Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4440ABB7C936440DA53451ADDF667FBF517652D8.cer
File:                     4440ABB7C936440DA53451ADDF667FBF517652D8.cer (raw, json)
Hash identifier:          0qbpWE190okStgVXCYwbhfjL8zN0zvyStYsEk6VV2X4=
Subject key identifier:   44:40:AB:B7:C9:36:44:0D:A5:34:51:AD:DF:66:7F:BF:51:76:52:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       195ED9D86FA232273ABD179E06907E3D5A9BE754
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/1/4440ABB7C936440DA53451ADDF667FBF517652D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 May 2025 18:59:29 +0000
Certificate not after:    Wed 20 May 2026 19:04:29 +0000
Subordinate resources:    AS: 270667
                          IP: 177.10.132.0/22
                          IP: 2804:6f88::/32
Validation:               Failed, certificate revoked on Mon 26 May 2025 20:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5e:d9:d8:6f:a2:32:27:3a:bd:17:9e:06:90:7e:3d:5a:9b:e7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 21 18:59:29 2025 GMT
            Not After : May 20 19:04:29 2026 GMT
        Subject: CN=4440ABB7C936440DA53451ADDF667FBF517652D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d3:ad:27:da:a2:1f:16:f6:24:1e:64:e5:62:
                    4f:5b:84:c7:00:2f:47:ff:cc:e4:31:5b:ab:dd:6f:
                    52:3d:f9:f8:2b:67:80:d9:44:33:8e:ab:5c:85:29:
                    7a:f9:0d:69:1b:af:13:76:9c:db:ee:ce:97:18:90:
                    33:c4:66:0a:73:b5:5d:c6:1e:5a:4d:6d:82:4f:5c:
                    e2:44:e4:2d:7e:f5:17:98:e8:b0:74:03:b1:85:f8:
                    3b:80:bd:58:23:3d:ed:39:7a:4d:30:b0:e1:ab:6d:
                    d3:71:e5:e9:e1:5e:37:dc:f7:04:98:c6:76:d5:3f:
                    8a:b9:53:68:30:da:fa:aa:48:81:91:a9:79:57:0d:
                    9f:37:9d:08:22:64:85:78:9c:a1:f1:e2:8e:7a:3b:
                    f2:e8:95:a1:73:11:5e:40:e8:21:1e:28:3d:f9:2d:
                    be:10:fa:99:37:15:b5:a8:79:a5:20:32:4f:1b:f8:
                    c4:43:8d:c8:1e:04:4a:9d:ef:2c:dc:de:23:f4:6a:
                    4d:38:de:78:af:bf:e3:e4:07:85:a3:ac:ec:be:24:
                    d2:0d:a8:4b:af:40:a5:a1:50:9d:d2:f5:b4:16:83:
                    71:7c:d4:e4:27:2e:3e:57:aa:ce:85:48:92:33:14:
                    40:46:bd:5c:c4:ac:22:c3:2f:42:5b:7b:e6:11:bd:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:40:AB:B7:C9:36:44:0D:A5:34:51:AD:DF:66:7F:BF:51:76:52:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/1/4440ABB7C936440DA53451ADDF667FBF517652D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.132.0/22
                IPv6:
                  2804:6f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270667

