Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.cer
File:                     FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.cer (raw, json)
Hash identifier:          6lHOKqmQ5qGBh3pHkB/pDkhqu4+XNJ6uvG43N3Xjqms=
Subject key identifier:   FE:D7:E4:2E:4E:4C:7A:8F:6B:2C:7D:9E:39:36:48:35:71:73:65:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE06FB6D09E1BB3C6D1756456F8D4B6BF0333A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Oct 2024 18:07:15 +0000
Certificate not after:    Tue 07 Oct 2025 18:12:15 +0000
Subordinate resources:    AS: 271337
                          IP: 200.106.222.0/23
                          IP: 2804:79f0::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e0:6f:b6:d0:9e:1b:b3:c6:d1:75:64:56:f8:d4:b6:bf:03:33:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 18:07:15 2024 GMT
            Not After : Oct  7 18:12:15 2025 GMT
        Subject: CN=FED7E42E4E4C7A8F6B2C7D9E39364835717365C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:02:e9:8a:13:d8:7e:3b:ad:d9:a9:17:1d:
                    25:f7:be:13:23:56:65:ce:02:2d:68:fa:bd:c1:75:
                    3b:70:6a:18:58:a3:fa:73:71:53:f2:04:91:f4:6d:
                    1e:b8:bc:81:8a:fa:3a:15:d5:61:5d:f0:b9:e7:3a:
                    d7:24:01:e0:ae:b1:76:b9:76:4e:0d:b8:b9:b5:16:
                    24:88:c7:06:20:82:7b:05:84:67:15:65:39:ac:09:
                    0a:09:f8:92:32:98:2d:5d:7b:36:1b:49:fb:64:59:
                    21:8b:8c:19:03:ad:35:03:a8:a6:97:b2:c6:95:ea:
                    41:dc:48:ec:aa:71:98:2f:b5:30:28:b5:7d:21:33:
                    64:f1:06:53:69:49:bc:c4:69:3d:34:63:2c:43:18:
                    e2:9f:d2:44:52:b7:0a:96:2a:2b:09:e3:13:23:9a:
                    f9:f8:bc:42:e5:98:06:c7:8d:45:4b:b6:75:5b:d7:
                    82:eb:9f:3f:1c:ab:d2:e5:c9:48:bf:04:3f:6d:5c:
                    9b:b7:b8:4a:2a:7c:10:6e:fd:52:11:94:0e:0b:de:
                    94:ba:0b:d6:d4:8b:5a:88:da:60:b4:cb:2f:8e:7e:
                    9f:a9:0c:19:f0:48:7c:75:35:c6:9d:64:12:50:37:
                    81:91:4e:20:88:59:30:d5:95:75:37:66:16:44:7e:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:D7:E4:2E:4E:4C:7A:8F:6B:2C:7D:9E:39:36:48:35:71:73:65:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.222.0/23
                IPv6:
                  2804:79f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271337

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:4a:42:4c:54:cb:0b:74:8c:0d:83:4d:e3:af:8b:84:4c:
         06:e8:ac:6d:3d:7a:e1:b3:28:07:6a:2a:88:ba:74:d7:d0:90:
         77:2f:7c:5f:d0:bf:27:26:53:ea:8c:e9:db:39:54:19:aa:63:
         a4:07:08:e5:90:25:e5:b7:1e:19:c8:d6:4f:1c:ae:40:4c:c1:
         fb:b5:42:2c:1e:ff:ce:ff:d9:42:2c:a7:df:66:b6:85:2f:22:
         61:29:7f:38:1e:ea:2b:e0:3c:c5:b6:cd:ef:59:c7:38:3b:46:
         a4:7a:7d:1a:7b:f8:1b:07:41:c0:b3:5f:36:cf:4c:98:ee:c4:
         15:ef:2b:c8:33:73:f5:ac:8d:ce:04:c6:24:c3:f1:4e:67:95:
         96:0f:44:6e:45:ee:2e:6d:3b:48:7c:c6:62:db:c0:ec:de:4a:
         5b:b9:ce:2a:5a:26:9b:b5:1d:dc:20:bd:98:f6:3c:00:c7:15:
         37:a0:1a:64:0d:dc:39:82:69:80:fd:b4:ab:1b:16:ef:4c:5f:
         cb:ce:f5:d9:e7:b9:69:b7:cd:c4:37:ec:6f:50:f3:87:7a:9c:
         1c:6e:85:41:77:40:b2:75:fe:fd:b2:cc:f2:ce:c7:35:41:f3:
         30:d8:a7:db:a4:68:f2:96:87:e5:b3:27:a1:d1:d8:c0:b0:5b:
         36:18:9a:42
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUb+BvttCeG7PG0XVkVvjUtr8DM6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDgxODA3MTVaFw0yNTEwMDcxODEyMTVaMDMxMTAvBgNV
BAMTKEZFRDdFNDJFNEU0QzdBOEY2QjJDN0Q5RTM5MzY0ODM1NzE3MzY1QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFQLpihPYfjut2akXHSX3vhMj
VmXOAi1o+r3BdTtwahhYo/pzcVPyBJH0bR64vIGK+joV1WFd8LnnOtckAeCusXa5
dk4NuLm1FiSIxwYggnsFhGcVZTmsCQoJ+JIymC1dezYbSftkWSGLjBkDrTUDqKaX
ssaV6kHcSOyqcZgvtTAotX0hM2TxBlNpSbzEaT00YyxDGOKf0kRStwqWKisJ4xMj
mvn4vELlmAbHjUVLtnVb14Lrnz8cq9LlyUi/BD9tXJu3uEoqfBBu/VIRlA4L3pS6
C9bUi1qI2mC0yy+Ofp+pDBnwSHx1NcadZBJQN4GRTiCIWTDVlXU3ZhZEfuBbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+1+QuTkx6j2ss
fZ45Nkg1cXNlwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTRO
S21MeGFiSFU1QktleUYybzdkUE5KWmVYOEdhdUtQUENFbW5SS3B5Z0svMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU0
TkttTHhhYkhVNUJLZXlGMm83ZFBOSlplWDhHYXVLUFBDRW1uUktweWdLLzAvRkVE
N0U0MkU0RTRDN0E4RjZCMkM3RDlFMzkzNjQ4MzU3MTczNjVDMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQByGreMA0EAgACMAcDBQAoBHnwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQj6TANBgkqhkiG9w0BAQsFAAOCAQEApHdKQkxUywt0jA2D
TeOvi4RMBuisbT164bMoB2oqiLp019CQdy98X9C/JyZT6ozp2zlUGapjpAcI5ZAl
5bceGcjWTxyuQEzB+7VCLB7/zv/ZQiyn32a2hS8iYSl/OB7qK+A8xbbN71nHODtG
pHp9Gnv4GwdBwLNfNs9MmO7EFe8ryDNz9ayNzgTGJMPxTmeVlg9EbkXuLm07SHzG
YtvA7N5KW7nOKlomm7Ud3CC9mPY8AMcVN6AaZA3cOYJpgP20qxsW70xfy8712ee5
abfNxDfsb1Dzh3qcHG6FQXdAsnX+/bLM8s7HNUHzMNin26Ro8paH5bMnodHYwLBb
NhiaQg==
-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:57 2024 by rpki-client on console-ams.rpki-client.org