Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D713714FFF775C83BC0B4BEE59B75675EED228CF.cer
File:                     D713714FFF775C83BC0B4BEE59B75675EED228CF.cer (raw, json)
Hash identifier:          M7ZkLVOW2ZSGvQB9Hr+CxN93MXMF1Weu18RQbhc0/RM=
Subject key identifier:   D7:13:71:4F:FF:77:5C:83:BC:0B:4B:EE:59:B7:56:75:EE:D2:28:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7598FB6E09465ADD5D183FADF646193CE10E67A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/D713714FFF775C83BC0B4BEE59B75675EED228CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 17:43:47 +0000
Certificate not after:    Thu 24 Apr 2025 17:48:47 +0000
Subordinate resources:    AS: 266349
                          IP: 170.238.232.0/22
                          IP: 2804:3674::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 23:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:98:fb:6e:09:46:5a:dd:5d:18:3f:ad:f6:46:19:3c:e1:0e:67:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 17:43:47 2024 GMT
            Not After : Apr 24 17:48:47 2025 GMT
        Subject: CN=D713714FFF775C83BC0B4BEE59B75675EED228CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:8d:64:62:81:6c:a5:55:e6:98:ed:c9:0c:
                    4c:46:37:09:9f:05:98:a3:36:a8:01:9f:f5:2d:ec:
                    91:f3:c5:c1:d9:b3:ba:45:f3:28:f3:12:df:4a:2b:
                    96:76:4a:f0:b9:e1:e9:35:78:a7:60:da:09:08:41:
                    d9:9d:be:2b:f0:16:e1:84:d4:ea:f8:3e:0a:61:cf:
                    bc:e2:12:53:c3:45:4d:6b:85:88:44:44:d1:9e:f1:
                    a0:4b:5a:e8:67:11:58:9a:e7:21:ca:27:cc:80:3c:
                    5e:83:52:3b:90:95:fb:3c:08:29:22:95:26:a3:a6:
                    f0:84:aa:fc:37:51:0c:22:6c:96:c2:5b:e4:4c:5d:
                    cd:39:01:15:41:f9:30:6b:f3:10:3a:81:3b:58:1f:
                    d5:25:a6:71:ed:22:6f:16:3f:82:78:29:c2:5a:1e:
                    7d:79:9c:f3:55:c1:e0:39:7b:c9:8e:b8:a8:8b:ca:
                    18:a7:ee:19:3c:60:aa:f9:48:2d:f4:a4:21:54:7b:
                    61:04:9e:02:86:c6:fa:34:47:30:ca:c0:89:29:7e:
                    bf:7e:d9:d7:1c:92:f1:32:04:fd:ac:10:d2:0b:3f:
                    e3:63:cb:01:43:98:d3:25:b9:0c:67:07:5f:30:63:
                    85:51:52:3e:4e:0e:53:f5:67:97:3c:64:ef:2e:11:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:13:71:4F:FF:77:5C:83:BC:0B:4B:EE:59:B7:56:75:EE:D2:28:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/D713714FFF775C83BC0B4BEE59B75675EED228CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.232.0/22
                IPv6:
                  2804:3674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266349

    Signature Algorithm: sha256WithRSAEncryption
         d0:b6:47:19:ff:f5:c2:0b:af:5e:83:68:23:7c:e9:ed:55:62:
         57:3d:ad:f6:a0:81:f5:a3:14:f6:cb:60:d7:0d:62:93:8f:de:
         94:44:49:d5:3a:50:b8:6f:a2:04:f4:f6:13:b4:c1:2d:d4:7f:
         79:26:1b:11:2a:eb:61:88:75:88:e6:79:1c:06:ba:8f:42:b7:
         08:3f:cc:9d:61:c0:5f:c5:0a:5b:bb:7a:1f:f7:13:c0:07:c0:
         b4:31:cc:9b:ac:73:97:ff:a7:d9:9b:fe:12:f0:b2:2c:7c:76:
         57:ea:fb:8f:25:ac:ea:cb:13:f6:53:f4:ab:4b:ab:2d:e3:2e:
         d1:98:e3:69:34:82:94:f3:35:e2:6e:f4:e3:70:be:15:6d:6d:
         7e:13:9c:7b:6f:06:37:5f:b9:2f:f1:25:8f:8a:69:7d:cd:9c:
         08:66:52:f0:92:6e:50:5b:42:78:05:a8:04:d4:96:c7:cc:75:
         21:c3:2d:2f:e0:f8:08:a7:fb:13:a4:a1:60:be:21:00:c1:6a:
         48:a4:0e:b8:24:6d:d6:c8:f9:06:05:de:fa:df:77:eb:13:a7:
         6d:4d:68:1a:0f:f1:4d:96:a8:82:0f:bb:d5:9d:cc:a8:ee:16:
         c0:7a:30:04:2a:74:fb:bc:16:7f:7d:39:2f:d2:27:a8:f2:2f:
         7d:97:0e:99
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdZj7bglGWt1dGD+t9kYZPOEOZ6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjUxNzQzNDdaFw0yNTA0MjQxNzQ4NDdaMDMxMTAvBgNV
BAMTKEQ3MTM3MTRGRkY3NzVDODNCQzBCNEJFRTU5Qjc1Njc1RUVEMjI4Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8I1kYoFspVXmmO3JDExGNwmf
BZijNqgBn/Ut7JHzxcHZs7pF8yjzEt9KK5Z2SvC54ek1eKdg2gkIQdmdvivwFuGE
1Or4Pgphz7ziElPDRU1rhYhERNGe8aBLWuhnEVia5yHKJ8yAPF6DUjuQlfs8CCki
lSajpvCEqvw3UQwibJbCW+RMXc05ARVB+TBr8xA6gTtYH9UlpnHtIm8WP4J4KcJa
Hn15nPNVweA5e8mOuKiLyhin7hk8YKr5SC30pCFUe2EEngKGxvo0RzDKwIkpfr9+
2dcckvEyBP2sENILP+NjywFDmNMluQxnB18wY4VRUj5ODlP1Z5c8ZO8uEf5HAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXE3FP/3dcg7wL
S+5Zt1Z17tIozzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXpn
SHM2dnNmVmtvV2NUSEh6bk1veHgyc2JVd0QxY0tOSnZCN3drejhya1MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V6
Z0hzNnZzZlZrb1djVEhIem5Nb3h4MnNiVXdEMWNLTkp2Qjd3a3o4cmtTLzAvRDcx
MzcxNEZGRjc3NUM4M0JDMEI0QkVFNTlCNzU2NzVFRUQyMjhDRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqu7oMA0EAgACMAcDBQAoBDZ0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQbTANBgkqhkiG9w0BAQsFAAOCAQEA0LZHGf/1wguvXoNo
I3zp7VViVz2t9qCB9aMU9stg1w1ik4/elERJ1TpQuG+iBPT2E7TBLdR/eSYbESrr
YYh1iOZ5HAa6j0K3CD/MnWHAX8UKW7t6H/cTwAfAtDHMm6xzl/+n2Zv+EvCyLHx2
V+r7jyWs6ssT9lP0q0urLeMu0ZjjaTSClPM14m7043C+FW1tfhOce28GN1+5L/El
j4ppfc2cCGZS8JJuUFtCeAWoBNSWx8x1IcMtL+D4CKf7E6ShYL4hAMFqSKQOuCRt
1sj5BgXe+t936xOnbU1oGg/xTZaogg+71Z3MqO4WwHowBCp0+7wWf305L9InqPIv
fZcOmQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org