Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
File:                     21F66D4308816E7B47F6912EBBE7513585A59B9D.cer (raw, json)
Hash identifier:          QDt9kLCCEaAnA6DV6FGK8/yyWun62xOoZ5LA/TvYoG0=
Subject key identifier:   21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B339C3F35A58FE0139AE33D42C9C52FD8589A6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2024 19:31:01 +0000
Certificate not after:    Thu 04 Sep 2025 19:36:01 +0000
Subordinate resources:    AS: 269499
                          IP: 45.186.156.0/22
                          IP: 2804:658c::/32
Validation:               Failed, certificate revoked on Tue 19 Nov 2024 08:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:33:9c:3f:35:a5:8f:e0:13:9a:e3:3d:42:c9:c5:2f:d8:58:9a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 19:31:01 2024 GMT
            Not After : Sep  4 19:36:01 2025 GMT
        Subject: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:d5:4c:24:fa:7b:df:8f:2e:ca:50:f8:73:
                    64:60:c2:e3:7e:c1:22:ee:f0:46:cb:09:f5:4c:2e:
                    56:06:2a:e6:fa:23:dd:ff:43:ed:45:7d:8c:93:77:
                    bb:fa:60:4e:be:b6:d8:b3:8d:cf:d2:29:d7:fb:9e:
                    22:36:17:97:8b:24:10:3a:76:e7:dc:26:0a:41:0d:
                    64:1e:3e:37:70:cb:7b:15:26:c1:98:70:51:28:d1:
                    7f:19:2b:50:3d:ca:b5:35:04:ee:43:49:38:cc:4e:
                    ba:55:07:b1:d9:42:7c:ca:79:57:96:1f:53:00:92:
                    a6:2d:ae:ea:db:5d:d4:bf:b8:bf:c4:9a:ff:95:dc:
                    52:31:b0:c7:cf:17:9b:a3:49:49:9f:ac:fe:1f:31:
                    26:42:72:a0:ab:ca:73:47:33:8b:18:56:cd:34:1f:
                    b2:2d:be:ce:f1:3e:bb:3e:71:e2:ff:c2:d4:bb:37:
                    9c:81:60:42:ff:61:62:1e:13:92:fb:09:aa:47:64:
                    61:29:94:56:68:7b:47:07:ea:3d:0f:7f:cf:54:a7:
                    4d:4e:d9:6e:2a:44:d0:f7:57:1a:8d:cc:97:2a:50:
                    43:5d:e2:45:63:7b:68:b7:61:c2:95:91:b2:44:c6:
                    60:13:28:26:10:7b:aa:2b:75:f1:e1:49:e5:87:44:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.156.0/22
                IPv6:
                  2804:658c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269499

    Signature Algorithm: sha256WithRSAEncryption
         c4:08:50:13:56:e7:c9:30:e3:4e:47:fa:fa:2d:27:f4:e9:a5:
         57:60:7f:e2:40:3d:b6:7e:0a:48:37:43:6f:b0:d1:88:06:56:
         35:a7:41:9b:38:9c:de:46:cb:0d:3e:0e:cc:cd:53:f5:9a:db:
         0a:69:b7:56:76:39:00:1b:ab:ef:65:4e:c4:26:a4:d6:c3:68:
         eb:d2:e3:ad:b7:71:6e:94:04:03:09:f2:3f:83:37:3b:f1:07:
         ac:67:81:00:ca:8e:65:d7:26:5c:d9:e3:65:05:5a:fa:1a:b0:
         ce:e5:f9:3b:ca:7b:11:64:b2:98:c6:f7:75:6f:c0:55:13:a5:
         7f:60:91:27:79:38:c6:2a:85:83:ef:c7:63:f0:22:fb:21:8d:
         b2:a8:f8:bc:4b:a3:9d:c4:5e:77:57:35:d7:7d:bf:61:d4:65:
         19:0f:bd:22:36:ed:b7:b9:0c:f9:f0:c2:50:29:e9:cc:9e:52:
         09:6a:c5:8b:df:6d:d1:92:9f:25:21:43:92:df:60:36:86:ba:
         1f:74:27:29:9e:db:51:e3:17:5d:f0:a5:69:38:56:0c:c8:2a:
         c8:2e:8e:28:ff:0f:df:85:e3:78:f3:0c:67:40:4a:2d:2e:1a:
         cb:c5:d5:cd:0b:89:e4:bd:66:1c:38:46:57:60:db:0b:16:01:
         e4:7d:fe:ef
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUezOcPzWlj+ATmuM9QsnFL9hYmm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDUxOTMxMDFaFw0yNTA5MDQxOTM2MDFaMDMxMTAvBgNV
BAMTKDIxRjY2RDQzMDg4MTZFN0I0N0Y2OTEyRUJCRTc1MTM1ODVBNTlCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNNVMJPp7348uylD4c2RgwuN+
wSLu8EbLCfVMLlYGKub6I93/Q+1FfYyTd7v6YE6+ttizjc/SKdf7niI2F5eLJBA6
dufcJgpBDWQePjdwy3sVJsGYcFEo0X8ZK1A9yrU1BO5DSTjMTrpVB7HZQnzKeVeW
H1MAkqYtrurbXdS/uL/Emv+V3FIxsMfPF5ujSUmfrP4fMSZCcqCrynNHM4sYVs00
H7Itvs7xPrs+ceL/wtS7N5yBYEL/YWIeE5L7CapHZGEplFZoe0cH6j0Pf89Up01O
2W4qRND3VxqNzJcqUENd4kVje2i3YcKVkbJExmATKCYQe6ordfHhSeWHRKcpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQh9m1DCIFue0f2
kS6751E1haWbnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNk
eW85TW1CcHFoaWJkNTg1Qmd6THkxczRmQ1dMMjdRM1BkakJMZ21BdTEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JT
ZHlvOU1tQnBxaGliZDU4NUJnekx5MXM0ZkNXTDI3UTNQZGpCTGdtQXUxLzEvMjFG
NjZENDMwODgxNkU3QjQ3RjY5MTJFQkJFNzUxMzU4NUE1OUI5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbqcMA0EAgACMAcDBQAoBGWMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQcuzANBgkqhkiG9w0BAQsFAAOCAQEAxAhQE1bnyTDjTkf6
+i0n9OmlV2B/4kA9tn4KSDdDb7DRiAZWNadBmzic3kbLDT4OzM1T9ZrbCmm3VnY5
ABur72VOxCak1sNo69LjrbdxbpQEAwnyP4M3O/EHrGeBAMqOZdcmXNnjZQVa+hqw
zuX5O8p7EWSymMb3dW/AVROlf2CRJ3k4xiqFg+/HY/Ai+yGNsqj4vEujncRed1c1
132/YdRlGQ+9Ijbtt7kM+fDCUCnpzJ5SCWrFi99t0ZKfJSFDkt9gNoa6H3QnKZ7b
UeMXXfClaThWDMgqyC6OKP8P34XjePMMZ0BKLS4ay8XVzQuJ5L1mHDhGV2DbCxYB
5H3+7w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:02:21 2025 by rpki-client