Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer
File:                     F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer (raw, json)
Hash identifier:          cUUJuHpC229MWq5M5VfAP4ZJOv6grmn+z4lUjrFNY2o=
Subject key identifier:   F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4612D8126B834EFC9D770E9150332457CD0138A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:38:41 +0000
Certificate not after:    Thu 03 Apr 2025 00:43:41 +0000
Subordinate resources:    AS: 52898
                          IP: 168.227.156.0/22
                          IP: 177.184.64.0/20
                          IP: 2804:a9c::/32

Validation:               Failed, certificate revoked on Fri 03 May 2024 21:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:12:d8:12:6b:83:4e:fc:9d:77:0e:91:50:33:24:57:cd:01:38:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:38:41 2024 GMT
            Not After : Apr  3 00:43:41 2025 GMT
        Subject: CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:2b:11:84:0c:7d:82:24:27:d3:80:d8:a6:
                    f4:ad:1e:67:a7:5f:72:d9:f4:7a:32:a2:3a:b7:e0:
                    a6:cb:40:b5:76:f7:b0:28:91:17:d6:bb:65:34:56:
                    c1:3b:f5:4b:57:87:05:a5:4b:af:6b:74:74:c2:9c:
                    2c:3c:b9:c2:10:30:f0:e6:94:3a:56:d5:b8:a6:45:
                    2a:e2:a4:97:38:d7:ca:94:b1:e4:a0:19:25:7b:76:
                    92:9a:55:05:3a:2e:b1:45:49:d6:43:d7:db:48:8b:
                    25:af:38:e4:c4:1e:33:2c:6e:6d:92:56:44:8c:ba:
                    a3:d1:39:e4:f3:57:8c:0e:a4:ba:c6:4f:c7:cc:5f:
                    8a:fe:fa:20:6a:18:2e:07:99:fc:2c:6b:b4:60:3a:
                    4c:7e:77:83:e4:0a:ef:d5:d1:cf:5d:38:d7:e0:35:
                    91:45:6c:0b:31:f3:7e:46:e2:cb:c1:80:f6:11:b9:
                    4a:af:fa:86:96:ec:92:41:93:9c:89:05:86:f1:ec:
                    4a:77:fe:e5:36:fc:0c:fd:88:8c:0a:3d:5c:72:06:
                    d3:30:98:2a:bf:53:df:25:c0:af:8a:fe:59:b8:a0:
                    a0:3f:68:37:01:74:87:f3:11:b1:53:77:00:89:ab:
                    62:98:7c:c5:26:71:a2:f2:1c:be:01:22:af:32:15:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22
                  177.184.64.0/20
                IPv6:
                  2804:a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52898

    Signature Algorithm: sha256WithRSAEncryption
         9a:2a:27:1b:d8:8b:3a:c1:8f:2f:af:12:e7:da:8f:67:29:45:
         8c:38:a2:0d:b6:25:ae:a9:62:bf:b6:c3:b2:95:06:6f:2a:98:
         29:09:2b:de:6f:c4:38:ee:58:3d:16:1e:ee:70:5a:8e:dc:51:
         68:f8:cc:fd:d1:2c:a8:2c:08:39:d2:d3:f9:cb:74:4a:d4:55:
         40:4e:36:32:7e:54:d5:ef:ae:08:df:00:96:2b:81:ca:a2:43:
         4c:f2:24:d4:72:6b:d7:69:02:c8:25:ae:4e:bc:2d:dc:2c:1a:
         01:af:51:ca:59:72:b8:82:04:29:20:34:29:fd:15:a2:58:5c:
         f1:4d:fd:b6:cc:7b:22:15:21:cb:73:0b:1d:09:1b:df:4f:08:
         cc:a8:ec:d1:e5:81:0a:21:08:33:96:ec:73:8a:04:0e:17:54:
         5d:d9:79:cb:75:af:19:81:44:a4:ff:0b:ba:7d:07:99:69:91:
         01:c1:1f:f6:c0:08:5a:e8:e8:0c:cb:cc:fa:77:5f:f5:c3:4a:
         72:c1:17:87:28:8f:dd:71:23:c9:47:bf:79:b2:f4:3b:ef:fe:
         1b:1b:de:ca:a7:54:59:75:f5:56:b7:44:95:eb:ba:08:4a:54:
         69:c1:3c:7e:56:3d:fb:4b:e4:b9:7c:df:78:53:ff:77:6b:95:
         6b:f6:aa:6c
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIURhLYEmuDTvyddw6RUDMkV80BOKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMDM4NDFaFw0yNTA0MDMwMDQzNDFaMDMxMTAvBgNV
BAMTKEYwNEM1QkU1NjYzNkZFQ0Q4RkVCNzhDMkRDQTU2NDc0QjgxRjgxOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OCsRhAx9giQn04DYpvStHmen
X3LZ9Hoyojq34KbLQLV297AokRfWu2U0VsE79UtXhwWlS69rdHTCnCw8ucIQMPDm
lDpW1bimRSripJc418qUseSgGSV7dpKaVQU6LrFFSdZD19tIiyWvOOTEHjMsbm2S
VkSMuqPROeTzV4wOpLrGT8fMX4r++iBqGC4Hmfwsa7RgOkx+d4PkCu/V0c9dONfg
NZFFbAsx835G4svBgPYRuUqv+oaW7JJBk5yJBYbx7Ep3/uU2/Az9iIwKPVxyBtMw
mCq/U98lwK+K/lm4oKA/aDcBdIfzEbFTdwCJq2KYfMUmcaLyHL4BIq8yFbkxAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwTFvlZjb+zY/r
eMLcpWR0uB+BizAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Fu
aEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4cTQvMjCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Fu
aEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4cTQvMi9GMDRD
NUJFNTY2MzZGRUNEOEZFQjc4QzJEQ0E1NjQ3NEI4MUY4MThCLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAKo45wDBASxuEAwDQQCAAIwBwMFACgECpwwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAM6iMA0GCSqGSIb3DQEBCwUAA4IBAQCaKicb2Is6
wY8vrxLn2o9nKUWMOKINtiWuqWK/tsOylQZvKpgpCSveb8Q47lg9Fh7ucFqO3FFo
+Mz90SyoLAg50tP5y3RK1FVATjYyflTV764I3wCWK4HKokNM8iTUcmvXaQLIJa5O
vC3cLBoBr1HKWXK4ggQpIDQp/RWiWFzxTf22zHsiFSHLcwsdCRvfTwjMqOzR5YEK
IQgzluxzigQOF1Rd2XnLda8ZgUSk/wu6fQeZaZEBwR/2wAha6OgMy8z6d1/1w0py
wReHKI/dcSPJR795svQ77/4bG97Kp1RZdfVWt0SV67oISlRpwTx+Vj37S+S5fN94
U/93a5Vr9qps
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org