Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.cer
File:                     F648B3E33D4A34C0451A6847DC9402F09BF30EA1.cer (raw, json)
Hash identifier:          4zRhjn4ssWz1t93B66okMOQTeiSH1QY8j9yzlbLIowo=
Subject key identifier:   F6:48:B3:E3:3D:4A:34:C0:45:1A:68:47:DC:94:02:F0:9B:F3:0E:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       161EAA0F1A0CB8CDE23EE9D997CDCC02E8CC7701
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:04:56 +0000
Certificate not after:    Thu 03 Apr 2025 07:09:56 +0000
Subordinate resources:    AS: 268991
                          IP: 45.177.116.0/22
                          IP: 2804:5dc4::/32

Validation:               Failed, certificate revoked on Thu 02 May 2024 06:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:aa:0f:1a:0c:b8:cd:e2:3e:e9:d9:97:cd:cc:02:e8:cc:77:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:04:56 2024 GMT
            Not After : Apr  3 07:09:56 2025 GMT
        Subject: CN=F648B3E33D4A34C0451A6847DC9402F09BF30EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:66:2f:27:9c:40:1d:f3:a9:4a:4a:2f:22:
                    33:cb:ae:bb:54:8c:62:46:35:fc:79:ea:f4:23:f2:
                    53:43:70:84:d0:c2:fa:be:55:9d:0d:91:c7:ff:e2:
                    a4:2e:ee:a8:5c:c7:c2:1e:39:98:aa:fe:14:c7:f5:
                    45:e9:77:d2:0d:c0:fd:4f:1d:e8:b5:37:66:e1:c7:
                    0c:b9:18:bc:50:72:fb:ad:aa:e5:06:aa:66:35:f6:
                    81:ae:bc:40:f2:37:6c:e3:5f:8a:9b:ed:e8:e4:2b:
                    e4:92:40:13:f4:0a:d5:d0:2f:f1:b9:cc:3a:2e:bc:
                    58:40:e6:5a:0d:6b:c5:51:96:bc:57:bd:c6:44:3a:
                    4d:3c:1e:dc:55:e5:6a:74:70:e3:51:f9:78:fd:af:
                    fe:15:08:1c:62:20:b7:7e:c9:ca:3d:a6:a2:6b:40:
                    84:f7:22:8c:fc:ce:79:0a:40:66:0b:02:40:f5:39:
                    e4:31:e0:39:e3:a2:d7:d3:a5:e7:8b:de:e9:e5:a3:
                    d0:69:42:d2:2e:5a:22:30:97:ae:05:7e:b6:b9:11:
                    56:07:f6:e5:fe:9e:17:68:fb:3f:3a:3c:3b:9a:57:
                    7e:01:72:9a:ef:85:7f:ee:58:69:17:ab:f6:04:9e:
                    52:18:31:7b:a7:b9:d4:6e:93:53:38:df:55:78:5f:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:48:B3:E3:3D:4A:34:C0:45:1A:68:47:DC:94:02:F0:9B:F3:0E:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.116.0/22
                IPv6:
                  2804:5dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268991

    Signature Algorithm: sha256WithRSAEncryption
         76:d2:29:61:ab:8f:d5:c1:4f:00:5c:53:81:b9:da:d1:c2:85:
         1d:e2:05:ec:04:e9:f2:15:7b:96:94:86:39:9c:46:ce:2c:6d:
         e9:4e:2a:e5:91:de:69:ec:ec:ee:96:49:25:3b:07:5a:ca:aa:
         66:47:c1:df:5c:04:7c:02:75:58:01:2c:59:e7:11:39:2c:03:
         c9:8b:58:21:02:10:1e:ac:cf:2d:6f:ed:41:83:f4:41:ff:ad:
         ca:d5:d3:99:e4:5f:15:96:1c:56:21:99:82:b2:f5:64:1f:23:
         f2:0b:7f:ba:a1:24:55:56:9d:6c:26:a2:c6:91:a8:19:c3:31:
         2e:58:11:09:3a:e6:10:30:1a:ad:87:c0:4f:b6:97:b6:ce:a2:
         f8:46:ba:3e:25:d6:fe:6a:f0:9c:1a:20:cd:07:c7:6a:b7:e7:
         cd:24:b2:d2:78:bf:37:2f:88:17:7a:cc:f2:4b:eb:8b:b6:88:
         3d:0d:50:e2:4c:ed:ed:f0:51:ac:40:ed:46:7d:a9:84:a2:de:
         75:44:35:41:cd:2e:6f:f4:7d:44:e2:62:62:bf:99:38:55:74:
         ae:d0:17:95:db:3d:6e:1d:50:44:35:84:e5:c0:bd:15:00:bd:
         07:1c:88:b4:04:2a:68:0e:2c:93:08:78:5a:d7:96:48:3e:e6:
         a5:ca:57:2a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFh6qDxoMuM3iPunZl83MAujMdwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzA0NTZaFw0yNTA0MDMwNzA5NTZaMDMxMTAvBgNV
BAMTKEY2NDhCM0UzM0Q0QTM0QzA0NTFBNjg0N0RDOTQwMkYwOUJGMzBFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzmYvJ5xAHfOpSkovIjPLrrtU
jGJGNfx56vQj8lNDcITQwvq+VZ0Nkcf/4qQu7qhcx8IeOZiq/hTH9UXpd9INwP1P
Hei1N2bhxwy5GLxQcvutquUGqmY19oGuvEDyN2zjX4qb7ejkK+SSQBP0CtXQL/G5
zDouvFhA5loNa8VRlrxXvcZEOk08HtxV5Wp0cONR+Xj9r/4VCBxiILd+yco9pqJr
QIT3Ioz8znkKQGYLAkD1OeQx4DnjotfTpeeL3unlo9BpQtIuWiIwl64Ffra5EVYH
9uX+nhdo+z86PDuaV34BcprvhX/uWGkXq/YEnlIYMXunudRuk1M431V4X4DDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2SLPjPUo0wEUa
aEfclALwm/MOoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGRt
c0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3bXIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rk
bXNMbkhObk5lcU5CbVFHdndOWUdrejZSa291Tm9ZQVpXRmVaUWVqN21yLzEvRjY0
OEIzRTMzRDRBMzRDMDQ1MUE2ODQ3REM5NDAyRjA5QkYzMEVBMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbF0MA0EAgACMAcDBQAoBF3EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQavzANBgkqhkiG9w0BAQsFAAOCAQEAdtIpYauP1cFPAFxT
gbna0cKFHeIF7ATp8hV7lpSGOZxGzixt6U4q5ZHeaezs7pZJJTsHWsqqZkfB31wE
fAJ1WAEsWecROSwDyYtYIQIQHqzPLW/tQYP0Qf+tytXTmeRfFZYcViGZgrL1ZB8j
8gt/uqEkVVadbCaixpGoGcMxLlgRCTrmEDAarYfAT7aXts6i+Ea6PiXW/mrwnBog
zQfHarfnzSSy0ni/Ny+IF3rM8kvri7aIPQ1Q4kzt7fBRrEDtRn2phKLedUQ1Qc0u
b/R9ROJiYr+ZOFV0rtAXlds9bh1QRDWE5cC9FQC9BxyItAQqaA4skwh4WteWSD7m
pcpXKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org