Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/262F92ECCAE5CBDAA42AC47D8FE8F74965A7233D.cer
File:                     262F92ECCAE5CBDAA42AC47D8FE8F74965A7233D.cer (raw, json)
Hash identifier:          cy0HbfSD9j4a+m+iTwszjfvRc/jspRC2jPlfcSH9Sgw=
Subject key identifier:   26:2F:92:EC:CA:E5:CB:DA:A4:2A:C4:7D:8F:E8:F7:49:65:A7:23:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20867B2C39D97906E1D0F60FE238FF813FEEB702
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/262F92ECCAE5CBDAA42AC47D8FE8F74965A7233D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 14:35:16 +0000
Certificate not after:    Fri 30 Jan 2026 14:40:16 +0000
Subordinate resources:    AS: 267290
                          IP: 45.233.28.0/22
                          IP: 2804:4b34::/32
Validation:               Failed, certificate revoked on Thu 20 Mar 2025 14:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:86:7b:2c:39:d9:79:06:e1:d0:f6:0f:e2:38:ff:81:3f:ee:b7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 14:35:16 2025 GMT
            Not After : Jan 30 14:40:16 2026 GMT
        Subject: CN=262F92ECCAE5CBDAA42AC47D8FE8F74965A7233D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:09:05:d3:d4:51:b8:0b:9d:27:03:53:85:
                    bf:9f:15:25:5c:d3:07:9c:43:fa:35:49:51:a6:85:
                    8c:b7:85:9a:38:40:16:c6:ca:c8:8c:c1:04:db:35:
                    e3:9a:c3:4d:a5:f1:ce:52:49:da:d4:e8:0b:d7:f8:
                    71:df:ba:6f:6a:94:6b:d5:9f:80:3a:98:51:cb:32:
                    0a:58:b7:6b:c1:b7:0e:45:54:a7:37:d7:35:e0:cf:
                    a3:18:1c:c9:ea:dd:ee:aa:fc:f6:a4:05:15:fa:d6:
                    1d:6d:a9:f3:dd:12:57:0c:28:dc:16:91:0b:16:78:
                    d0:5d:a8:f8:da:a7:c2:e7:a0:0b:41:38:6d:1c:5b:
                    1f:45:a1:65:a9:51:79:cc:fb:11:7a:2c:de:25:b6:
                    38:03:b6:1a:f0:f6:1a:64:30:af:a1:84:c6:36:62:
                    6f:b8:02:2f:4f:d1:20:27:05:fd:f2:9d:0d:6f:0e:
                    aa:a9:49:7c:6f:e9:97:0c:f0:28:f9:95:d2:ee:d1:
                    88:c6:47:da:e0:79:c5:40:d4:ea:23:cc:66:be:2c:
                    e2:4b:86:b0:9b:23:68:36:e6:88:23:71:91:a9:0f:
                    4c:9f:c9:80:72:a3:89:b8:c2:a0:f6:4d:97:58:c1:
                    bc:86:1b:f4:cb:18:12:3e:39:96:54:7d:83:44:d9:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:2F:92:EC:CA:E5:CB:DA:A4:2A:C4:7D:8F:E8:F7:49:65:A7:23:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/262F92ECCAE5CBDAA42AC47D8FE8F74965A7233D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.28.0/22
                IPv6:
