Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7D836D65B0B513E88A8D2438552042B3E8B18C5.cer
File:                     E7D836D65B0B513E88A8D2438552042B3E8B18C5.cer (raw, json)
Hash identifier:          2/52Kyf5CgpwvmokS0o1tUlNrXd1ktAermxGPGL24bE=
Subject key identifier:   E7:D8:36:D6:5B:0B:51:3E:88:A8:D2:43:85:52:04:2B:3E:8B:18:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7DED495152DA21048D168A3C19E5BC833265ADAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/E7D836D65B0B513E88A8D2438552042B3E8B18C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:44:17 +0000
Certificate not after:    Thu 03 Apr 2025 18:49:17 +0000
Subordinate resources:    AS: 269150
                          IP: 45.180.220.0/22
                          IP: 2804:602c::/32

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 18:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ed:49:51:52:da:21:04:8d:16:8a:3c:19:e5:bc:83:32:65:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:44:17 2024 GMT
            Not After : Apr  3 18:49:17 2025 GMT
        Subject: CN=E7D836D65B0B513E88A8D2438552042B3E8B18C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:5a:85:e3:0a:8b:4c:95:6e:0d:27:3a:64:
                    ee:43:db:28:3c:3b:dd:f4:32:49:aa:b6:42:e1:55:
                    4a:26:8a:dd:06:4c:c1:e8:3e:7a:f8:78:72:f3:cc:
                    1e:b8:a8:9a:65:af:71:f0:4f:ff:52:17:36:a6:ab:
                    af:88:69:3c:9e:a7:f9:6b:e9:b9:d9:37:20:09:d1:
                    ea:e7:f5:54:62:4c:61:a6:70:43:aa:17:0b:96:c4:
                    ad:ae:e1:af:31:56:b7:c6:98:09:9e:28:a0:65:a9:
                    01:85:06:95:09:50:f0:0e:c8:30:f4:cd:8b:8b:f0:
                    23:f1:d7:6c:ff:54:68:af:ca:80:0f:3d:fd:57:e3:
                    a9:b1:c6:bd:e7:1b:14:f2:e7:62:52:74:f4:6c:ee:
                    ae:a0:f4:0e:a6:c1:f7:bb:ce:a3:75:f0:00:e7:86:
                    1e:c4:a4:86:0a:cc:1a:a4:51:69:38:5d:3a:f0:29:
                    a1:64:cf:47:48:84:ee:d7:da:ef:b4:73:64:8a:97:
                    9d:32:9e:7e:8e:72:72:66:e9:27:81:56:9d:bc:82:
                    38:a2:d3:52:68:d3:7d:bf:20:39:4f:03:d3:eb:03:
                    6e:dd:d4:00:aa:47:5b:25:49:f9:d7:b6:e3:43:da:
                    75:ca:d4:a4:5a:1f:3a:67:18:6f:9b:f3:de:eb:e9:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:D8:36:D6:5B:0B:51:3E:88:A8:D2:43:85:52:04:2B:3E:8B:18:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/E7D836D65B0B513E88A8D2438552042B3E8B18C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.220.0/22
                IPv6:
                  2804:602c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269150

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:91:96:06:38:73:d9:a4:9f:04:26:a0:ce:c0:7e:02:43:
         f0:d5:45:90:2f:2a:3f:b0:f1:a3:54:c8:dd:7b:bd:2e:56:91:
         24:c7:bc:70:b7:87:60:c5:fc:3c:3b:7e:68:55:b6:6a:b9:fe:
         f7:bd:7d:76:43:f4:21:54:e5:f1:35:55:76:a6:b1:95:80:57:
         5e:71:52:5e:ec:20:43:b8:4b:37:92:f9:6d:2f:66:40:5f:0a:
         b4:b6:ce:cb:64:69:e7:13:43:bb:c4:92:b6:3e:5b:2c:bf:8e:
         54:77:19:46:95:82:7e:44:a2:11:1a:b6:90:bc:ed:15:52:bf:
         0b:b1:80:cf:3a:56:19:69:3c:40:89:d9:4d:97:4e:9c:b1:8b:
         7f:26:fb:b1:6d:53:1b:d1:ed:a3:7d:5b:c7:e1:74:4f:b3:b7:
         b6:eb:82:3f:41:ae:4c:85:0d:7a:44:26:78:af:88:77:cc:1b:
         5f:17:a9:ca:27:2c:31:5d:26:8f:c6:82:1e:06:35:c2:3c:8e:
         c6:ab:d3:6a:a5:2c:3c:9b:98:9f:84:69:16:4a:7b:b9:db:60:
         88:ba:27:7b:3a:d8:74:58:e2:ea:9f:8e:6d:51:cc:01:6d:f0:
         05:b8:69:16:9e:7a:07:25:a9:e5:f4:1b:ce:4d:10:2f:e1:25:
         97:b5:5c:51
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfe1JUVLaIQSNFoo8GeW8gzJlraswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODQ0MTdaFw0yNTA0MDMxODQ5MTdaMDMxMTAvBgNV
BAMTKEU3RDgzNkQ2NUIwQjUxM0U4OEE4RDI0Mzg1NTIwNDJCM0U4QjE4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDVqF4wqLTJVuDSc6ZO5D2yg8
O930MkmqtkLhVUomit0GTMHoPnr4eHLzzB64qJplr3HwT/9SFzamq6+IaTyep/lr
6bnZNyAJ0ern9VRiTGGmcEOqFwuWxK2u4a8xVrfGmAmeKKBlqQGFBpUJUPAOyDD0
zYuL8CPx12z/VGivyoAPPf1X46mxxr3nGxTy52JSdPRs7q6g9A6mwfe7zqN18ADn
hh7EpIYKzBqkUWk4XTrwKaFkz0dIhO7X2u+0c2SKl50ynn6OcnJm6SeBVp28gjii
01Jo032/IDlPA9PrA27d1ACqR1slSfnXtuND2nXK1KRaHzpnGG+b897r6W8NAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTn2DbWWwtRPoio
0kOFUgQrPosYxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDF0
a0ZBU05KUHY0cUN0QnJaSEpUdW9jMUtXNHVhcVB0eHNxTGRkanBqZHcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gx
dGtGQVNOSlB2NHFDdEJyWkhKVHVvYzFLVzR1YXFQdHhzcUxkZGpwamR3LzEvRTdE
ODM2RDY1QjBCNTEzRTg4QThEMjQzODU1MjA0MkIzRThCMThDNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbTcMA0EAgACMAcDBQAoBGAsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbXjANBgkqhkiG9w0BAQsFAAOCAQEAwAORlgY4c9mknwQm
oM7AfgJD8NVFkC8qP7Dxo1TI3Xu9LlaRJMe8cLeHYMX8PDt+aFW2arn+9719dkP0
IVTl8TVVdqaxlYBXXnFSXuwgQ7hLN5L5bS9mQF8KtLbOy2Rp5xNDu8SStj5bLL+O
VHcZRpWCfkSiERq2kLztFVK/C7GAzzpWGWk8QInZTZdOnLGLfyb7sW1TG9Hto31b
x+F0T7O3tuuCP0GuTIUNekQmeK+Id8wbXxepyicsMV0mj8aCHgY1wjyOxqvTaqUs
PJuYn4RpFkp7udtgiLonezrYdFji6p+ObVHMAW3wBbhpFp56ByWp5fQbzk0QL+El
l7VcUQ==
-----END CERTIFICATE-----
Generated at Sun Jul 28 20:19:04 2024 by rpki-client on console-fra.rpki-client.org