Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D861DF3EA87B40F943CC232763B8F7AD14962D54.cer
File:                     D861DF3EA87B40F943CC232763B8F7AD14962D54.cer (raw, json)
Hash identifier:          YTIC3JdIlJ3I0vMAc0fRwK4fsBfQ/251bAFBz+rfB5c=
Subject key identifier:   D8:61:DF:3E:A8:7B:40:F9:43:CC:23:27:63:B8:F7:AD:14:96:2D:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D80776F2CD60BF8376779799546525FA05134F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/D861DF3EA87B40F943CC232763B8F7AD14962D54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 May 2024 19:05:29 +0000
Certificate not after:    Tue 27 May 2025 19:10:29 +0000
Subordinate resources:    AS: 267666
                          IP: 45.224.208.0/22
                          IP: 2804:4500::/32

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 22:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:80:77:6f:2c:d6:0b:f8:37:67:79:79:95:46:52:5f:a0:51:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 28 19:05:29 2024 GMT
            Not After : May 27 19:10:29 2025 GMT
        Subject: CN=D861DF3EA87B40F943CC232763B8F7AD14962D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:43:d9:31:37:f0:c8:50:78:9b:dd:a9:c8:
                    5e:19:d0:0f:f9:be:d9:90:68:a9:a3:58:fc:33:70:
                    b1:73:45:f5:44:21:59:45:1b:2c:1a:26:d1:2a:1c:
                    51:7e:6f:fe:bb:00:fa:00:32:e8:39:2a:97:c8:d5:
                    20:20:3b:47:cf:bc:a6:0b:97:92:fd:1c:c1:7a:f5:
                    05:86:cb:82:e3:d1:38:24:eb:b8:7b:a9:36:68:66:
                    77:44:0e:43:d1:cf:8f:c2:07:de:c7:35:9b:8d:6e:
                    5a:66:21:ef:cc:48:96:ba:74:f2:83:12:d7:47:6e:
                    a3:9f:91:1e:9b:3c:b2:22:b4:3e:dd:35:72:fb:a8:
                    ad:d5:38:54:c7:ed:65:d5:32:01:86:bd:b6:65:91:
                    8c:34:fa:5f:48:cd:8b:e5:7e:3d:55:8d:a3:9b:e7:
                    0b:2d:07:f5:a3:c7:ef:85:82:09:b8:55:47:8d:c6:
                    7d:00:2c:07:8b:57:83:52:65:b0:bf:62:a5:6d:79:
                    f1:71:a0:01:5b:72:70:25:ad:91:7e:58:38:f2:76:
                    1c:60:2c:49:8e:5d:39:20:ff:09:e7:cd:f2:69:d7:
                    f7:46:83:20:86:82:9f:e5:04:74:4b:5f:92:1f:7f:
                    74:68:40:d0:19:e8:39:25:bd:50:3a:46:47:40:3a:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:61:DF:3E:A8:7B:40:F9:43:CC:23:27:63:B8:F7:AD:14:96:2D:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/D861DF3EA87B40F943CC232763B8F7AD14962D54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.208.0/22
                IPv6:
                  2804:4500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267666

    Signature Algorithm: sha256WithRSAEncryption
         01:91:2f:30:ab:d8:0b:03:e1:82:52:44:92:7d:2a:18:a9:31:
         fc:34:e4:df:32:1f:6f:75:2a:f0:b8:50:0d:b1:0d:7c:20:c5:
         26:7b:da:29:37:70:2c:fb:8d:5c:d2:be:d8:fb:59:32:f4:c4:
         e5:86:8a:5b:65:aa:b7:07:b3:b0:13:d5:b5:a1:1f:28:f4:82:
         1d:c6:eb:92:69:56:0c:5e:9e:10:5b:6b:05:b6:a0:26:23:74:
         dc:38:2c:0d:57:c1:14:e8:78:46:85:ed:26:fe:6e:c8:bd:5c:
         3c:06:a0:a9:d1:b5:7a:46:f9:49:7a:cc:e4:49:1d:0e:a3:38:
         fb:c3:86:2d:5e:d5:6d:52:62:4e:4b:4a:bd:c4:b0:51:59:79:
         19:8a:e6:ba:4b:b9:50:8c:c3:ba:60:a7:13:0e:47:79:90:77:
         0c:16:c2:c3:48:05:b0:1a:d6:be:0c:a5:47:25:41:22:21:80:
         14:fd:62:eb:dd:14:b2:b8:86:a6:13:d5:ec:db:b9:20:fa:49:
         ce:b1:72:42:9f:29:c4:3b:e8:7b:6b:14:b0:d7:cf:ee:be:fc:
         d3:91:9d:f1:c3:8d:67:d9:b7:fa:db:2c:7a:51:47:23:00:a8:
         8f:0c:54:78:2b:9a:b5:f6:38:bd:d2:d3:96:a2:09:73:59:3b:
         be:3b:c6:f7
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUHYB3byzWC/g3Z3l5lUZSX6BRNPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjgxOTA1MjlaFw0yNTA1MjcxOTEwMjlaMDMxMTAvBgNV
BAMTKEQ4NjFERjNFQTg3QjQwRjk0M0NDMjMyNzYzQjhGN0FEMTQ5NjJENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjUPZMTfwyFB4m92pyF4Z0A/5
vtmQaKmjWPwzcLFzRfVEIVlFGywaJtEqHFF+b/67APoAMug5KpfI1SAgO0fPvKYL
l5L9HMF69QWGy4Lj0Tgk67h7qTZoZndEDkPRz4/CB97HNZuNblpmIe/MSJa6dPKD
EtdHbqOfkR6bPLIitD7dNXL7qK3VOFTH7WXVMgGGvbZlkYw0+l9IzYvlfj1VjaOb
5wstB/Wjx++Fggm4VUeNxn0ALAeLV4NSZbC/YqVtefFxoAFbcnAlrZF+WDjydhxg
LEmOXTkg/wnnzfJp1/dGgyCGgp/lBHRLX5Iff3RoQNAZ6DklvVA6RkdAOnVdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYYd8+qHtA+UPM
IydjuPetFJYtVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXc2
NjVBNzhTcWFKS01BRFNGUkRFWWN6bUxYOTRxeGpMQVVOamdQc3dkZUsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl3
NjY1QTc4U3FhSktNQURTRlJERVljem1MWDk0cXhqTEFVTmpnUHN3ZGVLLzAvRDg2
MURGM0VBODdCNDBGOTQzQ0MyMzI3NjNCOEY3QUQxNDk2MkQ1NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeDQMA0EAgACMAcDBQAoBEUAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQVkjANBgkqhkiG9w0BAQsFAAOCAQEAAZEvMKvYCwPhglJE
kn0qGKkx/DTk3zIfb3Uq8LhQDbENfCDFJnvaKTdwLPuNXNK+2PtZMvTE5YaKW2Wq
twezsBPVtaEfKPSCHcbrkmlWDF6eEFtrBbagJiN03DgsDVfBFOh4RoXtJv5uyL1c
PAagqdG1ekb5SXrM5EkdDqM4+8OGLV7VbVJiTktKvcSwUVl5GYrmuku5UIzDumCn
Ew5HeZB3DBbCw0gFsBrWvgylRyVBIiGAFP1i690UsriGphPV7Nu5IPpJzrFyQp8p
xDvoe2sUsNfP7r7805Gd8cONZ9m3+tsselFHIwCojwxUeCuatfY4vdLTlqIJc1k7
vjvG9w==
-----END CERTIFICATE-----
Generated at Sun Jul 28 23:46:04 2024 by rpki-client on console-fra.rpki-client.org