Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6306F515BD6C2EF6956BDA4F31C75940F972320.cer
File:                     D6306F515BD6C2EF6956BDA4F31C75940F972320.cer (raw, json)
Hash identifier:          qxL84vbqxwUYqRnqZCWTRo+S/pQYMNJHZPUwXAenBuk=
Subject key identifier:   D6:30:6F:51:5B:D6:C2:EF:69:56:BD:A4:F3:1C:75:94:0F:97:23:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       384AAA6570B2BF82B8F75E500966E3045078488B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/D6306F515BD6C2EF6956BDA4F31C75940F972320.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jun 2024 16:52:53 +0000
Certificate not after:    Fri 06 Jun 2025 16:57:53 +0000
Subordinate resources:    AS: 52864
                          IP: 168.0.64.0/22
                          IP: 168.197.128.0/22
                          IP: 177.124.160.0/22
                          IP: 2804:10ec::/32

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 21:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4a:aa:65:70:b2:bf:82:b8:f7:5e:50:09:66:e3:04:50:78:48:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  7 16:52:53 2024 GMT
            Not After : Jun  6 16:57:53 2025 GMT
        Subject: CN=D6306F515BD6C2EF6956BDA4F31C75940F972320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:12:49:44:e4:81:f3:1e:f3:65:fd:64:9e:
                    2f:a2:37:08:25:52:52:35:ef:8c:2b:08:d5:3b:e4:
                    af:eb:39:6f:a1:48:6f:d4:47:f0:96:78:61:34:62:
                    29:a9:6c:14:32:07:58:fc:7e:87:0e:8d:56:f6:59:
                    a1:7a:6f:06:99:4b:aa:3f:97:02:fe:25:cf:08:68:
                    fa:a0:bc:a4:23:ff:36:79:42:11:96:aa:51:47:8f:
                    88:3b:c0:fd:3a:15:2e:e8:2b:50:b0:3e:bd:7a:dd:
                    b8:43:75:8d:72:37:a6:9a:c2:1f:72:fe:06:c0:a1:
                    88:80:15:59:24:29:a4:5c:26:ef:b0:d3:05:29:58:
                    e7:4d:fd:f3:66:58:8c:a8:5a:50:73:a3:c7:32:5f:
                    8b:10:0e:89:22:55:69:17:91:1b:42:a2:38:44:2d:
                    01:d8:8c:55:45:ed:43:c3:fc:ab:be:91:f5:56:31:
                    c1:b6:d1:74:09:59:0c:a7:9e:f3:45:b8:7a:07:81:
                    43:eb:f0:77:8b:f4:40:86:d5:0c:18:75:d5:f6:ca:
                    ba:11:31:1b:aa:35:5e:b4:5c:2c:17:71:84:1b:13:
                    1f:66:7d:ce:26:4f:91:5d:a6:50:af:f3:ea:e5:bc:
                    8c:85:f2:47:07:4d:b8:c1:18:3d:be:8d:d1:94:ac:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:30:6F:51:5B:D6:C2:EF:69:56:BD:A4:F3:1C:75:94:0F:97:23:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/D6306F515BD6C2EF6956BDA4F31C75940F972320.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.64.0/22
                  168.197.128.0/22
                  177.124.160.0/22