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:35:7f:d1:71:3f:91:24:7d:b1:71:75:74:b4:10:8e:49:
         b5:3f:aa:e4:72:2a:13:f6:ec:92:1b:23:cd:a3:c0:d1:17:7b:
         ba:7a:25:27:66:40:ae:18:38:21:b5:d9:ce:d9:d9:fd:8c:d8:
         4e:81:3b:ee:34:98:4f:c3:ee:f7:58:23:c4:a6:03:0c:bc:99:
         5a:60:ce:44:18:d6:ba:60:a4:c9:d8:24:cb:8c:b5:e4:e7:d2:
         15:0d:86:a4:19:dd:ab:8e:34:56:e7:bb:9c:f4:ab:90:b2:8e:
         67:c9:11:5e:90:fc:ee:89:03:cf:08:da:94:88:46:38:3f:ee:
         e5:a1:ed:38:45:7f:85:d2:41:cc:be:d4:06:4d:46:92:1d:80:
         03:24:91:14:4a:06:67:da:f9:75:70:19:af:6c:9d:3e:a3:b3:
         90:2e:b9:bb:0f:af:fc:72:af:e4:9f:7b:61:72:dc:2a:1c:96:
         94:26:9d:81:14:62:0a:35:d0:44:93:de:7d:50:20:4f:a2:63:
         60:58:31:67:0d:c6:03:6a:e0:4c:fa:a2:80:ba:98:4b:fb:5a:
         68:5f:56:85:12:9e:0c:2e:28:12:22:ad:65:dd:97:5b:4d:6a:
         5f:c1:61:d1:d8:7d:b9:2d:c5:8a:a2:7c:04:36:5a:3e:55:41:
         42:7c:5e:cd
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUGV7Z2G+iMic6vReeBpB+PVqb51QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MjExODU5MjlaFw0yNjA1MjAxOTA0MjlaMDMxMTAvBgNV
BAMTKDQ0NDBBQkI3QzkzNjQ0MERBNTM0NTFBRERGNjY3RkJGNTE3NjUyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8060n2qIfFvYkHmTlYk9bhMcA
L0f/zOQxW6vdb1I9+fgrZ4DZRDOOq1yFKXr5DWkbrxN2nNvuzpcYkDPEZgpztV3G
HlpNbYJPXOJE5C1+9ReY6LB0A7GF+DuAvVgjPe05ek0wsOGrbdNx5enhXjfc9wSY
xnbVP4q5U2gw2vqqSIGRqXlXDZ83nQgiZIV4nKHx4o56O/LolaFzEV5A6CEeKD35
Lb4Q+pk3FbWoeaUgMk8b+MRDjcgeBEqd7yzc3iP0ak043nivv+PkB4WjrOy+JNIN
qEuvQKWhUJ3S9bQWg3F81OQnLj5Xqs6FSJIzFEBGvVzErCLDL0Jbe+YRvXqpAgMB
AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREQKu3yTZEDaU0
Ua3fZn+/UXZS2DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI
KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZks5
c2RIczllYllvbXJMWlFaTUgxa1Z1TFd5VjZXejVweGRiQzdyMjlEWi8xMIGJBggr
BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9mSzlz
ZEhzOWViWW9tckxaUVpNSDFrVnVMV3lWNld6NXB4ZGJDN3IyOURaLzEvNDQ0MEFC
QjdDOTM2NDQwREE1MzQ1MUFEREY2NjdGQkY1MTc2NTJEOC5tZnQwPwYIKwYBBQUH
MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCsQqEMA0EAgACMAcDBQAoBG+IMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwQhSzANBgkqhkiG9w0BAQsFAAOCAQEAo9Y1f9FxP5EkfbFxdXS0
EI5JtT+q5HIqE/bskhsjzaPA0Rd7unolJ2ZArhg4IbXZztnZ/YzYToE77jSYT8Pu
91gjxKYDDLyZWmDORBjWumCkydgky4y15OfSFQ2GpBndq440Vue7nPSrkLKOZ8kR
XpD87okDzwjalIhGOD/u5aHtOEV/hdJBzL7UBk1Gkh2AAySRFEoGZ9r5dXAZr2yd
PqOzkC65uw+v/HKv5J97YXLcKhyWlCadgRRiCjXQRJPefVAgT6JjYFgxZw3GA2rg
TPqigLqYS/taaF9WhRKeDC4oEiKtZd2XW01qX8Fh0dh9uS3FiqJ8BDZaPlVBQnxe
zQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:44:06 2025 by rpki-client