Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB5064ABF406A194A512A274B16940E09BCDE807.cer
File:                     DB5064ABF406A194A512A274B16940E09BCDE807.cer (raw, json)
Hash identifier:          YBHQuy5b96jWu518BCqev9ItGCa/G5lDjCoUxBRo08c=
Subject key identifier:   DB:50:64:AB:F4:06:A1:94:A5:12:A2:74:B1:69:40:E0:9B:CD:E8:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E48EA90FBF7AE65C65EF9A74A0CC1ED7038E39F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DB5064ABF406A194A512A274B16940E09BCDE807.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Oct 2024 11:59:00 +0000
Certificate not after:    Sat 25 Oct 2025 12:04:00 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:ea:90:fb:f7:ae:65:c6:5e:f9:a7:4a:0c:c1:ed:70:38:e3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 26 11:59:00 2024 GMT
            Not After : Oct 25 12:04:00 2025 GMT
        Subject: CN=DB5064ABF406A194A512A274B16940E09BCDE807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:44:36:fe:8d:f6:9e:25:48:c2:e2:1b:67:
                    15:97:ba:e2:64:de:e7:0e:be:aa:ad:f1:0c:dd:6d:
                    d3:6c:00:90:d1:24:d1:9f:e1:39:31:2b:cb:d7:6b:
                    b7:b3:49:3d:25:ae:bb:64:00:f7:65:c7:32:3e:c2:
                    96:75:0d:5d:19:07:73:f7:bf:08:f1:32:e3:05:65:
                    a1:87:87:1d:c6:b8:5a:fb:d4:f2:03:27:88:96:f4:
                    41:b7:38:e5:a9:e2:db:d5:6a:7b:eb:ff:01:81:90:
                    91:21:19:4a:d8:05:0e:09:50:db:9b:e8:64:26:02:
                    75:b6:90:ab:72:58:a9:e2:69:65:02:73:f3:c0:86:
                    ca:15:1d:00:85:2a:de:b4:9b:6f:7a:32:ff:cd:3e:
                    23:dd:48:c9:8d:18:12:d6:f5:dd:f0:27:88:4b:7c:
                    e6:62:b9:9d:21:db:2f:35:97:8f:6b:17:cc:13:02:
                    be:9b:56:c3:8a:d1:2e:c4:70:ef:05:b2:74:6e:f6:
                    be:20:7e:2b:8a:11:4b:8c:72:5b:40:5a:ba:e8:3b:
                    17:47:25:d7:f9:f9:67:ea:96:5e:4e:80:74:1b:b4:
                    fc:a3:7b:ed:0e:58:38:ed:0c:4d:3e:6d:16:39:f6:
                    79:7e:87:91:af:59:dd:7e:ed:50:79:44:1d:02:8a:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:50:64:AB:F4:06:A1:94:A5:12:A2:74:B1:69:40:E0:9B:CD:E8:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DB5064ABF406A194A512A274B16940E09BCDE807.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         ab:eb:36:c5:e7:a0:86:af:98:b3:c3:c9:94:ae:f8:16:d4:35:
         f3:c4:eb:4d:58:e6:1d:ae:36:9e:1f:c6:31:ef:17:0e:01:bf:
         37:25:5a:f6:03:ba:ea:2f:4e:12:56:12:64:e4:7f:a1:3c:55:
         73:49:06:07:5c:d9:6e:5f:4a:38:7b:7c:7f:93:ec:e2:01:8c:
         59:f5:72:fa:8a:ad:08:d9:6a:2f:63:6e:e4:ac:8f:ae:42:d0:
         f5:54:1c:d9:53:8a:44:11:c2:60:d8:38:c9:24:9d:f3:9f:a9:
         12:a2:72:90:04:3e:6f:88:74:c6:4b:1c:84:53:53:bc:c7:fa:
         0c:4f:9b:4a:f3:38:ef:71:d6:e5:f6:79:21:c7:0d:91:b4:94:
         62:52:94:74:af:41:59:f8:b9:0d:86:06:da:05:ee:f3:0d:fd:
         b9:46:cd:fa:45:71:bf:60:86:ea:c5:78:2c:7b:47:fc:4f:36:
         4b:04:fb:17:20:71:29:e4:f7:c5:fb:83:1a:80:a0:07:20:89:
         f6:40:89:88:81:ff:62:03:1f:b5:90:37:1c:d8:05:26:a5:4c:
         d8:8e:b1:84:4e:ea:80:87:9a:ce:f6:90:89:2d:32:c0:31:86:
         39:5a:39:ac:99:a0:0a:9d:02:00:5e:12:5f:c8:4e:5d:f4:32:
         57:70:bf:75
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXkjqkPv3rmXGXvmnSgzB7XA4458wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMjYxMTU5MDBaFw0yNTEwMjUxMjA0MDBaMDMxMTAvBgNV
BAMTKERCNTA2NEFCRjQwNkExOTRBNTEyQTI3NEIxNjk0MEUwOUJDREU4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmEQ2/o32niVIwuIbZxWXuuJk
3ucOvqqt8QzdbdNsAJDRJNGf4TkxK8vXa7ezST0lrrtkAPdlxzI+wpZ1DV0ZB3P3
vwjxMuMFZaGHhx3GuFr71PIDJ4iW9EG3OOWp4tvVanvr/wGBkJEhGUrYBQ4JUNub
6GQmAnW2kKtyWKniaWUCc/PAhsoVHQCFKt60m296Mv/NPiPdSMmNGBLW9d3wJ4hL
fOZiuZ0h2y81l49rF8wTAr6bVsOK0S7EcO8FsnRu9r4gfiuKEUuMcltAWrroOxdH
Jdf5+Wfqll5OgHQbtPyje+0OWDjtDE0+bRY59nl+h5GvWd1+7VB5RB0CipwhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbUGSr9AahlKUS
onSxaUDgm83oBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzlL
NGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc5
SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAvREI1
MDY0QUJGNDA2QTE5NEE1MTJBMjc0QjE2OTQwRTA5QkNERTgwNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa4QMA0EAgACMAcDBQAoBFvwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaTjANBgkqhkiG9w0BAQsFAAOCAQEAq+s2xeeghq+Ys8PJ
lK74FtQ188TrTVjmHa42nh/GMe8XDgG/NyVa9gO66i9OElYSZOR/oTxVc0kGB1zZ
bl9KOHt8f5Ps4gGMWfVy+oqtCNlqL2Nu5KyPrkLQ9VQc2VOKRBHCYNg4ySSd85+p
EqJykAQ+b4h0xkschFNTvMf6DE+bSvM473HW5fZ5IccNkbSUYlKUdK9BWfi5DYYG
2gXu8w39uUbN+kVxv2CG6sV4LHtH/E82SwT7FyBxKeT3xfuDGoCgByCJ9kCJiIH/
YgMftZA3HNgFJqVM2I6xhE7qgIeazvaQiS0ywDGGOVo5rJmgCp0CAF4SX8hOXfQy
V3C/dQ==
-----END CERTIFICATE-----
Generated at Wed Nov 6 20:24:33 2024 by rpki-client on console-fra.rpki-client.org