Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10C9E50412BDF457D326557F028EDEA1195C1FD7.cer
File:                     10C9E50412BDF457D326557F028EDEA1195C1FD7.cer (raw, json)
Hash identifier:          Zuf3BThZ3fu7+1xKjtMPvhBT7wx+1EjO3XLqphUbg5U=
Subject key identifier:   10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3842F5B5928741BE0044CA85ADFF2397DE99A7BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/10C9E50412BDF457D326557F028EDEA1195C1FD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 18:31:52 +0000
Certificate not after:    Mon 21 Jul 2025 18:36:52 +0000
Subordinate resources:    AS: 264299
                          IP: 138.121.152.0/22
                          IP: 170.254.20.0/22
                          IP: 2804:25bc::/32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 13:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:f5:b5:92:87:41:be:00:44:ca:85:ad:ff:23:97:de:99:a7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 18:31:52 2024 GMT
            Not After : Jul 21 18:36:52 2025 GMT
        Subject: CN=10C9E50412BDF457D326557F028EDEA1195C1FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:59:af:61:7e:3a:ff:19:58:8a:06:88:9c:
                    66:52:af:0a:59:d6:07:9b:d9:c5:60:94:9f:c0:6f:
                    98:fe:c5:5f:d2:f1:9f:a1:c6:dc:12:8e:7f:71:b0:
                    2a:3f:8e:09:66:eb:e8:81:64:50:9a:42:23:28:0b:
                    63:44:2a:0a:b8:08:95:55:7b:ab:9a:4e:42:49:9a:
                    9a:f2:d9:97:17:2f:ee:d4:45:90:0a:d9:ad:ea:d2:
                    39:0b:60:99:54:fc:86:f3:8f:95:12:1c:d6:73:66:
                    29:e0:c7:22:67:83:d1:f9:7e:c3:45:a2:41:ea:49:
                    ca:60:ff:cb:c1:95:52:f4:73:07:ea:8a:97:94:c9:
                    70:32:a7:11:f1:0a:60:69:4e:cf:e4:d1:67:e1:0a:
                    09:40:7f:e6:46:bc:79:98:25:d7:94:c0:8d:17:10:
                    84:5c:a7:c0:6d:cd:86:d5:a2:d5:0f:8d:6a:b9:4c:
                    93:87:2f:72:8f:31:28:bc:79:f2:bc:6a:57:43:ba:
                    ca:c7:3b:29:87:73:9b:d6:ba:b8:90:0c:60:d4:74:
                    8d:cd:e5:3c:6c:6d:37:af:45:c8:ad:f9:43:35:24:
                    12:02:72:7e:5a:e6:f0:c9:b0:b1:f1:0d:b1:be:b0:
                    97:9b:8c:d8:99:6b:9b:6d:3f:f1:d6:18:1b:d3:9e:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/10C9E50412BDF457D326557F028EDEA1195C1FD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.152.0/22
                  170.254.20.0/22
                IPv6:
                  2804:25bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264299

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:cf:1c:58:18:ac:d9:3f:8d:01:21:3a:78:d0:3b:8e:af:
         2a:f0:89:4c:41:90:7b:5f:3c:1e:05:66:9d:10:7e:86:80:d2:
         2e:41:fd:96:b3:76:4b:f8:ba:f4:84:1b:2a:6c:95:54:9e:1a:
         ec:f7:c2:db:cb:b9:5b:b1:96:f3:30:82:a6:0e:c1:5a:15:eb:
         a9:02:0e:15:d0:a0:f0:44:34:bb:31:ee:f4:3e:46:81:dc:34:
         53:18:31:7e:2c:88:3d:60:5a:ad:75:0c:da:d8:4b:2d:f3:4e:
         08:4a:0d:7b:79:a1:2e:7e:3b:61:10:7e:25:d9:60:fb:1b:11:
         49:ad:1f:74:56:5a:02:f6:0d:25:27:e8:1e:38:57:f8:4c:fa:
         54:8f:be:eb:b0:10:b9:82:c0:8a:06:42:18:82:b8:31:a5:61:
         29:b9:ff:33:73:3a:3d:7a:f6:04:79:18:da:18:b9:ea:d7:46:
         46:85:87:99:56:09:b8:71:b6:d4:d4:ea:ff:17:f4:d7:22:78:
         fa:2a:b0:93:12:f1:e4:64:e4:63:24:a0:60:4a:83:09:f8:eb:
         5e:c8:71:7f:60:12:07:2f:c4:20:5a:3e:66:8a:e6:fb:5c:a1:
         dd:90:c2:0c:64:cb:f7:e1:7d:95:3e:65:26:fb:c8:ef:34:70:
         dc:27:4a:e6
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUOEL1tZKHQb4ARMqFrf8jl96Zp7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjIxODMxNTJaFw0yNTA3MjExODM2NTJaMDMxMTAvBgNV
BAMTKDEwQzlFNTA0MTJCREY0NTdEMzI2NTU3RjAyOEVERUExMTk1QzFGRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQo1mvYX46/xlYigaInGZSrwpZ
1geb2cVglJ/Ab5j+xV/S8Z+hxtwSjn9xsCo/jglm6+iBZFCaQiMoC2NEKgq4CJVV
e6uaTkJJmpry2ZcXL+7URZAK2a3q0jkLYJlU/Ibzj5USHNZzZingxyJng9H5fsNF
okHqScpg/8vBlVL0cwfqipeUyXAypxHxCmBpTs/k0WfhCglAf+ZGvHmYJdeUwI0X
EIRcp8BtzYbVotUPjWq5TJOHL3KPMSi8efK8aldDusrHOymHc5vWuriQDGDUdI3N
5TxsbTevRcit+UM1JBICcn5a5vDJsLHxDbG+sJebjNiZa5ttP/HWGBvTnseZAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQyeUEEr30V9Mm
VX8Cjt6hGVwf1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm1X
YWE3YlZzQm1OcExlTXRDWEx2Y0F1TGNackh2SkhOcjFUWUdmZ01zUzMvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jt
V2FhN2JWc0JtTnBMZU10Q1hMdmNBdUxjWnJIdkpITnIxVFlHZmdNc1MzLzIvMTBD
OUU1MDQxMkJERjQ1N0QzMjY1NTdGMDI4RURFQTExOTVDMUZENy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCinmYAwQCqv4UMA0EAgACMAcDBQAoBCW8MBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQIazANBgkqhkiG9w0BAQsFAAOCAQEANrDPHFgY
rNk/jQEhOnjQO46vKvCJTEGQe188HgVmnRB+hoDSLkH9lrN2S/i69IQbKmyVVJ4a
7PfC28u5W7GW8zCCpg7BWhXrqQIOFdCg8EQ0uzHu9D5Ggdw0UxgxfiyIPWBarXUM
2thLLfNOCEoNe3mhLn47YRB+Jdlg+xsRSa0fdFZaAvYNJSfoHjhX+Ez6VI++67AQ
uYLAigZCGIK4MaVhKbn/M3M6PXr2BHkY2hi56tdGRoWHmVYJuHG21NTq/xf01yJ4
+iqwkxLx5GTkYySgYEqDCfjrXshxf2ASBy/EIFo+Zorm+1yh3ZDCDGTL9+F9lT5l
JvvI7zRw3CdK5g==
-----END CERTIFICATE-----