Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/172700DF78A10A273AC686AAA03666D561510746.cer
File:                     172700DF78A10A273AC686AAA03666D561510746.cer (raw, json)
Hash identifier:          VlK33XpBxIAhl4b2cD/148bCaciqBRrrHX/z7Ro/T6U=
Subject key identifier:   17:27:00:DF:78:A1:0A:27:3A:C6:86:AA:A0:36:66:D5:61:51:07:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B2B6C743066CB4F25CEF30019B66ED83E559015
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/172700DF78A10A273AC686AAA03666D561510746.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Oct 2024 18:56:02 +0000
Certificate not after:    Wed 01 Oct 2025 19:01:02 +0000
Subordinate resources:    AS: 28225
                          IP: 189.126.64.0/20
                          IP: 2804:620c::/32
Validation:               Failed, certificate revoked on Mon 23 Dec 2024 14:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2b:6c:74:30:66:cb:4f:25:ce:f3:00:19:b6:6e:d8:3e:55:90:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 18:56:02 2024 GMT
            Not After : Oct  1 19:01:02 2025 GMT
        Subject: CN=172700DF78A10A273AC686AAA03666D561510746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:39:a1:a2:de:23:2a:29:de:72:25:72:ea:
                    3a:16:92:95:db:0d:78:31:5d:cb:5e:51:ba:79:c2:
                    02:62:fc:ec:d8:b4:a4:10:ae:cc:02:3a:43:58:f4:
                    b8:c1:16:ec:ec:b1:19:c6:5b:5f:33:f7:a7:f4:27:
                    be:56:df:3d:cd:cf:cc:cc:8e:bf:57:c5:7c:b9:6f:
                    3e:7a:b2:ce:4b:e4:df:01:dc:a2:ba:0b:bc:72:67:
                    10:96:4d:1e:b3:07:b5:36:e6:8a:75:8b:73:b8:8c:
                    4b:c3:75:9c:cd:4a:12:b3:89:c4:6e:5e:c2:f4:79:
                    1d:4a:43:24:e7:41:4e:18:ec:9b:18:6b:41:2b:64:
                    ca:1d:e7:64:81:db:fb:c0:14:82:d9:45:f2:aa:17:
                    1c:ca:f0:ff:14:3c:cc:26:d9:9b:fc:11:b0:fd:14:
                    57:d2:55:d7:c9:58:a1:8d:c2:60:56:ef:38:a7:ca:
                    e1:ba:ef:5b:e4:70:1a:6b:ea:77:d0:99:74:d0:35:
                    04:3a:b0:8c:47:bc:96:97:1d:79:bf:42:67:26:ec:
                    9d:17:35:12:2e:ca:2d:ae:c4:b2:ea:c4:d6:a3:00:
                    76:3e:c2:48:d6:66:44:44:d9:12:92:c3:22:86:dd:
                    4c:74:11:32:58:97:bc:1a:a3:46:a2:25:01:4f:1d:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:27:00:DF:78:A1:0A:27:3A:C6:86:AA:A0:36:66:D5:61:51:07:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/172700DF78A10A273AC686AAA03666D561510746.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.64.0/20
                IPv6:
                  2804:620c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28225

    Signature Algorithm: sha256WithRSAEncryption
         5e:e2:a6:b1:8d:66:c9:96:55:29:00:41:44:b2:0b:40:41:8c:
         98:ec:b6:5b:f8:13:2b:01:fd:76:29:7b:88:19:90:b7:d1:f0:
         e1:a1:97:22:04:08:46:6d:7d:65:a7:14:e8:67:55:2f:4c:64:
         e7:bb:95:23:55:d2:fb:92:1d:3e:9f:fd:88:d0:4f:ee:7e:b7:
         c8:e3:d5:27:2c:32:df:c0:12:66:d8:67:bd:c3:a7:29:2b:94:
         07:e4:07:4c:43:f3:0d:2e:b3:bd:d8:4c:6b:dd:de:7a:59:78:
         c9:56:dd:2a:df:86:08:f0:e4:93:89:42:d7:79:6f:8c:d9:ae:
         b5:77:29:c0:bd:e6:6a:d4:9a:1e:95:49:a0:45:72:7e:18:7b:
         12:d7:02:57:30:9f:47:1d:4f:ba:50:0a:c4:d3:d4:6b:c3:22:
         6e:10:dd:d7:8a:f3:16:75:38:40:94:63:9a:c2:e9:ed:cd:0b:
         d8:e8:89:af:59:4c:0c:f4:c7:54:05:4d:9b:03:0e:63:19:ab:
         04:ea:4b:a0:65:73:28:df:33:3a:d5:d2:1c:be:ca:14:21:1c:
         8d:1a:11:50:df:6a:06:90:f1:2c:f6:9c:df:df:76:5a:94:99:
         8f:2b:07:64:2c:36:65:59:f4:49:62:5e:9e:ac:5d:1a:67:c8:
         00:f9:9f:99
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUCytsdDBmy08lzvMAGbZu2D5VkBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDIxODU2MDJaFw0yNTEwMDExOTAxMDJaMDMxMTAvBgNV
BAMTKDE3MjcwMERGNzhBMTBBMjczQUM2ODZBQUEwMzY2NkQ1NjE1MTA3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yTmhot4jKineciVy6joWkpXb
DXgxXcteUbp5wgJi/OzYtKQQrswCOkNY9LjBFuzssRnGW18z96f0J75W3z3Nz8zM
jr9XxXy5bz56ss5L5N8B3KK6C7xyZxCWTR6zB7U25op1i3O4jEvDdZzNShKzicRu
XsL0eR1KQyTnQU4Y7JsYa0ErZMod52SB2/vAFILZRfKqFxzK8P8UPMwm2Zv8EbD9
FFfSVdfJWKGNwmBW7zinyuG671vkcBpr6nfQmXTQNQQ6sIxHvJaXHXm/Qmcm7J0X
NRIuyi2uxLLqxNajAHY+wkjWZkRE2RKSwyKG3Ux0ETJYl7wao0aiJQFPHc8ZAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXJwDfeKEKJzrG
hqqgNmbVYVEHRjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjhT
WFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFYakgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I4
U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzAvMTcy
NzAwREY3OEExMEEyNzNBQzY4NkFBQTAzNjY2RDU2MTUxMDc0Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEvX5AMA0EAgACMAcDBQAoBGIMMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm5BMA0GCSqGSIb3DQEBCwUAA4IBAQBe4qaxjWbJllUpAEFE
sgtAQYyY7LZb+BMrAf12KXuIGZC30fDhoZciBAhGbX1lpxToZ1UvTGTnu5UjVdL7
kh0+n/2I0E/ufrfI49UnLDLfwBJm2Ge9w6cpK5QH5AdMQ/MNLrO92Exr3d56WXjJ
Vt0q34YI8OSTiULXeW+M2a61dynAveZq1JoelUmgRXJ+GHsS1wJXMJ9HHU+6UArE
09RrwyJuEN3XivMWdThAlGOawuntzQvY6ImvWUwM9MdUBU2bAw5jGasE6kugZXMo
3zM61dIcvsoUIRyNGhFQ32oGkPEs9pzf33ZalJmPKwdkLDZlWfRJYl6erF0aZ8gA
+Z+Z
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:02 2025 by rpki-client