Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.cer
File:                     EA79FBAB9C686CB61DC9B11E8881DF9992262F61.cer (raw, json)
Hash identifier:          ecdGvXlsWwBCU/i9U4JzLKJFKDpuII6mKecGlYCyD9s=
Subject key identifier:   EA:79:FB:AB:9C:68:6C:B6:1D:C9:B1:1E:88:81:DF:99:92:26:2F:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       216A10D5C16316554722CDBA362234539FAA8835
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 12:46:46 +0000
Certificate not after:    Thu 19 Jun 2025 12:51:46 +0000
Subordinate resources:    AS: 270280
                          IP: 200.125.172.0/22
                          IP: 2804:699c::/32

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 11:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:10:d5:c1:63:16:55:47:22:cd:ba:36:22:34:53:9f:aa:88:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 12:46:46 2024 GMT
            Not After : Jun 19 12:51:46 2025 GMT
        Subject: CN=EA79FBAB9C686CB61DC9B11E8881DF9992262F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:65:21:e3:f6:e2:64:5d:3a:63:de:e8:06:
                    16:fc:75:db:0b:9a:3e:f8:70:e7:98:fd:6e:dd:c5:
                    5c:17:26:83:e9:4c:8b:7b:3e:a6:30:de:70:66:0b:
                    7b:ed:a4:2a:1b:64:b5:5a:fb:0c:0d:a1:5a:f1:a6:
                    eb:d3:a9:4c:3e:62:a5:9a:e7:f2:f8:00:51:cd:63:
                    d2:23:2d:15:ba:a3:68:8c:d1:4f:fe:01:04:3d:8c:
                    62:4c:ad:77:a5:9c:13:1a:2d:51:93:6e:26:20:46:
                    2c:ee:c4:8a:2b:e8:f2:6f:51:25:3e:02:f9:43:3d:
                    6e:b6:2e:e6:ba:c4:81:47:e8:b7:da:1b:f6:08:0a:
                    06:26:ef:24:ac:d4:d8:f4:56:b7:26:2a:b6:cd:ad:
                    dc:aa:52:75:01:83:ee:7a:c3:c2:0a:8b:f5:bc:0a:
                    9c:58:bf:ea:56:3b:32:88:9e:77:38:27:41:0e:6a:
                    34:b5:c8:fd:68:93:b9:5b:46:b7:a4:6d:40:9e:22:
                    05:16:d9:58:cb:75:ea:06:9e:71:c7:0a:4c:29:b8:
                    98:46:95:2d:b3:37:4a:ed:b5:34:3d:bc:ae:d1:67:
                    ce:a7:65:9a:86:3a:3b:3f:43:4c:90:fc:c9:78:b9:
                    f8:17:c6:90:93:7f:6f:c4:4c:62:49:a6:81:6c:a9:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:79:FB:AB:9C:68:6C:B6:1D:C9:B1:1E:88:81:DF:99:92:26:2F:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.172.0/22
                IPv6:
                  2804:699c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270280

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:0b:b7:7c:ac:93:f5:01:1b:39:f2:f5:24:d1:89:2b:4f:
         78:fe:97:11:c5:64:c0:cf:ab:2f:44:74:5e:fc:e2:be:2c:a0:
         2f:1a:b7:97:6f:73:24:19:10:70:11:44:e3:fb:8d:f5:0d:b5:
         a1:32:97:a1:df:23:18:da:83:29:cb:63:21:4a:3c:89:e4:79:
         29:6e:3b:d7:9d:2c:27:54:a7:76:93:7a:94:68:55:b9:78:56:
         ff:7b:a9:97:1f:8f:92:ec:3f:37:5f:ad:6a:e2:6c:48:f9:45:
         0a:d1:aa:3c:fc:72:03:e8:7b:ee:8c:2e:ee:82:44:45:5e:04:
         24:e6:10:97:33:21:93:0a:70:28:ae:02:19:95:8c:9c:04:ec:
         9e:e2:50:99:a1:c4:6f:58:5c:48:31:2a:46:04:2d:bf:51:86:
         65:0d:73:6d:4c:da:bb:3f:b0:72:d8:49:ad:7b:22:53:b1:fc:
         00:c2:f5:28:cd:db:3e:54:78:e2:c2:55:bf:12:eb:4d:a1:e9:
         55:22:60:86:35:56:f7:13:d3:4e:7c:1d:8b:bd:58:14:9e:b2:
         fe:20:75:fb:78:2b:c3:2c:4d:f1:6b:a1:94:17:00:80:cd:72:
         72:52:7d:45:5e:fd:f6:13:12:65:8d:8e:b5:0a:1d:28:72:0f:
         e0:74:ac:4d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIWoQ1cFjFlVHIs26NiI0U5+qiDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjAxMjQ2NDZaFw0yNTA2MTkxMjUxNDZaMDMxMTAvBgNV
BAMTKEVBNzlGQkFCOUM2ODZDQjYxREM5QjExRTg4ODFERjk5OTIyNjJGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kGUh4/biZF06Y97oBhb8ddsL
mj74cOeY/W7dxVwXJoPpTIt7PqYw3nBmC3vtpCobZLVa+wwNoVrxpuvTqUw+YqWa
5/L4AFHNY9IjLRW6o2iM0U/+AQQ9jGJMrXelnBMaLVGTbiYgRizuxIor6PJvUSU+
AvlDPW62Lua6xIFH6LfaG/YICgYm7ySs1Nj0VrcmKrbNrdyqUnUBg+56w8IKi/W8
CpxYv+pWOzKInnc4J0EOajS1yP1ok7lbRrekbUCeIgUW2VjLdeoGnnHHCkwpuJhG
lS2zN0rttTQ9vK7RZ86nZZqGOjs/Q0yQ/Ml4ufgXxpCTf2/ETGJJpoFsqUX/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqefurnGhsth3J
sR6Igd+ZkiYvYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzVT
N1I1QVpON0ZSWlZQaFkzTllYM202Tmg4Q0ZxSFRkQmRFQm5yMzFmRlcvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M1
UzdSNUFaTjdGUlpWUGhZM05ZWDNtNk5oOENGcUhUZEJkRUJucjMxZkZXLzIvRUE3
OUZCQUI5QzY4NkNCNjFEQzlCMTFFODg4MURGOTk5MjI2MkY2MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyH2sMA0EAgACMAcDBQAoBGmcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQfyDANBgkqhkiG9w0BAQsFAAOCAQEAFusLt3ysk/UBGzny
9STRiStPeP6XEcVkwM+rL0R0XvziviygLxq3l29zJBkQcBFE4/uN9Q21oTKXod8j
GNqDKctjIUo8ieR5KW47150sJ1SndpN6lGhVuXhW/3uplx+Pkuw/N1+tauJsSPlF
CtGqPPxyA+h77owu7oJERV4EJOYQlzMhkwpwKK4CGZWMnATsnuJQmaHEb1hcSDEq
RgQtv1GGZQ1zbUzauz+wcthJrXsiU7H8AML1KM3bPlR44sJVvxLrTaHpVSJghjVW
9xPTTnwdi71YFJ6y/iB1+3grwyxN8WuhlBcAgM1yclJ9RV799hMSZY2OtQodKHIP
4HSsTQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:41 2024 by rpki-client on console-ams.rpki-client.org