                  2804:4b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267290

    Signature Algorithm: sha256WithRSAEncryption
         ba:c8:e5:fc:26:09:38:ef:6a:2a:50:17:6f:7d:ad:0e:d0:b5:
         0f:fc:82:5f:ec:40:7d:2f:b2:63:8c:17:f7:af:4b:92:f6:15:
         ca:56:68:1c:13:4e:6c:36:93:97:38:03:aa:7a:86:76:d1:ac:
         d8:5e:a6:60:8f:3a:d3:7d:80:dd:3f:9c:49:fa:64:99:f1:ae:
         c9:3f:d7:dd:31:98:60:52:86:4a:c1:57:fb:c9:05:55:ae:e9:
         b0:f1:1c:fd:63:ca:47:5b:ff:be:51:9c:cb:57:a1:d0:3d:94:
         4e:79:d8:ae:fb:24:d4:e1:32:72:e0:f8:45:3d:d1:bf:1c:77:
         c4:5e:f8:45:eb:00:af:e0:a8:16:f3:32:5b:ef:31:05:82:d7:
         a5:40:eb:49:07:85:be:90:20:ce:d1:22:a9:69:ca:0f:b4:d0:
         5d:2d:a0:bc:81:86:df:cb:af:e3:1f:a6:b6:ed:e0:39:48:af:
         73:34:98:68:7c:62:0d:02:86:91:97:3f:70:12:db:42:27:cb:
         23:28:d4:0f:f6:2f:46:93:89:a8:19:e2:47:f0:1e:02:37:3f:
         99:ef:4f:bd:69:46:91:80:a6:10:a3:7e:e4:bc:08:a6:31:d2:
         3b:57:20:3c:4a:d1:c8:7d:f0:2b:29:28:23:55:1b:fa:96:6a:
         59:0d:13:75
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIIZ7LDnZeQbh0PYP4jj/gT/utwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMzExNDM1MTZaFw0yNjAxMzAxNDQwMTZaMDMxMTAvBgNV
BAMTKDI2MkY5MkVDQ0FFNUNCREFBNDJBQzQ3RDhGRThGNzQ5NjVBNzIzM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKwkF09RRuAudJwNThb+fFSVc
0wecQ/o1SVGmhYy3hZo4QBbGysiMwQTbNeOaw02l8c5SSdrU6AvX+HHfum9qlGvV
n4A6mFHLMgpYt2vBtw5FVKc31zXgz6MYHMnq3e6q/PakBRX61h1tqfPdElcMKNwW
kQsWeNBdqPjap8LnoAtBOG0cWx9FoWWpUXnM+xF6LN4ltjgDthrw9hpkMK+hhMY2
Ym+4Ai9P0SAnBf3ynQ1vDqqpSXxv6ZcM8Cj5ldLu0YjGR9rgecVA1OojzGa+LOJL
hrCbI2g25ogjcZGpD0yfyYByo4m4wqD2TZdYwbyGG/TLGBI+OZZUfYNE2e2XAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQmL5LsyuXL2qQq
xH2P6PdJZacjPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ003
dEJSQU5hOWE5WktKdDJCM0RUd3hneDk2MmhGOWZ0VUp3dWtnMjlYUlkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NN
N3RCUkFOYTlhOVpLSnQyQjNEVHd4Z3g5NjJoRjlmdFVKd3VrZzI5WFJZLzAvMjYy
RjkyRUNDQUU1Q0JEQUE0MkFDNDdEOEZFOEY3NDk2NUE3MjMzRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLekcMA0EAgACMAcDBQAoBEs0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUGjANBgkqhkiG9w0BAQsFAAOCAQEAusjl/CYJOO9qKlAX
b32tDtC1D/yCX+xAfS+yY4wX969LkvYVylZoHBNObDaTlzgDqnqGdtGs2F6mYI86
032A3T+cSfpkmfGuyT/X3TGYYFKGSsFX+8kFVa7psPEc/WPKR1v/vlGcy1eh0D2U
TnnYrvsk1OEycuD4RT3Rvxx3xF74ResAr+CoFvMyW+8xBYLXpUDrSQeFvpAgztEi
qWnKD7TQXS2gvIGG38uv4x+mtu3gOUivczSYaHxiDQKGkZc/cBLbQifLIyjUD/Yv
RpOJqBniR/AeAjc/me9PvWlGkYCmEKN+5LwIpjHSO1cgPErRyH3wKykoI1Ub+pZq
WQ0TdQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:56:57 2025 by rpki-client