Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FDEB6F2A7830019E9B7FED71E610A949A14233E8.cer
File:                     FDEB6F2A7830019E9B7FED71E610A949A14233E8.cer (raw, json)
Hash identifier:          Bi/y2yXd51H+H6cUqAcwUPIIT0nwEFzfNwdOgFfcrLY=
Subject key identifier:   FD:EB:6F:2A:78:30:01:9E:9B:7F:ED:71:E6:10:A9:49:A1:42:33:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       664FD47FCDA60BF1DDD2813D8162AB6A24456C53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/FDEB6F2A7830019E9B7FED71E610A949A14233E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Sep 2024 14:34:10 +0000
Certificate not after:    Sat 27 Sep 2025 14:39:10 +0000
Subordinate resources:    AS: 268518
                          IP: 45.162.128.0/22
                          IP: 2804:5270::/32

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 12:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:d4:7f:cd:a6:0b:f1:dd:d2:81:3d:81:62:ab:6a:24:45:6c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 28 14:34:10 2024 GMT
            Not After : Sep 27 14:39:10 2025 GMT
        Subject: CN=FDEB6F2A7830019E9B7FED71E610A949A14233E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:af:7e:48:39:45:3b:5a:b4:11:3f:fc:cb:
                    cd:8e:35:35:9f:09:fa:ba:8a:74:c9:ae:d3:20:bf:
                    73:01:61:2e:04:9b:6c:0c:19:c4:31:cd:60:73:83:
                    55:b2:7d:7e:1a:fe:25:2d:f1:8a:94:6d:43:37:80:
                    33:72:e8:28:06:0f:5d:c3:46:fb:45:25:48:1d:00:
                    1f:ca:08:88:a9:81:b1:d8:36:15:6c:31:24:9d:0e:
                    2d:29:a7:7a:5e:1f:c8:26:48:28:87:7c:0a:dc:46:
                    82:9f:79:d9:36:40:9f:c0:6e:8f:85:5a:86:0b:61:
                    bf:eb:d6:96:98:dc:80:17:60:6b:44:f7:4f:c2:ca:
                    21:f0:c6:c7:09:ce:b9:86:90:f1:be:e6:1d:9f:6a:
                    d5:3e:85:be:cf:8e:6c:fb:bc:ca:bf:83:db:6c:08:
                    3f:c5:73:e7:8a:d4:d6:f1:ff:39:73:7b:9a:da:b2:
                    56:7a:82:f6:5b:d7:71:2a:88:82:90:82:a5:8b:f9:
                    4f:d2:c9:81:b4:a5:a1:17:30:03:e8:51:22:22:ec:
                    24:e3:73:e9:0f:91:2a:df:df:89:79:b1:ba:dd:3b:
                    8d:85:27:33:3f:11:a5:ce:ee:a3:2a:9d:d1:44:79:
                    86:6d:fe:1e:78:9d:34:17:00:e6:5b:d1:9c:ee:94:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:EB:6F:2A:78:30:01:9E:9B:7F:ED:71:E6:10:A9:49:A1:42:33:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/FDEB6F2A7830019E9B7FED71E610A949A14233E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22
                IPv6:
                  2804:5270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268518

    Signature Algorithm: sha256WithRSAEncryption
         d4:b9:6e:83:24:e5:2a:59:78:a7:4e:d8:2d:dd:ae:8b:32:7b:
         24:1e:e8:26:76:42:ba:cf:3a:6e:3c:5a:9d:e1:4c:0d:41:7e:
         d9:0c:15:0b:ec:cb:c2:c9:9e:6a:5b:d4:ce:b4:30:30:f5:f0:
         bc:25:a5:f3:a9:f6:3c:7a:18:66:b8:d0:f6:1b:2e:ba:77:c6:
         42:8e:e9:0c:d0:01:6b:b3:d9:a1:ff:97:fa:85:65:9e:48:bc:
         4f:00:b9:7b:4d:6d:98:4d:70:e9:84:0f:16:e1:07:40:30:7f:
         19:f6:78:0b:5d:b8:fb:e3:a7:ec:7b:4f:58:34:6c:b8:95:a1:
         b7:09:af:3e:6a:73:25:32:a0:b6:b4:ac:24:74:34:4c:64:8d:
         62:8d:3e:7d:6b:9a:af:2d:e3:e3:29:bc:70:be:d3:c9:be:33:
         ae:97:77:74:06:44:a1:62:3f:bc:d0:61:fc:a4:a1:f7:55:bb:
         cf:76:41:a4:82:8a:52:e1:ad:3e:3a:9b:d5:7a:76:95:99:3f:
         3a:92:ec:aa:21:bf:d3:43:d8:b7:7e:2c:6c:a6:de:19:81:bd:
         3b:35:f9:a2:e6:3b:75:2d:87:d1:68:47:2d:e1:c5:94:80:0e:
         78:43:45:64:53:f2:f6:0f:31:61:95:7c:c3:c7:51:8b:b8:53:
         5a:7d:0e:f4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZk/Uf82mC/Hd0oE9gWKraiRFbFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MjgxNDM0MTBaFw0yNTA5MjcxNDM5MTBaMDMxMTAvBgNV
BAMTKEZERUI2RjJBNzgzMDAxOUU5QjdGRUQ3MUU2MTBBOTQ5QTE0MjMzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p69+SDlFO1q0ET/8y82ONTWf
Cfq6inTJrtMgv3MBYS4Em2wMGcQxzWBzg1WyfX4a/iUt8YqUbUM3gDNy6CgGD13D
RvtFJUgdAB/KCIipgbHYNhVsMSSdDi0pp3peH8gmSCiHfArcRoKfedk2QJ/Abo+F
WoYLYb/r1paY3IAXYGtE90/CyiHwxscJzrmGkPG+5h2fatU+hb7Pjmz7vMq/g9ts
CD/Fc+eK1Nbx/zlze5raslZ6gvZb13EqiIKQgqWL+U/SyYG0paEXMAPoUSIi7CTj
c+kPkSrf34l5sbrdO42FJzM/EaXO7qMqndFEeYZt/h54nTQXAOZb0ZzulLl9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9628qeDABnpt/
7XHmEKlJoUIz6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkNB
UFhVVm9kU2EyVktqTVgxWGFUQTkzdnZ0cjdOQldiZlhkZDJCTHJLUXUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JD
QVBYVVZvZFNhMlZLak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzAvRkRF
QjZGMkE3ODMwMDE5RTlCN0ZFRDcxRTYxMEE5NDlBMTQyMzNFOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaKAMA0EAgACMAcDBQAoBFJwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQY5jANBgkqhkiG9w0BAQsFAAOCAQEA1LlugyTlKll4p07Y
Ld2uizJ7JB7oJnZCus86bjxaneFMDUF+2QwVC+zLwsmealvUzrQwMPXwvCWl86n2
PHoYZrjQ9hsuunfGQo7pDNABa7PZof+X+oVlnki8TwC5e01tmE1w6YQPFuEHQDB/
GfZ4C124++On7HtPWDRsuJWhtwmvPmpzJTKgtrSsJHQ0TGSNYo0+fWuary3j4ym8
cL7Tyb4zrpd3dAZEoWI/vNBh/KSh91W7z3ZBpIKKUuGtPjqb1Xp2lZk/OpLsqiG/
00PYt34sbKbeGYG9OzX5ouY7dS2H0WhHLeHFlIAOeENFZFPy9g8xYZV8w8dRi7hT
Wn0O9A==
-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:11 2024 by rpki-client on console-ams.rpki-client.org