Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
File:                     DE06770678E099BDC92557910C941887FA8571B2.cer (raw, json)
Hash identifier:          FFJaZMAriYXmhG5+YgQlFLVYWp3d0tbogY/p0ATlLM4=
Subject key identifier:   DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39FBF9D598BF168230F0168DE4E9F6241EAA659A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:19:34 +0000
Certificate not after:    Wed 02 Apr 2025 21:24:34 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:f9:d5:98:bf:16:82:30:f0:16:8d:e4:e9:f6:24:1e:aa:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:19:34 2024 GMT
            Not After : Apr  2 21:24:34 2025 GMT
        Subject: CN=DE06770678E099BDC92557910C941887FA8571B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:3d:08:6b:b0:c4:9c:f2:df:31:26:3a:5c:
                    9d:20:1f:23:5a:79:98:4e:da:48:1b:af:f1:1a:ed:
                    6a:b2:a2:f4:8d:39:7e:e3:e5:64:a6:79:32:4e:56:
                    81:15:13:80:6c:87:ff:d3:ea:45:07:ed:f8:ba:2f:
                    65:87:2c:9a:6b:4f:5b:a6:e4:84:01:6c:ab:c4:5f:
                    ca:7e:b2:4e:35:71:65:11:e7:44:f1:ab:45:9c:ab:
                    05:3d:9a:65:51:c1:41:57:cc:9f:d4:b6:fa:10:b9:
                    8a:2a:4b:2d:77:31:e0:f8:14:bc:db:54:4c:c9:9f:
                    ff:aa:b7:a6:4a:ea:06:95:3c:bb:ff:e8:ea:fa:60:
                    bb:d2:17:ae:0f:8f:09:8c:d6:7c:82:8b:20:12:75:
                    87:3a:dd:77:15:7f:51:12:10:63:7f:2e:bb:c9:db:
                    0e:4e:4e:b2:c7:8b:ae:0a:67:c9:45:ec:20:6e:d7:
                    f6:ad:04:ec:d6:7c:72:a8:c2:36:b3:bc:30:4e:eb:
                    e3:25:d4:f0:89:89:d2:24:22:1f:1f:92:73:aa:27:
                    34:e3:58:ce:e3:db:e0:1e:74:41:f7:b8:4f:85:67:
                    6a:a8:36:91:00:7e:6c:5a:b6:e6:50:33:b6:3b:bb:
                    81:27:0c:d7:fa:92:8e:7b:eb:8d:f9:87:95:ea:01:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         5d:1e:87:17:a0:75:48:9a:35:bf:af:f8:2e:52:62:2d:71:5d:
         99:ab:c9:2d:70:98:9e:58:73:47:80:20:c2:ea:a9:df:22:98:
         3f:cf:c4:80:a3:53:34:59:7f:12:67:cc:25:72:fa:15:e7:e4:
         60:76:c4:ff:be:12:5d:23:c7:24:a1:a3:8d:27:ac:1a:50:f9:
         16:15:52:e8:a0:9e:b7:03:13:27:74:e7:4f:a2:9b:80:9c:e6:
         8d:bf:f6:c8:2d:40:c7:cb:0f:2b:1f:ed:a8:52:86:57:21:9d:
         f2:0c:ab:c9:8b:2e:14:68:f9:04:75:03:95:ce:fe:39:6d:79:
         29:14:e0:02:74:f2:b6:db:cc:91:b8:39:7b:8e:4f:0a:bb:ea:
         e5:e5:bf:cc:a2:db:80:06:c2:48:a1:47:91:cc:9c:ac:aa:5e:
         37:54:fb:00:b6:e1:5c:0e:fc:a8:01:3a:87:22:d1:dd:32:94:
         58:3e:b6:49:02:1b:a3:c7:37:2f:77:8d:58:1c:cf:f8:a1:94:
         eb:96:79:f6:77:da:b9:7c:e6:ba:92:4d:6c:b2:fa:82:39:65:
         2a:4b:ef:9c:3a:96:18:34:53:6a:34:5d:76:5a:b2:11:7a:9a:
         e2:a4:15:27:0b:f6:96:7b:c3:4e:27:fe:ad:02:bd:35:17:c0:
         37:34:ea:42
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOfv51Zi/FoIw8BaN5On2JB6qZZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMTE5MzRaFw0yNTA0MDIyMTI0MzRaMDMxMTAvBgNV
BAMTKERFMDY3NzA2NzhFMDk5QkRDOTI1NTc5MTBDOTQxODg3RkE4NTcxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pD0Ia7DEnPLfMSY6XJ0gHyNa
eZhO2kgbr/Ea7WqyovSNOX7j5WSmeTJOVoEVE4Bsh//T6kUH7fi6L2WHLJprT1um
5IQBbKvEX8p+sk41cWUR50Txq0WcqwU9mmVRwUFXzJ/UtvoQuYoqSy13MeD4FLzb
VEzJn/+qt6ZK6gaVPLv/6Or6YLvSF64PjwmM1nyCiyASdYc63XcVf1ESEGN/LrvJ
2w5OTrLHi64KZ8lF7CBu1/atBOzWfHKowjazvDBO6+Ml1PCJidIkIh8fknOqJzTj
WM7j2+AedEH3uE+FZ2qoNpEAfmxatuZQM7Y7u4EnDNf6ko576435h5XqAYj3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeBncGeOCZvckl
V5EMlBiH+oVxsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkxz
bWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013NUEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JM
c21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzEvREUw
Njc3MDY3OEUwOTlCREM5MjU1NzkxMEM5NDE4ODdGQTg1NzFCMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCirlUMA0EAgACMAcDBQAoBCZ0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQImDANBgkqhkiG9w0BAQsFAAOCAQEAXR6HF6B1SJo1v6/4
LlJiLXFdmavJLXCYnlhzR4Agwuqp3yKYP8/EgKNTNFl/EmfMJXL6FefkYHbE/74S
XSPHJKGjjSesGlD5FhVS6KCetwMTJ3TnT6KbgJzmjb/2yC1Ax8sPKx/tqFKGVyGd
8gyryYsuFGj5BHUDlc7+OW15KRTgAnTyttvMkbg5e45PCrvq5eW/zKLbgAbCSKFH
kcycrKpeN1T7ALbhXA78qAE6hyLR3TKUWD62SQIbo8c3L3eNWBzP+KGU65Z59nfa
uXzmupJNbLL6gjllKkvvnDqWGDRTajRddlqyEXqa4qQVJwv2lnvDTif+rQK9NRfA
NzTqQg==
-----END CERTIFICATE-----
Generated at Wed Sep 11 00:35:53 2024 by rpki-client on console-fra.rpki-client.org