Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0EC2F73E1466D3610208E4A069AC3CF7310F85B1.cer
File:                     0EC2F73E1466D3610208E4A069AC3CF7310F85B1.cer (raw, json)
Hash identifier:          u6cHkrj5MF/VbBIJZpCLPiWHGzRkkRMKO0dNN6a05yU=
Subject key identifier:   0E:C2:F7:3E:14:66:D3:61:02:08:E4:A0:69:AC:3C:F7:31:0F:85:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       595D5B228F5825599EF19A2C9FD96BF96C6528D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/0EC2F73E1466D3610208E4A069AC3CF7310F85B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 18:59:08 +0000
Certificate not after:    Tue 02 Dec 2025 19:04:08 +0000
Subordinate resources:    AS: 53214
                          IP: 187.49.240.0/21
                          IP: 2804:260::/32
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 10:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5d:5b:22:8f:58:25:59:9e:f1:9a:2c:9f:d9:6b:f9:6c:65:28:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 18:59:08 2024 GMT
            Not After : Dec  2 19:04:08 2025 GMT
        Subject: CN=0EC2F73E1466D3610208E4A069AC3CF7310F85B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:2b:b9:dd:ac:4b:aa:fd:70:32:17:b2:b1:
                    9d:ea:5e:f0:74:b6:85:31:b3:b8:d4:93:55:57:1a:
                    0b:15:dc:69:97:29:5d:31:8d:14:ba:a2:51:7b:1c:
                    48:c1:01:65:6c:e7:08:05:db:02:c2:13:37:a8:96:
                    2b:fd:4b:55:db:65:73:c2:a0:d7:28:a9:27:63:90:
                    64:26:b9:db:e1:71:58:15:98:76:8c:d4:8b:62:5c:
                    ce:5c:56:8a:ff:6a:b1:c9:96:50:ca:be:34:84:8f:
                    04:49:d3:99:d1:a5:b6:c7:00:46:b7:2d:33:6f:f3:
                    64:5b:00:14:e1:2d:6d:89:d2:7d:f8:21:38:73:2e:
                    8b:30:dd:7b:3e:13:d1:4c:4e:53:aa:27:ac:84:7e:
                    19:52:dc:c9:f9:92:c7:4d:39:83:7f:5f:45:35:b2:
                    b2:c2:fb:9c:24:95:ac:a5:fb:75:29:06:3c:d0:43:
                    b2:c6:0c:6b:64:7e:1d:42:7a:dd:89:ec:dd:34:73:
                    24:3e:dc:25:c1:c2:10:ca:1a:95:c9:f5:17:f8:cd:
                    b9:ff:de:3f:cb:31:51:37:28:33:4a:a3:a4:07:f5:
                    b8:e1:8d:95:ae:be:9d:d4:df:fe:2d:1e:9b:3d:c5:
                    6e:4a:99:ff:60:75:88:75:64:c9:3a:11:6c:1c:ee:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:C2:F7:3E:14:66:D3:61:02:08:E4:A0:69:AC:3C:F7:31:0F:85:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/0EC2F73E1466D3610208E4A069AC3CF7310F85B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.240.0/21
                IPv6:
                  2804:260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53214

    Signature Algorithm: sha256WithRSAEncryption
         ca:e2:9a:dd:16:66:43:5b:88:ea:eb:2f:ba:46:4e:c0:ee:91:
         e6:45:fc:f2:48:31:2a:bf:ea:24:30:0e:6f:8d:13:a5:8c:58:
         47:06:3b:b6:18:8c:07:ea:7e:2b:94:92:28:e7:74:98:f9:2a:
         95:30:0b:26:2e:6b:04:e2:51:d1:99:e6:71:98:2d:35:91:13:
         27:e7:f1:cc:ac:f8:51:30:00:e3:57:8b:64:1e:07:c7:ac:1f:
         d3:ac:8f:63:06:04:ff:01:69:9c:d5:22:4e:c5:c2:bf:c2:41:
         77:08:08:0c:db:87:bd:c6:f9:42:3a:39:1f:d2:28:09:28:cb:
         04:e4:eb:f9:54:a8:1c:a5:cf:4b:b5:6d:57:17:ac:55:68:07:
         aa:95:71:e9:ae:f4:1f:ab:56:1b:47:3a:e1:8e:d3:5a:d8:34:
         a5:af:16:f9:0b:54:3f:dc:a4:1b:32:b8:b1:09:38:03:0a:45:
         8a:d5:dd:b4:a0:a8:7f:49:91:9a:3c:35:c8:8d:ad:97:a2:81:
         f1:a3:07:79:30:75:c5:3c:db:04:87:93:9f:e4:8f:c4:51:6e:
         d0:9d:93:22:78:64:72:0a:a1:63:67:82:bf:0e:98:e8:6a:94:
         89:ee:0a:18:31:c8:1b:37:b9:a5:de:0a:78:d0:30:82:50:b7:
         2d:a2:c7:e7
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWV1bIo9YJVme8Zosn9lr+WxlKNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMDMxODU5MDhaFw0yNTEyMDIxOTA0MDhaMDMxMTAvBgNV
BAMTKDBFQzJGNzNFMTQ2NkQzNjEwMjA4RTRBMDY5QUMzQ0Y3MzEwRjg1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmDyu53axLqv1wMheysZ3qXvB0
toUxs7jUk1VXGgsV3GmXKV0xjRS6olF7HEjBAWVs5wgF2wLCEzeoliv9S1XbZXPC
oNcoqSdjkGQmudvhcVgVmHaM1ItiXM5cVor/arHJllDKvjSEjwRJ05nRpbbHAEa3
LTNv82RbABThLW2J0n34IThzLosw3Xs+E9FMTlOqJ6yEfhlS3Mn5ksdNOYN/X0U1
srLC+5wklayl+3UpBjzQQ7LGDGtkfh1Cet2J7N00cyQ+3CXBwhDKGpXJ9Rf4zbn/
3j/LMVE3KDNKo6QH9bjhjZWuvp3U3/4tHps9xW5Kmf9gdYh1ZMk6EWwc7nAHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOwvc+FGbTYQII
5KBprDz3MQ+FsTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzcx
WHdQR1ZiQUxOSEVxMkhieUhGMnVEa0hacnJxV1RmTnZMeHBqYmlIVnYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM3
MVh3UEdWYkFMTkhFcTJIYnlIRjJ1RGtIWnJycVdUZk52THhwamJpSFZ2LzAvMEVD
MkY3M0UxNDY2RDM2MTAyMDhFNEEwNjlBQzNDRjczMTBGODVCMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDuzHwMA0EAgACMAcDBQAoBAJgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDP3jANBgkqhkiG9w0BAQsFAAOCAQEAyuKa3RZmQ1uI6usv
ukZOwO6R5kX88kgxKr/qJDAOb40TpYxYRwY7thiMB+p+K5SSKOd0mPkqlTALJi5r
BOJR0ZnmcZgtNZETJ+fxzKz4UTAA41eLZB4Hx6wf06yPYwYE/wFpnNUiTsXCv8JB
dwgIDNuHvcb5Qjo5H9IoCSjLBOTr+VSoHKXPS7VtVxesVWgHqpVx6a70H6tWG0c6
4Y7TWtg0pa8W+QtUP9ykGzK4sQk4AwpFitXdtKCof0mRmjw1yI2tl6KB8aMHeTB1
xTzbBIeTn+SPxFFu0J2TInhkcgqhY2eCvw6Y6GqUie4KGDHIGze5pd4KeNAwglC3
LaLH5w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:37 2025 by rpki-client