                IPv6:
                  2804:10ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52864

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:ff:d9:47:87:a9:93:4c:06:f4:9f:1d:23:fb:9d:67:bb:
         aa:2a:4c:3c:eb:9e:3b:29:bd:09:74:4e:16:0a:29:87:16:90:
         5f:5b:e4:49:ee:94:df:4c:67:bd:22:12:1e:3f:44:25:02:9f:
         61:76:2e:e7:0e:a1:63:b8:c5:fd:8f:e4:bf:8d:12:cc:31:86:
         03:a3:8b:19:eb:ac:9d:5a:69:64:3f:99:9f:ad:3f:6c:90:9a:
         c2:f1:3c:24:1c:53:f0:5e:f5:76:ba:18:37:56:7c:25:05:84:
         a6:7b:fe:7d:6a:9d:29:55:c0:d6:f1:09:40:31:26:da:b2:ae:
         2f:3c:a1:44:c1:64:be:a7:96:14:75:8d:e0:3b:ce:87:19:fb:
         24:bc:dd:c6:2a:6b:c2:04:22:db:2d:e5:b2:7a:2e:1c:70:5c:
         bf:fb:ec:69:82:2d:54:37:98:51:66:01:60:7d:64:f7:ff:ac:
         fd:70:49:89:ab:c6:e7:45:70:f2:50:3f:41:80:9f:a7:9d:a2:
         0c:f6:fb:2e:6e:af:cc:1d:5b:17:07:e0:d6:be:db:5d:f4:11:
         24:ae:d8:c2:31:36:63:43:54:76:da:4b:1c:3e:de:e1:7b:21:
         05:25:0b:2d:ce:1b:e4:e1:1c:79:d4:c3:9e:ce:4e:9e:6f:e3:
         03:5c:80:b6
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUOEqqZXCyv4K4915QCWbjBFB4SIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MDcxNjUyNTNaFw0yNTA2MDYxNjU3NTNaMDMxMTAvBgNV
BAMTKEQ2MzA2RjUxNUJENkMyRUY2OTU2QkRBNEYzMUM3NTk0MEY5NzIzMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7hJJROSB8x7zZf1kni+iNwgl
UlI174wrCNU75K/rOW+hSG/UR/CWeGE0YimpbBQyB1j8focOjVb2WaF6bwaZS6o/
lwL+Jc8IaPqgvKQj/zZ5QhGWqlFHj4g7wP06FS7oK1CwPr163bhDdY1yN6aawh9y
/gbAoYiAFVkkKaRcJu+w0wUpWOdN/fNmWIyoWlBzo8cyX4sQDokiVWkXkRtCojhE
LQHYjFVF7UPD/Ku+kfVWMcG20XQJWQynnvNFuHoHgUPr8HeL9ECG1QwYddX2yroR
MRuqNV60XCwXcYQbEx9mfc4mT5FdplCv8+rlvIyF8kcHTbjBGD2+jdGUrO9FAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWMG9RW9bC72lW
vaTzHHWUD5cjIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjVR
TEtub21OV25kYWJhd25YWmJIU2RBMkNCbTVjM3VSOXltdkNzaThQbVgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y1
UUxLbm9tTlduZGFiYXduWFpiSFNkQTJDQm01YzN1Ujl5bXZDc2k4UG1YLzAvRDYz
MDZGNTE1QkQ2QzJFRjY5NTZCREE0RjMxQzc1OTQwRjk3MjMyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCqABAAwQCqMWAAwQCsXygMA0EAgACMAcDBQAoBBDs
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDOgDANBgkqhkiG9w0BAQsFAAOCAQEA
G87/2UeHqZNMBvSfHSP7nWe7qipMPOueOym9CXROFgophxaQX1vkSe6U30xnvSIS
Hj9EJQKfYXYu5w6hY7jF/Y/kv40SzDGGA6OLGeusnVppZD+Zn60/bJCawvE8JBxT
8F71droYN1Z8JQWEpnv+fWqdKVXA1vEJQDEm2rKuLzyhRMFkvqeWFHWN4DvOhxn7
JLzdxiprwgQi2y3lsnouHHBcv/vsaYItVDeYUWYBYH1k9/+s/XBJiavG50Vw8lA/
QYCfp52iDPb7Lm6vzB1bFwfg1r7bXfQRJK7YwjE2Y0NUdtpLHD7e4XshBSULLc4b
5OEcedTDns5Onm/jA1yAtg==
-----END CERTIFICATE-----
Generated at Thu Oct 10 22:45:50 2024 by rpki-client on console-ams.rpki-client.org