Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
File:                     EFECFF06B567336335B796BF5ACABEA67659A437.cer (raw, json)
Hash identifier:          ztVZQjWnT7DJnWaube0h42Jgyfojls6/qdSzA8n5h+A=
Subject key identifier:   EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F85695DB9622FFBC2E8164403A9322A7F5E467B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 14:03:56 +0000
Certificate not after:    Mon 05 May 2025 14:08:56 +0000
Subordinate resources:    AS: 268676
                          IP: 45.165.132.0/22
                          IP: 2804:54e4::/32

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 19:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:85:69:5d:b9:62:2f:fb:c2:e8:16:44:03:a9:32:2a:7f:5e:46:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 14:03:56 2024 GMT
            Not After : May  5 14:08:56 2025 GMT
        Subject: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:3e:cc:85:4f:4e:9c:f0:49:c8:f2:11:0e:
                    da:a3:26:dd:e0:0d:c7:bb:3f:c6:d0:6e:e6:32:81:
                    7a:56:f7:35:21:8a:98:79:cb:e1:0d:45:44:e9:d5:
                    c5:18:17:ff:fc:54:8d:d4:1c:5a:f0:51:82:f8:cd:
                    28:60:a5:ea:31:e1:0b:96:92:a5:5d:98:68:c4:35:
                    d1:c7:40:ed:6c:9f:22:27:de:3d:66:47:5e:5b:fc:
                    1d:09:a8:66:a1:ed:9a:0d:52:3e:49:f9:69:a7:65:
                    d4:6d:a7:4a:80:53:06:7f:5b:7b:ad:f9:68:11:8a:
                    a1:d9:c5:9c:a2:2a:0a:91:46:eb:46:38:b6:37:46:
                    2a:2a:5a:73:48:f9:b3:25:d7:1d:47:e2:10:96:e2:
                    59:f2:bb:49:fe:5c:5b:ee:14:ce:c0:ae:26:a5:11:
                    16:14:d3:de:95:5c:d4:4c:56:b2:12:cf:dd:23:97:
                    3c:88:81:a0:c3:18:9e:3a:f3:b6:1b:0e:65:99:19:
                    e5:f9:b0:34:2f:7e:8d:93:7f:8d:55:06:41:b1:73:
                    b9:e6:eb:6b:28:e4:47:cd:f8:53:a4:e8:97:1e:fa:
                    76:c7:67:06:44:1c:00:ae:19:18:6a:42:66:24:b4:
                    47:7a:ed:ec:d3:58:9a:f0:7e:9c:c2:49:5a:85:f7:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.132.0/22
                IPv6:
                  2804:54e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268676

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:10:0e:a3:be:1e:5f:4d:55:80:37:6f:6b:d8:b7:0d:01:
         a1:9b:12:4d:08:28:4b:2f:6a:8c:54:a3:15:c9:7b:47:12:04:
         f4:3f:ea:e6:b1:ba:c4:85:a3:0c:b1:3a:5b:82:51:50:a7:9e:
         c1:1c:9b:6e:23:e2:b4:0c:a1:20:33:b9:b5:bc:6d:7e:70:26:
         77:fd:33:8f:5a:bc:a9:38:e0:dc:65:ab:23:5b:4a:2c:04:80:
         ce:a7:e1:1a:b1:46:1b:05:60:21:b7:d8:a3:ab:b8:19:25:11:
         29:46:3e:7e:5f:38:b3:f2:b0:3f:97:db:80:24:78:b0:cb:03:
         bd:84:39:ec:61:16:4f:df:80:ec:dd:e5:27:82:99:8d:53:40:
         07:f6:c7:52:33:72:2e:40:6a:86:f4:b9:ec:87:66:9c:98:ff:
         0c:a8:34:cc:82:a3:91:35:ab:a3:5f:4f:d9:9c:55:99:66:f9:
         68:36:e8:ce:0b:b9:42:b1:e4:ea:48:eb:9f:62:a2:1d:4b:74:
         d1:0c:36:92:4a:89:a8:cb:d8:85:a1:cc:57:4f:a6:cc:ec:d2:
         6e:b2:a7:d2:77:e8:c8:bd:d2:5a:06:a7:32:8c:03:c0:19:2c:
         da:db:61:25:5f:0b:c8:e8:7d:3a:ec:51:3f:ca:f5:30:b8:70:
         bb:b9:83:8e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUf4VpXbliL/vC6BZEA6kyKn9eRnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MDYxNDAzNTZaFw0yNTA1MDUxNDA4NTZaMDMxMTAvBgNV
BAMTKEVGRUNGRjA2QjU2NzMzNjMzNUI3OTZCRjVBQ0FCRUE2NzY1OUE0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAj7MhU9OnPBJyPIRDtqjJt3g
Dce7P8bQbuYygXpW9zUhiph5y+ENRUTp1cUYF//8VI3UHFrwUYL4zShgpeox4QuW
kqVdmGjENdHHQO1snyIn3j1mR15b/B0JqGah7ZoNUj5J+WmnZdRtp0qAUwZ/W3ut
+WgRiqHZxZyiKgqRRutGOLY3RioqWnNI+bMl1x1H4hCW4lnyu0n+XFvuFM7Arial
ERYU096VXNRMVrISz90jlzyIgaDDGJ4687YbDmWZGeX5sDQvfo2Tf41VBkGxc7nm
62so5EfN+FOk6Jce+nbHZwZEHACuGRhqQmYktEd67ezTWJrwfpzCSVqF93mTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTv7P8GtWczYzW3
lr9ayr6mdlmkNzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXlv
bzNxV2ZvOHZEcE1jZ0NHRmViSkZnckJoV1BQeXdnVmVhY1p6bWFhSk4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F5
b28zcVdmbzh2RHBNY2dDR0ZlYkpGZ3JCaFdQUHl3Z1ZlYWNaem1hYUpOLzAvRUZF
Q0ZGMDZCNTY3MzM2MzM1Qjc5NkJGNUFDQUJFQTY3NjU5QTQzNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaWEMA0EAgACMAcDBQAoBFTkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZhDANBgkqhkiG9w0BAQsFAAOCAQEAgJ4QDqO+Hl9NVYA3
b2vYtw0BoZsSTQgoSy9qjFSjFcl7RxIE9D/q5rG6xIWjDLE6W4JRUKeewRybbiPi
tAyhIDO5tbxtfnAmd/0zj1q8qTjg3GWrI1tKLASAzqfhGrFGGwVgIbfYo6u4GSUR
KUY+fl84s/KwP5fbgCR4sMsDvYQ57GEWT9+A7N3lJ4KZjVNAB/bHUjNyLkBqhvS5
7IdmnJj/DKg0zIKjkTWro19P2ZxVmWb5aDbozgu5QrHk6kjrn2KiHUt00Qw2kkqJ
qMvYhaHMV0+mzOzSbrKn0nfoyL3SWganMowDwBks2tthJV8LyOh9OuxRP8r1MLhw
u7mDjg==
-----END CERTIFICATE-----
Generated at Thu Aug 29 21:41:42 2024 by rpki-client on console-fra.rpki-client.org