Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2CBC68920860178BF6324607635148F318DE957.cer
File:                     F2CBC68920860178BF6324607635148F318DE957.cer (raw, json)
Hash identifier:          AD1hSV1+PSoRARFv3RZND9FFFUyftHYH73TuCAcj4Z4=
Subject key identifier:   F2:CB:C6:89:20:86:01:78:BF:63:24:60:76:35:14:8F:31:8D:E9:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08E284DB83954D321754D4ADD7EDF22604296234
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/F2CBC68920860178BF6324607635148F318DE957.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Sep 2024 18:10:19 +0000
Certificate not after:    Wed 10 Sep 2025 18:15:19 +0000
Subordinate resources:    AS: 263891
                          IP: 138.204.48.0/22
                          IP: 170.78.160.0/22
                          IP: 2804:2748::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 04:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e2:84:db:83:95:4d:32:17:54:d4:ad:d7:ed:f2:26:04:29:62:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 18:10:19 2024 GMT
            Not After : Sep 10 18:15:19 2025 GMT
        Subject: CN=F2CBC68920860178BF6324607635148F318DE957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:07:f3:08:9b:f0:ab:c5:b6:75:3b:ec:de:
                    9e:35:47:48:ef:b4:d3:b0:b2:67:84:51:7e:20:7a:
                    de:1c:14:c0:59:fb:ca:c1:1b:90:7e:9b:4a:6b:fc:
                    b9:61:ac:0a:e3:02:ab:22:3e:06:71:a8:17:29:22:
                    e2:48:8a:95:ca:2d:d4:bb:be:e1:7f:20:e8:07:96:
                    58:f4:49:f4:a2:10:da:5c:64:c7:8b:88:d2:24:d8:
                    47:2b:b5:f7:75:65:d0:7e:40:5f:34:84:d4:cc:16:
                    24:4f:7d:00:3c:79:38:5d:f4:14:00:36:1f:3e:93:
                    0e:ce:e8:a7:c1:81:1c:58:4c:3a:dd:50:e1:dd:28:
                    f1:78:8a:be:56:f7:68:2c:c2:17:9a:86:39:7d:a4:
                    eb:cb:0b:2f:ff:fe:e3:4e:91:7c:3a:ce:fd:ac:29:
                    f4:d0:a9:98:a1:6d:31:d9:66:25:ae:65:72:d0:21:
                    12:24:46:25:06:6a:f4:b6:10:59:ba:8d:61:49:c8:
                    8e:e8:92:85:a8:cc:d6:31:a6:be:41:83:c9:25:2e:
                    a7:86:a0:64:c9:f9:8e:af:19:01:d2:3f:d8:52:49:
                    66:76:f3:e8:ea:42:85:2c:c6:1b:69:34:fd:bb:3e:
                    86:f9:51:0b:2b:57:dc:2d:b2:68:f2:57:44:99:87:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:CB:C6:89:20:86:01:78:BF:63:24:60:76:35:14:8F:31:8D:E9:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/F2CBC68920860178BF6324607635148F318DE957.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.48.0/22
                  170.78.160.0/22
                IPv6:
                  2804:2748::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263891

    Signature Algorithm: sha256WithRSAEncryption
         11:58:b3:e1:37:f0:0a:c5:ab:81:d3:45:05:21:a5:65:f2:37:
         9b:9e:0d:92:bb:19:07:56:11:92:0e:26:ac:f9:b5:72:eb:3a:
         27:46:17:06:06:d8:40:7b:f4:29:70:18:29:ca:f1:21:29:58:
         0d:27:0c:8a:bb:2a:ad:c1:a1:40:2a:95:09:c5:a1:5c:aa:dd:
         ec:cf:6d:c9:af:25:cc:6a:d6:1d:9a:3c:2c:75:4b:d3:c6:7f:
         60:42:42:e4:21:07:86:37:f6:d4:5c:b6:66:fe:c4:a4:31:cd:
         05:1a:16:eb:b7:85:6f:ca:67:49:5a:87:1c:a5:e5:20:63:c9:
         a3:56:f5:01:6b:09:61:85:3d:f6:06:bf:92:74:a1:98:5d:b4:
         bf:1c:58:7f:21:6d:34:d9:08:03:4a:e9:4a:e7:56:d7:4d:9d:
         9d:31:92:32:43:0d:b8:52:11:66:aa:1e:60:e8:73:fe:92:ab:
         2c:3a:93:02:73:87:2a:9f:72:30:e2:dc:1e:89:73:7e:95:84:
         f4:ec:cd:b7:48:9b:cb:12:1d:14:81:12:23:4d:46:5b:ce:4e:
         ce:04:e3:02:be:ff:d9:0b:15:6e:a8:0e:21:6c:ca:38:0e:1d:
         89:04:07:0e:17:7b:a6:f8:5c:f2:6a:e8:ac:58:92:7c:79:39:
         98:34:a5:98
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUCOKE24OVTTIXVNSt1+3yJgQpYjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTExODEwMTlaFw0yNTA5MTAxODE1MTlaMDMxMTAvBgNV
BAMTKEYyQ0JDNjg5MjA4NjAxNzhCRjYzMjQ2MDc2MzUxNDhGMzE4REU5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJgfzCJvwq8W2dTvs3p41R0jv
tNOwsmeEUX4get4cFMBZ+8rBG5B+m0pr/LlhrArjAqsiPgZxqBcpIuJIipXKLdS7
vuF/IOgHllj0SfSiENpcZMeLiNIk2Ecrtfd1ZdB+QF80hNTMFiRPfQA8eThd9BQA
Nh8+kw7O6KfBgRxYTDrdUOHdKPF4ir5W92gswheahjl9pOvLCy///uNOkXw6zv2s
KfTQqZihbTHZZiWuZXLQIRIkRiUGavS2EFm6jWFJyI7okoWozNYxpr5Bg8klLqeG
oGTJ+Y6vGQHSP9hSSWZ28+jqQoUsxhtpNP27Pob5UQsrV9wtsmjyV0SZh1+vAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyy8aJIIYBeL9j
JGB2NRSPMY3pVzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlFn
QWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JR
Z0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAvRjJD
QkM2ODkyMDg2MDE3OEJGNjMyNDYwNzYzNTE0OEYzMThERTk1Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCiswwAwQCqk6gMA0EAgACMAcDBQAoBCdIMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQG0zANBgkqhkiG9w0BAQsFAAOCAQEAEViz4Tfw
CsWrgdNFBSGlZfI3m54NkrsZB1YRkg4mrPm1cus6J0YXBgbYQHv0KXAYKcrxISlY
DScMirsqrcGhQCqVCcWhXKrd7M9tya8lzGrWHZo8LHVL08Z/YEJC5CEHhjf21Fy2
Zv7EpDHNBRoW67eFb8pnSVqHHKXlIGPJo1b1AWsJYYU99ga/knShmF20vxxYfyFt
NNkIA0rpSudW102dnTGSMkMNuFIRZqoeYOhz/pKrLDqTAnOHKp9yMOLcHolzfpWE
9OzNt0ibyxIdFIESI01GW85OzgTjAr7/2QsVbqgOIWzKOA4diQQHDhd7pvhc8mro
rFiSfHk5mDSlmA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 06:55:14 2024 by rpki-client on console-fra.rpki-client.org