Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7785D4DBD5E95DA945023A38DD8B642F027D3D7.cer
File:                     E7785D4DBD5E95DA945023A38DD8B642F027D3D7.cer (raw, json)
Hash identifier:          SB7S1mVlB5YW1e59OdjlIJ6ktG3MbdLqH6xHSEANv7M=
Subject key identifier:   E7:78:5D:4D:BD:5E:95:DA:94:50:23:A3:8D:D8:B6:42:F0:27:D3:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F646B8FA3D4FCBB884CC505FDB593314B47F7F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/E7785D4DBD5E95DA945023A38DD8B642F027D3D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Sep 2024 00:05:06 +0000
Certificate not after:    Wed 10 Sep 2025 00:10:06 +0000
Subordinate resources:    AS: 264107
                          IP: 138.94.36.0/22
                          IP: 2804:228c::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 07:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:64:6b:8f:a3:d4:fc:bb:88:4c:c5:05:fd:b5:93:31:4b:47:f7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 00:05:06 2024 GMT
            Not After : Sep 10 00:10:06 2025 GMT
        Subject: CN=E7785D4DBD5E95DA945023A38DD8B642F027D3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:0e:d4:1d:43:fc:f6:65:f6:d1:d0:2d:c5:
                    83:69:4c:f9:60:0a:fa:95:8f:a9:18:fb:ca:2c:d8:
                    3b:8f:0b:48:1d:a7:1f:24:ae:14:b5:6e:7b:db:3e:
                    fe:93:35:69:77:b2:8b:a5:1e:cd:3f:f0:b0:06:90:
                    c8:11:45:35:19:2b:ca:7b:e8:81:4f:eb:92:a6:61:
                    9e:9a:ff:75:c6:b8:08:80:b9:fe:65:c5:a9:31:df:
                    f8:88:77:88:b3:1d:c8:5e:48:ac:fb:c0:2f:37:f9:
                    9e:7f:76:2b:30:00:a8:a5:e3:f0:89:8e:34:af:9c:
                    26:cb:59:0e:33:9f:25:7f:2b:26:1f:a6:bd:56:fb:
                    ad:35:68:57:40:72:d2:55:87:30:62:85:d3:02:8d:
                    44:36:64:00:d9:8c:4f:e8:e4:53:62:74:1f:f6:18:
                    71:b5:d3:32:50:71:e1:b8:c2:10:86:eb:49:b7:82:
                    db:09:af:78:8c:54:a6:3d:3e:46:d3:8b:92:26:21:
                    75:3a:8e:0d:c1:fb:ca:57:4e:15:b6:51:32:f4:4a:
                    89:01:02:76:9f:11:cf:c6:38:1a:8b:c0:0a:08:bc:
                    2c:0b:86:c3:58:9d:87:02:a1:a1:fb:1d:c8:a6:4d:
                    0f:bf:ec:76:4f:93:60:bd:58:ce:b9:4b:e7:73:e8:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:78:5D:4D:BD:5E:95:DA:94:50:23:A3:8D:D8:B6:42:F0:27:D3:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/E7785D4DBD5E95DA945023A38DD8B642F027D3D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.36.0/22
                IPv6:
                  2804:228c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264107

    Signature Algorithm: sha256WithRSAEncryption
         0e:50:78:29:61:39:4d:75:23:1c:a7:57:aa:b1:a0:d2:98:07:
         4b:02:a8:a1:a2:d2:56:56:74:36:20:db:41:f4:78:2d:75:af:
         fd:78:0f:3c:2a:63:47:48:1b:df:e9:44:fd:1a:03:ec:aa:76:
         dc:c8:97:8e:fc:d9:84:77:1b:65:62:3c:be:63:25:90:b1:49:
         9b:c7:d7:5a:24:99:c2:0e:fd:4b:db:72:54:0d:53:2b:b7:26:
         9d:c8:77:d3:9d:b8:05:09:98:aa:3d:0a:fe:2e:f8:48:9c:88:
         d8:2d:04:2b:f0:8b:f8:ab:3f:72:d8:8d:1b:67:fc:89:c7:3a:
         0e:79:90:c6:3c:59:87:b9:23:d6:e2:15:3b:99:cb:f4:2a:df:
         27:56:2f:23:4a:a6:d2:17:dc:e3:1f:77:50:3d:ce:3f:5a:b4:
         62:7e:59:e2:cf:da:7c:80:35:39:1c:9a:bc:49:b1:6a:93:f4:
         a4:c5:64:d9:6d:86:8c:31:3d:07:c5:e7:70:11:6c:71:71:f1:
         10:91:13:40:0a:c8:14:1e:60:db:a5:46:11:1a:6b:94:dc:56:
         ff:72:5b:37:67:c7:ca:4e:53:74:e9:62:3a:45:95:9a:51:f0:
         e2:56:56:9b:cb:6f:93:44:d9:18:b7:16:d9:e5:6b:94:4c:40:
         82:a3:6f:d1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUf2Rrj6PU/LuITMUF/bWTMUtH9/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTEwMDA1MDZaFw0yNTA5MTAwMDEwMDZaMDMxMTAvBgNV
BAMTKEU3Nzg1RDREQkQ1RTk1REE5NDUwMjNBMzhERDhCNjQyRjAyN0QzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8g7UHUP89mX20dAtxYNpTPlg
CvqVj6kY+8os2DuPC0gdpx8krhS1bnvbPv6TNWl3soulHs0/8LAGkMgRRTUZK8p7
6IFP65KmYZ6a/3XGuAiAuf5lxakx3/iId4izHcheSKz7wC83+Z5/diswAKil4/CJ
jjSvnCbLWQ4znyV/KyYfpr1W+601aFdActJVhzBihdMCjUQ2ZADZjE/o5FNidB/2
GHG10zJQceG4whCG60m3gtsJr3iMVKY9PkbTi5ImIXU6jg3B+8pXThW2UTL0SokB
AnafEc/GOBqLwAoIvCwLhsNYnYcCoaH7HcimTQ+/7HZPk2C9WM65S+dz6MqFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTneF1NvV6V2pRQ
I6ON2LZC8CfT1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0hC
aDJBRWJFRkI2cldNZEhMWVM0dFl6YTFNYllOSzR4NzlyaXdhd3ZaOWUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI
QmgyQUViRUZCNnJXTWRITFlTNHRZemExTWJZTks0eDc5cml3YXd2WjllLzAvRTc3
ODVENERCRDVFOTVEQTk0NTAyM0EzOEREOEI2NDJGMDI3RDNENy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCil4kMA0EAgACMAcDBQAoBCKMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHqzANBgkqhkiG9w0BAQsFAAOCAQEADlB4KWE5TXUjHKdX
qrGg0pgHSwKooaLSVlZ0NiDbQfR4LXWv/XgPPCpjR0gb3+lE/RoD7Kp23MiXjvzZ
hHcbZWI8vmMlkLFJm8fXWiSZwg79S9tyVA1TK7cmnch30524BQmYqj0K/i74SJyI
2C0EK/CL+Ks/ctiNG2f8icc6DnmQxjxZh7kj1uIVO5nL9CrfJ1YvI0qm0hfc4x93
UD3OP1q0Yn5Z4s/afIA1ORyavEmxapP0pMVk2W2GjDE9B8XncBFscXHxEJETQArI
FB5g26VGERprlNxW/3JbN2fHyk5TdOliOkWVmlHw4lZWm8tvk0TZGLcW2eVrlExA
gqNv0Q==
-----END CERTIFICATE-----