA5fZiERicqAAIeB9ON0wSX2+1ZM1JD
8a4LgFn5+uK8Po2QQLNSEU4G++o3EHuX+GNAS0FD1wE8PsmPEnu5ZINFG5NCS4C5
jzqcCl3cp3SAOF7DcuGirLXz750WHCn92jmqFZtNydM77bTP1bZ9udzxax6FtV3G
OgRvgw==
-----END CERTIFICATE-----
Generated at Sat May 25 05:51:42 2024 by rpki-client on console-fra.rpki-client.org