Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E2355E08CD05CB967052FB4B9C6E3271C12C3A69.cer
File:                     E2355E08CD05CB967052FB4B9C6E3271C12C3A69.cer (raw, json)
Hash identifier:          zA4UsNE+OqSW1rL1xjJlnLFBqUD9X2Os7SlCW4s7tew=
Subject key identifier:   E2:35:5E:08:CD:05:CB:96:70:52:FB:4B:9C:6E:32:71:C1:2C:3A:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62A16FE508FE78126F96C4EECEECE1D0AEA77616
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/1/E2355E08CD05CB967052FB4B9C6E3271C12C3A69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:15 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:15 +0000
Subordinate resources:    AS: 262729
                          IP: 45.7.156.0/22
                          IP: 143.208.192.0/22
                          IP: 168.197.224.0/22
                          IP: 177.92.192.0/20
                          IP: 186.193.128.0/19
                          IP: 2804:16d8::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 13:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:6f:e5:08:fe:78:12:6f:96:c4:ee:ce:ec:e1:d0:ae:a7:76:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject: CN=E2355E08CD05CB967052FB4B9C6E3271C12C3A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:49:96:29:27:1a:cf:6d:21:d5:23:d7:e4:
                    2a:51:b8:46:f3:7a:c6:79:43:66:c6:16:82:12:05:
                    b0:bb:4c:e2:cb:88:fb:f6:7f:70:fd:f6:f8:03:61:
                    c8:32:4c:df:8a:61:d9:c4:d6:b9:82:be:8a:cc:fd:
                    9d:b2:a7:38:63:f0:48:ed:97:b0:90:f0:f0:8f:46:
                    95:c2:03:92:aa:b2:b6:d3:c0:6d:e1:1f:09:25:6b:
                    ed:b9:c1:91:89:4e:9a:65:7a:72:e8:3c:47:39:4c:
                    25:74:38:78:af:d0:d9:28:0a:11:67:cb:b3:c7:9d:
                    5c:eb:15:13:fd:88:a3:ba:d1:1d:40:b2:31:09:05:
                    3f:29:26:f7:c8:ab:f2:ac:ee:ee:14:25:cc:91:c1:
                    be:c7:10:ea:08:a6:0c:ed:d0:63:99:70:4e:e7:38:
                    77:3f:12:f1:4b:c3:eb:46:27:da:80:2d:85:0c:2c:
                    88:47:7a:5b:fd:f7:09:be:fe:13:78:54:e2:be:f0:
                    5f:ce:10:1e:fe:45:1b:13:ee:06:84:fe:b3:3b:c4:
                    e7:49:72:57:24:79:96:80:76:f5:e4:af:67:48:a7:
                    46:ae:c2:09:32:e7:93:4e:9f:75:f4:d5:cf:1c:43:
                    7f:b0:0b:58:9b:91:71:fe:60:a3:e0:07:da:08:59:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:35:5E:08:CD:05:CB:96:70:52:FB:4B:9C:6E:32:71:C1:2C:3A:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/1/E2355E08CD05CB967052FB4B9C6E3271C12C3A69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.156.0/22
                  143.208.192.0/22
                  168.197.224.0/22
                  177.92.192.0/20
                  186.193.128.0/19
                IPv6:
                  2804:16d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262729

    Signature Algorithm: sha256WithRSAEncryption
         d9:3a:ad:9b:ba:9b:6e:2e:3f:d3:b3:13:09:65:32:fc:3a:54:
         7f:d9:27:06:38:85:66:26:4f:e6:ae:37:18:38:ad:6e:b2:ad:
         ed:d7:70:55:a7:71:79:f5:52:cc:09:28:83:8c:4f:d2:4e:bc:
         1d:d6:db:b2:3d:02:b0:23:e2:58:65:23:c3:d2:4e:1f:a6:4e:
         9f:48:99:92:13:2e:cc:10:38:93:75:8b:c2:a2:3d:4f:25:f5:
         7a:88:f2:55:23:70:ad:d6:bd:a1:d7:49:84:69:de:f8:95:4b:
         86:83:3d:60:83:7c:9e:4e:ad:e7:8e:47:57:00:08:f6:17:95:
         39:e7:1f:05:65:75:30:c4:44:df:8a:d0:d4:7a:67:af:4c:7d:
         03:ef:11:1b:c3:77:37:bb:63:e0:25:0e:64:dc:a5:79:e0:97:
         af:0a:a6:16:a0:cc:d8:34:ab:0d:94:b3:f7:9d:27:23:f7:12:
         b8:e2:51:b9:21:38:02:d4:c6:43:ad:b7:f3:66:89:8f:97:55:
         c2:0f:ec:f7:31:ab:76:ff:9c:94:e7:2e:83:da:3c:be:2b:6e:
         07:76:bc:cd:db:ec:97:e2:ee:dc:3f:88:09:2f:5c:01:f8:d1:
         ba:cb:cb:6f:b2:a6:6f:90:24:71:be:9d:59:66:db:8a:29:be:
         d4:74:23:9e
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUYqFv5Qj+eBJvlsTuzuzh0K6ndhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1MTVaFw0yNTA0MDIxODMwMTVaMDMxMTAvBgNV
BAMTKEUyMzU1RTA4Q0QwNUNCOTY3MDUyRkI0QjlDNkUzMjcxQzEyQzNBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKUmWKScaz20h1SPX5CpRuEbz
esZ5Q2bGFoISBbC7TOLLiPv2f3D99vgDYcgyTN+KYdnE1rmCvorM/Z2ypzhj8Ejt
l7CQ8PCPRpXCA5KqsrbTwG3hHwkla+25wZGJTpplenLoPEc5TCV0OHiv0NkoChFn
y7PHnVzrFRP9iKO60R1AsjEJBT8pJvfIq/Ks7u4UJcyRwb7HEOoIpgzt0GOZcE7n
OHc/EvFLw+tGJ9qALYUMLIhHelv99wm+/hN4VOK+8F/OEB7+RRsT7gaE/rM7xOdJ
clckeZaAdvXkr2dIp0auwgky55NOn3X01c8cQ3+wC1ibkXH+YKPgB9oIWf3BAgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiNV4IzQXLlnBS
+0ucbjJxwSw6aTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDVm
UEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZnOWsvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q1
ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzEvRTIz
NTVFMDhDRDA1Q0I5NjcwNTJGQjRCOUM2RTMyNzFDMTJDM0E2OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCLQecAwQCj9DAAwQCqMXgAwQEsVzAAwQFusGAMA0E
AgACMAcDBQAoBBbYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQCSTANBgkqhkiG
9w0BAQsFAAOCAQEA2Tqtm7qbbi4/07MTCWUy/DpUf9knBjiFZiZP5q43GDitbrKt
7ddwVadxefVSzAkog4xP0k68Hdbbsj0CsCPiWGUjw9JOH6ZOn0iZkhMuzBA4k3WL
wqI9TyX1eojyVSNwrda9oddJhGne+JVLhoM9YIN8nk6t545HVwAI9heVOecfBWV1
MMRE34rQ1Hpnr0x9A+8RG8N3N7tj4CUOZNyleeCXrwqmFqDM2DSrDZSz950nI/cS
uOJRuSE4AtTGQ62382aJj5dVwg/s9zGrdv+clOcug9o8vituB3a8zdvsl+Lu3D+I
CS9cAfjRusvLb7Kmb5Akcb6dWWbbiim+1HQjng==
-----END CERTIFICATE-----
Generated at Mon Jul 15 14:57:41 2024 by rpki-client on console-fra.rpki-client.org