Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer
File:                     EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer (raw, json)
Hash identifier:          dWvxazSOYSUlnYUsOop6yvCQKZ1FyAwj4Q5xLK4RjmU=
Subject key identifier:   EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E4621CCA295DE05ACC49B0B751757F70E5D4302
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 19:08:24 +0000
Certificate not after:    Mon 02 Jun 2025 19:13:24 +0000
Subordinate resources:    AS: 270863
                          IP: 186.250.32.0/22
                          IP: 2804:7298::/32

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:46:21:cc:a2:95:de:05:ac:c4:9b:0b:75:17:57:f7:0e:5d:43:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 19:08:24 2024 GMT
            Not After : Jun  2 19:13:24 2025 GMT
        Subject: CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:d5:ff:0f:e3:30:a4:c2:c9:a3:63:96:94:
                    4a:20:ef:b7:3f:b9:3c:2c:98:a5:eb:63:e3:b7:c3:
                    64:f6:1d:a1:8a:c0:02:be:cd:5d:d6:85:71:88:90:
                    88:ea:3f:ba:10:d4:77:31:21:42:a4:2a:ba:ac:41:
                    e3:52:d8:66:2f:b6:55:d9:22:c6:66:a4:9b:0a:1f:
                    70:91:01:c7:78:02:c9:85:5c:f6:b8:81:0a:d3:f4:
                    26:2d:7f:9d:95:e4:9a:4d:e8:35:d3:d4:ca:d3:61:
                    c7:cc:04:41:c9:a3:c1:ca:2e:99:f2:9d:82:0b:57:
                    97:be:cb:a4:97:10:f8:b3:c1:b5:6c:18:5a:9c:b6:
                    c1:e3:cd:e8:e4:3e:36:27:f4:a3:61:ee:86:a2:d2:
                    60:28:a7:18:1f:12:23:90:20:9a:2f:13:20:14:3f:
                    2c:b6:f9:00:59:6e:d8:d7:96:c7:ab:fb:02:ac:4d:
                    14:41:9d:c3:97:67:58:cb:53:0d:c6:5a:2e:8b:75:
                    e0:10:7f:2d:55:4c:23:67:1d:7c:d3:08:19:5a:b8:
                    70:10:c5:eb:6c:c9:ce:6e:f3:75:b2:f1:6d:08:00:
                    d1:e6:78:5f:6a:c4:7d:08:27:48:66:55:80:3d:e0:
                    91:73:d4:de:52:a0:3c:e1:35:10:86:b4:3c:3d:f4:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.32.0/22
                IPv6:
                  2804:7298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270863

    Signature Algorithm: sha256WithRSAEncryption
         ac:66:0e:34:6b:92:f6:e7:aa:85:5a:72:d5:e2:a1:05:d7:b8:
         e1:17:7a:57:85:fa:04:c9:4d:7b:ea:7d:50:38:de:6a:00:1f:
         fd:ad:02:c7:6a:9e:f1:c9:2a:a3:8c:1e:72:df:63:e7:71:4f:
         f5:f6:92:94:53:3f:2d:5b:47:8f:6d:38:3a:b6:d9:97:f3:6d:
         35:93:cc:3c:42:e0:3c:7d:24:02:1f:39:ba:3e:4d:01:b9:20:
         a3:a8:50:87:5e:4d:3a:e9:a1:49:a9:6a:65:40:84:57:d0:46:
         b6:b1:c0:f8:e6:f9:41:a3:39:b8:b4:0a:d9:5f:42:bf:8f:59:
         a4:ed:d1:21:f4:a2:58:81:ed:86:36:52:f1:38:cc:9a:f0:72:
         1a:cd:6b:e6:f2:45:9d:dc:c8:3e:9a:39:c7:f3:7b:df:10:a8:
         6c:8f:89:53:07:35:0a:6e:15:db:2d:b9:6f:f3:9b:d5:ea:f5:
         e0:85:81:9d:dd:f0:f5:4b:ec:ca:d4:f6:fe:13:7c:87:ff:98:
         29:3c:66:b2:4b:86:d2:d2:70:2b:db:cd:49:56:6d:5f:14:bd:
         69:09:89:24:be:fc:e0:71:31:e6:ca:44:ea:d7:95:a5:51:ca:
         66:16:b5:62:ba:da:cb:1d:b2:ab:86:48:d2:7b:2c:68:c2:64:
         76:b5:ef:b7
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPkYhzKKV3gWsxJsLdRdX9w5dQwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MDMxOTA4MjRaFw0yNTA2MDIxOTEzMjRaMDMxMTAvBgNV
BAMTKEVCOUY1N0NBNDA1Rjk5OEQyQTBFODVDMEJCMDVFRTY2QjkwNDA2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hNX/D+MwpMLJo2OWlEog77c/
uTwsmKXrY+O3w2T2HaGKwAK+zV3WhXGIkIjqP7oQ1HcxIUKkKrqsQeNS2GYvtlXZ
IsZmpJsKH3CRAcd4AsmFXPa4gQrT9CYtf52V5JpN6DXT1MrTYcfMBEHJo8HKLpny
nYILV5e+y6SXEPizwbVsGFqctsHjzejkPjYn9KNh7oai0mAopxgfEiOQIJovEyAU
Pyy2+QBZbtjXlser+wKsTRRBncOXZ1jLUw3GWi6LdeAQfy1VTCNnHXzTCBlauHAQ
xetsyc5u83Wy8W0IANHmeF9qxH0IJ0hmVYA94JFz1N5SoDzhNRCGtDw99CM1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrn1fKQF+ZjSoO
hcC7Be5muQQGdzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmpn
YkFmMzViV2RWVndaRGNmN3dQQVlBUnpZaXN0RDdUc1J3TVZGWnRUTU0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZq
Z2JBZjM1YldkVlZ3WkRjZjd3UEFZQVJ6WWlzdEQ3VHNSd01WRlp0VE1NLzAvRUI5
RjU3Q0E0MDVGOTk4RDJBMEU4NUMwQkIwNUVFNjZCOTA0MDY3Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuvogMA0EAgACMAcDBQAoBHKYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiDzANBgkqhkiG9w0BAQsFAAOCAQEArGYONGuS9ueqhVpy
1eKhBde44Rd6V4X6BMlNe+p9UDjeagAf/a0Cx2qe8ckqo4wect9j53FP9faSlFM/
LVtHj204OrbZl/NtNZPMPELgPH0kAh85uj5NAbkgo6hQh15NOumhSalqZUCEV9BG
trHA+Ob5QaM5uLQK2V9Cv49ZpO3RIfSiWIHthjZS8TjMmvByGs1r5vJFndzIPpo5
x/N73xCobI+JUwc1Cm4V2y25b/Ob1er14IWBnd3w9UvsytT2/hN8h/+YKTxmskuG
0tJwK9vNSVZtXxS9aQmJJL784HEx5spE6teVpVHKZha1Yrrayx2yq4ZI0nssaMJk
drXvtw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 16:54:14 2024 by rpki-client on console-fra.rpki-client.org