Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D33F32205E0AB7C892F48EB152240B7E507EE58.cer
File:                     1D33F32205E0AB7C892F48EB152240B7E507EE58.cer (raw, json)
Hash identifier:          ubIBR5KCetmlIZaNnJWYJy7haDdt090DxPnsDYwLhkQ=
Subject key identifier:   1D:33:F3:22:05:E0:AB:7C:89:2F:48:EB:15:22:40:B7:E5:07:EE:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5538F643AABC323DAF0BB4A9D0B65C4456D865F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/1D33F32205E0AB7C892F48EB152240B7E507EE58.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jan 2025 14:09:34 +0000
Certificate not after:    Wed 14 Jan 2026 14:14:34 +0000
Subordinate resources:    AS: 272677
                          IP: 179.63.84.0/22
                          IP: 2804:86f4::/32
Validation:               Failed, certificate revoked on Wed 22 Jan 2025 02:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:38:f6:43:aa:bc:32:3d:af:0b:b4:a9:d0:b6:5c:44:56:d8:65:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 14:09:34 2025 GMT
            Not After : Jan 14 14:14:34 2026 GMT
        Subject: CN=1D33F32205E0AB7C892F48EB152240B7E507EE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:13:ee:65:94:a9:ab:b1:5e:da:8f:8f:4a:
                    a6:32:a1:de:e6:4a:72:97:f9:e9:eb:8f:e5:68:d6:
                    f3:39:e7:17:16:9a:76:f8:2d:91:fc:cb:98:a2:19:
                    af:e0:a4:42:2c:6c:70:35:10:72:5f:42:c7:e3:7a:
                    57:40:96:07:b7:a6:ba:fb:a0:a5:b7:8e:14:51:cf:
                    46:9e:a8:86:e8:4e:a9:57:0d:93:40:83:fd:3b:1e:
                    ad:f1:78:71:f6:d2:35:03:91:4d:e0:b6:f6:0e:4e:
                    20:57:8a:ff:ab:fa:40:09:a3:71:b7:e0:8c:64:91:
                    52:50:3d:cb:35:33:1d:29:44:6e:ac:2b:a7:ab:d9:
                    af:9c:ce:4f:9c:7b:70:62:9c:54:44:76:87:54:fa:
                    1d:a3:41:45:b4:a9:6e:73:fc:e3:b4:0d:79:a2:fa:
                    ab:94:68:6d:80:53:5b:ef:9f:4f:6d:b1:80:3f:b6:
                    ca:44:10:37:64:fb:ec:cd:23:5b:1a:81:73:20:2b:
                    7e:6f:66:28:07:3c:52:a7:79:5f:b3:c2:d5:6d:cd:
                    05:81:8d:09:e2:c4:64:a9:b9:09:81:c4:98:01:a4:
                    b9:1f:88:de:ea:8b:81:6f:93:ea:d4:1f:a0:d4:88:
                    28:a9:07:c6:f4:6d:c0:92:6b:38:6e:ee:db:0f:71:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:33:F3:22:05:E0:AB:7C:89:2F:48:EB:15:22:40:B7:E5:07:EE:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/1D33F32205E0AB7C892F48EB152240B7E507EE58.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/22
                IPv6:
                  2804:86f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272677

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:19:df:53:9b:6a:c5:2f:31:73:30:5d:d2:9b:17:0a:97:
         d1:45:a4:56:88:53:b4:44:d4:08:ea:51:fe:b9:34:fd:d5:50:
         49:18:76:ab:ba:2d:ea:85:bd:80:cf:6a:38:4f:71:8b:8c:a0:
         1f:ee:f1:b7:2d:60:0f:45:f5:1b:4b:17:ca:47:6e:10:af:9f:
         ce:ea:38:c1:1a:20:d5:0f:e3:53:4c:ce:2b:4f:56:03:30:62:
         18:12:54:1a:b8:4d:69:07:bf:af:72:11:d5:be:66:ed:38:82:
         3c:40:9e:04:c8:59:4b:73:27:92:3e:68:da:cf:62:4a:db:39:
         52:bb:fe:99:08:14:9a:a6:44:cf:55:70:1a:6f:de:c6:93:e7:
         34:c8:cf:63:b7:b7:4b:2d:9d:16:a6:c8:f9:0d:51:27:1f:e4:
         c4:0e:6f:1a:3f:97:6a:dd:00:5e:04:57:7c:11:63:64:41:71:
         49:ec:e0:df:65:6f:c3:84:fb:50:35:97:03:98:ff:47:30:9e:
         ec:81:72:37:15:e0:b9:c0:bb:90:0f:c4:36:90:a2:d3:49:ba:
         18:43:ff:56:b3:b4:06:05:45:0d:d2:cf:4c:f2:99:8d:e1:47:
         69:a1:f2:ad:69:50:aa:53:7d:fb:bb:7b:1b:a2:e2:12:6c:be:
         21:48:1b:1e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVTj2Q6q8Mj2vC7Sp0LZcRFbYZfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMTUxNDA5MzRaFw0yNjAxMTQxNDE0MzRaMDMxMTAvBgNV
BAMTKDFEMzNGMzIyMDVFMEFCN0M4OTJGNDhFQjE1MjI0MEI3RTUwN0VFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjuBPuZZSpq7Fe2o+PSqYyod7m
SnKX+enrj+Vo1vM55xcWmnb4LZH8y5iiGa/gpEIsbHA1EHJfQsfjeldAlge3prr7
oKW3jhRRz0aeqIboTqlXDZNAg/07Hq3xeHH20jUDkU3gtvYOTiBXiv+r+kAJo3G3
4IxkkVJQPcs1Mx0pRG6sK6er2a+czk+ce3BinFREdodU+h2jQUW0qW5z/OO0DXmi
+quUaG2AU1vvn09tsYA/tspEEDdk++zNI1sagXMgK35vZigHPFKneV+zwtVtzQWB
jQnixGSpuQmBxJgBpLkfiN7qi4Fvk+rUH6DUiCipB8b0bcCSazhu7tsPcfQVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdM/MiBeCrfIkv
SOsVIkC35QfuWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM21K
VzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBKUlQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNt
Slc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAvMUQz
M0YzMjIwNUUwQUI3Qzg5MkY0OEVCMTUyMjQwQjdFNTA3RUU1OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsz9UMA0EAgACMAcDBQAoBIb0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQpJTANBgkqhkiG9w0BAQsFAAOCAQEAoLwZ31ObasUvMXMw
XdKbFwqX0UWkVohTtETUCOpR/rk0/dVQSRh2q7ot6oW9gM9qOE9xi4ygH+7xty1g
D0X1G0sXykduEK+fzuo4wRog1Q/jU0zOK09WAzBiGBJUGrhNaQe/r3IR1b5m7TiC
PECeBMhZS3Mnkj5o2s9iSts5Urv+mQgUmqZEz1VwGm/expPnNMjPY7e3Sy2dFqbI
+Q1RJx/kxA5vGj+Xat0AXgRXfBFjZEFxSezg32Vvw4T7UDWXA5j/RzCe7IFyNxXg
ucC7kA/ENpCi00m6GEP/VrO0BgVFDdLPTPKZjeFHaaHyrWlQqlN9+7t7G6LiEmy+
IUgbHg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:45:51 2025 by rpki-client