Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.cer
File:                     DCEB47CA8879EBC049CF15543FD5AC82825C7622.cer (raw, json)
Hash identifier:          +5S4yJZ9K5dfcC7HUMzf6w6ADoMkamAxp1FthHa/cm4=
Subject key identifier:   DC:EB:47:CA:88:79:EB:C0:49:CF:15:54:3F:D5:AC:82:82:5C:76:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       317D7BD5FFE866B65F2BEAC852A72BC870474652
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:15:23 +0000
Certificate not after:    Thu 03 Apr 2025 19:20:23 +0000
Subordinate resources:    AS: 271616
                          IP: 179.124.212.0/22
                          IP: 2804:7e50::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 21:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7d:7b:d5:ff:e8:66:b6:5f:2b:ea:c8:52:a7:2b:c8:70:47:46:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:15:23 2024 GMT
            Not After : Apr  3 19:20:23 2025 GMT
        Subject: CN=DCEB47CA8879EBC049CF15543FD5AC82825C7622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:b6:27:2f:f9:04:fe:e3:75:9d:a8:d3:8a:
                    dd:b9:98:6d:6e:8c:ba:80:5b:2a:1f:5c:dc:ed:1c:
                    43:b1:15:54:61:7b:56:c2:a5:22:85:78:d1:28:44:
                    ad:74:e1:32:c2:7a:c7:1b:6b:49:38:78:c2:4c:97:
                    6c:68:c3:79:f7:a7:9e:31:2e:dc:f5:a3:89:36:af:
                    52:f4:a8:98:33:85:49:c8:e1:b7:9d:11:41:aa:50:
                    da:53:de:c7:85:98:3c:4e:90:d4:80:ca:a0:30:b9:
                    82:d7:27:09:38:01:8a:c1:53:f3:1d:91:25:ce:e4:
                    ac:d5:a1:7d:14:b6:9a:a3:f6:25:98:0c:c1:94:92:
                    6b:49:03:11:dd:7a:91:70:99:6d:e9:82:ad:1f:6b:
                    4f:70:65:59:48:40:de:46:8b:f2:92:11:75:b9:99:
                    5f:d1:07:21:49:dd:8d:4d:0a:90:a3:23:81:27:b5:
                    96:31:4a:ab:a3:f6:6b:69:32:16:aa:d3:a2:9e:01:
                    67:74:db:c2:ec:d5:97:e7:03:6f:70:d4:c4:7e:ba:
                    10:7f:82:f3:18:17:99:81:4e:fb:86:a5:aa:5c:62:
                    ee:eb:b0:f3:aa:40:7c:e0:00:35:35:b5:97:28:5f:
                    70:eb:df:8c:0b:0f:6a:05:cf:79:96:d5:cc:57:37:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:EB:47:CA:88:79:EB:C0:49:CF:15:54:3F:D5:AC:82:82:5C:76:22
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.212.0/22
                IPv6:
                  2804:7e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271616

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:1e:70:7f:9d:c5:1a:2c:b5:0c:3a:cf:97:cf:6e:d5:b8:
         66:60:76:18:a7:64:51:fd:90:9b:07:ef:5b:5a:00:10:24:47:
         8e:01:51:64:96:73:e7:28:e7:90:e2:7d:e5:fc:72:73:85:80:
         60:4b:67:a9:b6:04:d5:2b:5d:11:88:8e:df:d2:3e:27:e5:75:
         56:a3:a3:f2:3b:ce:c7:91:60:a3:71:76:f4:87:6b:49:7f:ec:
         b6:4d:c2:91:e5:68:8c:0a:95:98:23:d8:99:1b:53:f0:98:5c:
         71:23:d3:1c:2b:ca:92:c9:f9:4e:d0:55:24:5b:8a:28:23:50:
         d7:6f:46:58:cc:90:03:dd:9a:58:82:01:6e:ad:a7:5f:3f:e4:
         5c:b4:40:a5:5e:f1:50:ca:b9:5a:53:5c:a8:8d:04:b5:ef:2f:
         b1:05:7c:4d:13:de:7e:28:4d:5d:14:6c:6e:e1:dc:7e:d8:38:
         70:47:44:49:d9:74:89:ff:7e:8d:13:8c:7e:cf:9f:21:a5:38:
         d6:e3:21:d6:3b:e2:21:9d:12:bc:36:0e:da:88:7d:95:9f:f6:
         be:5f:50:d7:71:cb:00:7c:02:81:f0:c6:02:10:81:27:04:63:
         8c:4d:8d:5f:24:f3:5d:79:bd:0b:ec:52:fc:42:0b:08:87:24:
         84:81:ff:77
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUMX171f/oZrZfK+rIUqcryHBHRlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxOTE1MjNaFw0yNTA0MDMxOTIwMjNaMDMxMTAvBgNV
BAMTKERDRUI0N0NBODg3OUVCQzA0OUNGMTU1NDNGRDVBQzgyODI1Qzc2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQELYnL/kE/uN1najTit25mG1u
jLqAWyofXNztHEOxFVRhe1bCpSKFeNEoRK104TLCescba0k4eMJMl2xow3n3p54x
Ltz1o4k2r1L0qJgzhUnI4bedEUGqUNpT3seFmDxOkNSAyqAwuYLXJwk4AYrBU/Md
kSXO5KzVoX0Utpqj9iWYDMGUkmtJAxHdepFwmW3pgq0fa09wZVlIQN5Gi/KSEXW5
mV/RByFJ3Y1NCpCjI4EntZYxSquj9mtpMhaq06KeAWd028Ls1ZfnA29w1MR+uhB/
gvMYF5mBTvuGpapcYu7rsPOqQHzgADU1tZcoX3Dr34wLD2oFz3mW1cxXN81jAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc60fKiHnrwEnP
FVQ/1ayCglx2IjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEYz
VHRKUlhSS3Q0VlV0VlU1NWhndzROR1JQYUc2bzR0cW1ZM0dQajNLaXUvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEYz
VHRKUlhSS3Q0VlV0VlU1NWhndzROR1JQYUc2bzR0cW1ZM0dQajNLaXUvMS9EQ0VC
NDdDQTg4NzlFQkMwNDlDRjE1NTQzRkQ1QUM4MjgyNUM3NjIyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKzfNQwDQQCAAIwBwMFACgEflAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCUAMA0GCSqGSIb3DQEBCwUAA4IBAQBu2R5wf53FGiy1DDrP
l89u1bhmYHYYp2RR/ZCbB+9bWgAQJEeOAVFklnPnKOeQ4n3l/HJzhYBgS2eptgTV
K10RiI7f0j4n5XVWo6PyO87HkWCjcXb0h2tJf+y2TcKR5WiMCpWYI9iZG1PwmFxx
I9McK8qSyflO0FUkW4ooI1DXb0ZYzJAD3ZpYggFuradfP+RctEClXvFQyrlaU1yo
jQS17y+xBXxNE95+KE1dFGxu4dx+2DhwR0RJ2XSJ/36NE4x+z58hpTjW4yHWO+Ih
nRK8Ng7aiH2Vn/a+X1DXccsAfAKB8MYCEIEnBGOMTY1fJPNdeb0L7FL8QgsIhySE
gf93
-----END CERTIFICATE-----
Generated at Wed Jul 10 23:06:32 2024 by rpki-client on console-ams.rpki-client.org