Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
File:                     D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer (raw, json)
Hash identifier:          EoJBBeEe0gl+d/WfenheDUSAiic54XuduiAZvEZuszg=
Subject key identifier:   D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C55C84D8CC5E0FFD296E32F4D74DDFC9196A377
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 19:40:30 +0000
Certificate not after:    Wed 13 Aug 2025 19:45:30 +0000
Subordinate resources:    AS: 61737
                          IP: 131.72.180.0/22
                          IP: 2804:1b9c::/32

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 11:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:c8:4d:8c:c5:e0:ff:d2:96:e3:2f:4d:74:dd:fc:91:96:a3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 19:40:30 2024 GMT
            Not After : Aug 13 19:45:30 2025 GMT
        Subject: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:59:ca:a4:b1:c8:2d:b9:ad:67:80:75:a9:
                    fc:5a:85:ee:cb:a9:ea:87:e4:00:fc:65:09:43:41:
                    67:ee:f4:24:20:4b:12:32:70:e6:81:95:ad:ad:8a:
                    5a:79:0e:bf:bd:f5:e5:59:b0:40:1d:c2:08:f3:38:
                    4e:79:7c:f8:b4:7c:f5:98:0d:ec:41:5b:73:a8:04:
                    0e:12:56:9a:43:9e:93:fb:92:ab:7f:64:4c:e9:98:
                    d8:81:58:32:2a:b2:5e:87:f0:30:de:b4:87:01:e2:
                    63:de:dd:a7:58:1b:d3:4d:c9:85:91:60:d5:ea:32:
                    5e:a5:f8:7a:5c:91:c7:41:96:47:98:10:ba:1d:00:
                    f0:c8:8b:b5:ba:0d:b8:d3:fa:cf:24:8a:2a:21:03:
                    e7:28:13:c9:90:c2:7c:a5:77:45:31:0c:b1:1b:82:
                    5d:03:85:8c:a5:18:fa:46:fe:c4:a2:c0:89:25:b6:
                    66:28:22:c6:99:62:23:11:75:ca:ee:e9:0b:aa:b6:
                    09:0b:4b:4f:9c:89:34:6c:0e:76:36:b2:8d:69:6b:
                    6c:e5:93:37:63:02:71:0b:d3:c0:5d:39:16:02:c9:
                    3c:98:13:70:f3:7e:0a:f3:aa:4f:e4:50:95:c4:b6:
                    6c:9e:75:cf:73:28:d7:c0:f9:a9:14:f0:d9:9c:4d:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.180.0/22
                IPv6:
                  2804:1b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61737

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:7c:43:0d:d9:b4:3f:fe:50:39:cc:54:c1:6f:6e:93:19:
         b4:ef:ac:3f:be:64:88:0e:3f:20:00:f5:7d:41:8b:a4:5c:c6:
         e8:07:22:fc:ae:ef:2b:d1:42:61:f8:c1:5b:03:c9:b0:58:a6:
         1c:d6:16:9a:97:f8:ff:87:42:7f:93:6b:92:b0:11:aa:99:b9:
         59:1f:3f:7d:6d:e7:35:f4:84:44:ff:2f:7d:eb:ec:d7:95:49:
         fe:e8:31:e9:04:83:8e:21:b5:29:c5:6b:e0:c3:54:c5:4c:20:
         8a:47:2b:ec:8c:98:17:70:3c:e4:e7:13:a6:54:83:eb:00:fc:
         cc:25:66:1d:1b:0f:9c:24:dd:a8:20:bc:48:3e:84:43:5b:e6:
         40:cb:e7:66:a4:99:12:c7:bf:cc:36:ae:50:f3:e6:44:2e:cb:
         c8:2a:e9:53:5a:e5:0c:12:4e:1d:1d:7d:ee:b2:3f:44:f8:44:
         b2:b8:94:58:95:5f:70:cb:43:7c:79:49:5a:ac:7c:25:ef:20:
         19:ec:60:62:4f:32:48:bf:31:5c:59:7d:27:e9:ab:d9:6d:5c:
         57:24:19:81:61:e9:46:56:32:29:2f:fd:3d:4a:1e:6e:47:0e:
         ff:52:43:a1:c8:f9:25:e8:75:0e:14:64:51:d9:2d:14:4e:7b:
         05:60:2c:1c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPFXITYzF4P/SluMvTXTd/JGWo3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTQxOTQwMzBaFw0yNTA4MTMxOTQ1MzBaMDMxMTAvBgNV
BAMTKEQ3ODU1Q0M3MjJFMEY1RjNGQ0YyOTk4NkM4N0JFMTFFNzYyQTk2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0VnKpLHILbmtZ4B1qfxahe7L
qeqH5AD8ZQlDQWfu9CQgSxIycOaBla2tilp5Dr+99eVZsEAdwgjzOE55fPi0fPWY
DexBW3OoBA4SVppDnpP7kqt/ZEzpmNiBWDIqsl6H8DDetIcB4mPe3adYG9NNyYWR
YNXqMl6l+HpckcdBlkeYELodAPDIi7W6DbjT+s8kiiohA+coE8mQwnyld0UxDLEb
gl0DhYylGPpG/sSiwIkltmYoIsaZYiMRdcru6QuqtgkLS0+ciTRsDnY2so1pa2zl
kzdjAnEL08BdORYCyTyYE3Dzfgrzqk/kUJXEtmyedc9zKNfA+akU8NmcTfZJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXhVzHIuD18/zy
mYbIe+EediqWtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRm05
WnAydmM1M25vSlRRb1Q1RnpQM0VieG9CZFhuOWNkcVYxSHZFN1JTYnUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zt
OVpwMnZjNTNub0pUUW9UNUZ6UDNFYnhvQmRYbjljZHFWMUh2RTdSU2J1LzAvRDc4
NTVDQzcyMkUwRjVGM0ZDRjI5OTg2Qzg3QkUxMUU3NjJBOTZCNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg0i0MA0EAgACMAcDBQAoBBucMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxKTANBgkqhkiG9w0BAQsFAAOCAQEAWuJ8Qw3ZtD/+UDnM
VMFvbpMZtO+sP75kiA4/IAD1fUGLpFzG6Aci/K7vK9FCYfjBWwPJsFimHNYWmpf4
/4dCf5NrkrARqpm5WR8/fW3nNfSERP8vfevs15VJ/ugx6QSDjiG1KcVr4MNUxUwg
ikcr7IyYF3A85OcTplSD6wD8zCVmHRsPnCTdqCC8SD6EQ1vmQMvnZqSZEse/zDau
UPPmRC7LyCrpU1rlDBJOHR197rI/RPhEsriUWJVfcMtDfHlJWqx8Je8gGexgYk8y
SL8xXFl9J+mr2W1cVyQZgWHpRlYyKS/9PUoebkcO/1JDocj5Jeh1DhRkUdktFE57
BWAsHA==
-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:59 2024 by rpki-client on console-ams.rpki-client.org