Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20978143409405A4B1DFF217030B764B01282086.cer
File:                     20978143409405A4B1DFF217030B764B01282086.cer (raw, json)
Hash identifier:          lF7moQhNsMlQz5OtqBYbzjpgDf+NFChva1i5J7L388Q=
Subject key identifier:   20:97:81:43:40:94:05:A4:B1:DF:F2:17:03:0B:76:4B:01:28:20:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       537C9E348B96C1F08D3B23FB841A521E79057256
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/20978143409405A4B1DFF217030B764B01282086.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 20:38:45 +0000
Certificate not after:    Mon 15 Dec 2025 20:43:45 +0000
Subordinate resources:    AS: 264180
                          IP: 138.94.164.0/22
                          IP: 2804:23bc::/32
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 10:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7c:9e:34:8b:96:c1:f0:8d:3b:23:fb:84:1a:52:1e:79:05:72:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 20:38:45 2024 GMT
            Not After : Dec 15 20:43:45 2025 GMT
        Subject: CN=20978143409405A4B1DFF217030B764B01282086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:6f:39:92:db:26:f3:9d:af:5b:6b:a4:59:
                    d5:f6:d6:a1:df:b9:ee:a2:f0:8c:5a:08:e0:e2:60:
                    2e:62:ec:b1:2e:3a:b1:12:07:b0:87:cc:fd:ef:c5:
                    c7:45:9e:ef:2b:da:2a:9b:19:e3:a3:9d:54:e7:34:
                    55:53:45:cf:ba:e1:d5:4d:c1:c1:84:64:87:78:e6:
                    e0:47:0b:f5:7f:ee:a2:42:55:b7:da:15:76:a3:0b:
                    db:c6:76:c9:04:1d:3e:cd:e7:31:84:1c:5b:df:5e:
                    f9:54:29:1c:98:f4:36:a3:86:4f:94:30:76:d5:4f:
                    a6:4d:20:f5:05:8f:93:54:67:8d:b6:6d:02:e2:3b:
                    1d:27:51:fc:04:b8:4a:de:93:01:12:45:1e:6e:aa:
                    ad:7c:f5:67:cf:9a:27:8a:48:6d:32:c7:90:82:21:
                    63:22:85:8d:94:9b:dd:a6:7c:56:d5:be:4d:a9:fe:
                    e8:d1:93:8d:7a:eb:30:67:c8:d6:ed:42:30:9f:4d:
                    de:14:c4:e0:52:d1:70:13:c2:1a:e7:ab:30:6d:a8:
                    fb:ed:f7:21:8c:fb:43:55:c9:0c:25:82:7c:d4:aa:
                    03:ca:6a:8f:ab:27:60:63:60:40:8e:49:97:81:c0:
                    12:c6:26:d9:fc:ee:ff:d5:16:27:2c:aa:4f:3a:85:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:97:81:43:40:94:05:A4:B1:DF:F2:17:03:0B:76:4B:01:28:20:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/20978143409405A4B1DFF217030B764B01282086.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.164.0/22
                IPv6:
                  2804:23bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264180

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:df:ce:42:1d:e4:f5:63:ac:37:59:03:2f:ca:92:e0:12:
         bf:9f:a7:12:2a:25:6f:f2:24:b9:7f:4e:70:e7:af:3d:a1:43:
         f6:d6:40:d7:d5:90:45:1c:1f:dc:04:4b:0b:96:04:8e:08:56:
         07:a4:e0:2d:dd:12:00:be:13:bb:0c:16:0c:c6:39:ba:51:39:
         16:4d:cf:40:eb:d7:59:fc:bb:fc:f6:bd:e3:1f:8d:82:cd:b0:
         0b:af:7d:be:18:75:54:1f:31:6c:92:8b:8a:da:d5:82:c5:8f:
         1a:52:84:38:4a:ec:42:fc:ad:ec:61:ba:5f:46:f3:8b:a3:72:
         ee:95:94:9c:ff:e0:3a:f1:a8:75:70:3f:64:2b:15:33:83:1f:
         21:fe:9a:50:55:8f:1d:97:64:f3:b4:83:68:44:40:1a:48:d8:
         1c:19:af:67:07:e6:44:1b:2e:62:85:42:f8:6f:53:6a:45:e9:
         e2:a4:0a:c3:c7:1c:1a:0e:fd:ac:6d:2b:6c:28:68:c5:a3:2b:
         d2:b0:e5:f4:60:2f:f4:d0:4e:e9:34:11:95:d3:4b:4f:8c:19:
         76:19:32:11:44:51:97:41:2f:3c:be:02:0e:ed:56:69:ee:5f:
         68:36:a2:3c:40:d5:96:9b:59:32:98:ce:4f:a6:91:40:f2:53:
         93:32:a6:a4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUU3yeNIuWwfCNOyP7hBpSHnkFclYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTYyMDM4NDVaFw0yNTEyMTUyMDQzNDVaMDMxMTAvBgNV
BAMTKDIwOTc4MTQzNDA5NDA1QTRCMURGRjIxNzAzMEI3NjRCMDEyODIwODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFM285ktsm852vW2ukWdX21qHf
ue6i8IxaCODiYC5i7LEuOrESB7CHzP3vxcdFnu8r2iqbGeOjnVTnNFVTRc+64dVN
wcGEZId45uBHC/V/7qJCVbfaFXajC9vGdskEHT7N5zGEHFvfXvlUKRyY9Dajhk+U
MHbVT6ZNIPUFj5NUZ422bQLiOx0nUfwEuErekwESRR5uqq189WfPmieKSG0yx5CC
IWMihY2Um92mfFbVvk2p/ujRk4166zBnyNbtQjCfTd4UxOBS0XATwhrnqzBtqPvt
9yGM+0NVyQwlgnzUqgPKao+rJ2BjYECOSZeBwBLGJtn87v/VFicsqk86hTsxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgl4FDQJQFpLHf
8hcDC3ZLASgghjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjZz
YkRha2p1TngxTHF1M3dUanZLWm1taDZ2VFpBcVVNZVBqS2daZHk3UTYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y2
c2JEYWtqdU54MUxxdTN3VGp2S1ptbWg2dlRaQXFVTWVQaktnWmR5N1E2LzAvMjA5
NzgxNDM0MDk0MDVBNEIxREZGMjE3MDMwQjc2NEIwMTI4MjA4Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCil6kMA0EAgACMAcDBQAoBCO8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQH9DANBgkqhkiG9w0BAQsFAAOCAQEAl+nfzkId5PVjrDdZ
Ay/KkuASv5+nEiolb/IkuX9OcOevPaFD9tZA19WQRRwf3ARLC5YEjghWB6TgLd0S
AL4TuwwWDMY5ulE5Fk3PQOvXWfy7/Pa94x+Ngs2wC699vhh1VB8xbJKLitrVgsWP
GlKEOErsQvyt7GG6X0bzi6Ny7pWUnP/gOvGodXA/ZCsVM4MfIf6aUFWPHZdk87SD
aERAGkjYHBmvZwfmRBsuYoVC+G9TakXp4qQKw8ccGg79rG0rbChoxaMr0rDl9GAv
9NBO6TQRldNLT4wZdhkyEURRl0EvPL4CDu1Wae5faDaiPEDVlptZMpjOT6aRQPJT
kzKmpA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:59 2025 by rpki-client