Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/541218818B56F665E47C279509EE7253FF89B9E4.cer
File:                     541218818B56F665E47C279509EE7253FF89B9E4.cer (raw, json)
Hash identifier:          K6M+nSUhGBH6XB/vBPJ5xLG4AQB24214jf0olivYh/U=
Subject key identifier:   54:12:18:81:8B:56:F6:65:E4:7C:27:95:09:EE:72:53:FF:89:B9:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E3E20ABE84AD46F3CF58D8386C7EF18101424F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/1/541218818B56F665E47C279509EE7253FF89B9E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2024 14:28:14 +0000
Certificate not after:    Fri 28 Nov 2025 14:33:14 +0000
Subordinate resources:    AS: 271148
                          IP: 179.42.100.0/22
                          IP: 2804:7700::/32
Validation:               Failed, certificate revoked on Fri 29 Nov 2024 17:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3e:20:ab:e8:4a:d4:6f:3c:f5:8d:83:86:c7:ef:18:10:14:24:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 14:28:14 2024 GMT
            Not After : Nov 28 14:33:14 2025 GMT
        Subject: CN=541218818B56F665E47C279509EE7253FF89B9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f3:75:c1:c4:5c:0b:15:a5:f4:19:22:8f:a7:
                    46:f1:85:21:72:1c:0e:b0:d8:6a:fe:0c:ea:80:6a:
                    1d:33:93:20:fa:03:74:6f:54:46:44:c2:5b:88:62:
                    5e:b6:e8:17:dc:99:0a:16:97:bd:94:b0:b8:be:83:
                    54:f7:79:13:73:2f:b2:d2:cd:b1:36:95:05:ae:3a:
                    e3:0e:4e:cd:cb:9d:ad:80:72:b2:8f:af:1a:f7:c5:
                    b2:1c:f5:ee:e5:ca:de:7c:4b:c4:bc:92:a1:0c:0c:
                    a3:b7:c7:38:12:98:4f:03:39:4d:31:c6:4f:6d:d9:
                    39:b8:f5:50:d9:4b:ca:c7:7e:1d:37:7d:96:00:69:
                    1d:40:14:e1:a9:79:5a:32:ab:51:48:50:15:62:f2:
                    17:d3:a8:25:5b:8d:a5:d1:82:23:87:12:a4:27:4e:
                    91:26:44:06:d3:a6:17:ad:38:74:4e:8b:65:f5:8b:
                    f7:62:6f:3b:36:a4:1e:4d:4a:2e:0f:d7:cb:52:9d:
                    f9:d4:ab:b6:53:db:ed:4a:a6:43:aa:c5:c9:a9:79:
                    3e:50:1b:9c:10:f1:de:7f:ad:a5:c2:19:62:72:4b:
                    99:5e:10:42:fb:88:85:7d:3a:a5:0c:b2:b3:4c:4e:
                    7a:be:ea:15:c5:1b:e4:71:c7:ed:79:1a:c4:5c:3f:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:12:18:81:8B:56:F6:65:E4:7C:27:95:09:EE:72:53:FF:89:B9:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/1/541218818B56F665E47C279509EE7253FF89B9E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.100.0/22
                IPv6:
                  2804:7700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271148

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:51:69:fa:2e:87:63:cc:fe:2d:0d:3b:69:5b:4a:22:60:
         19:32:2d:12:47:5a:c7:36:07:ee:6e:64:07:82:0e:fa:82:7b:
         4c:35:c1:b0:b1:5f:d0:a8:d3:99:6f:eb:6a:01:89:ca:1f:5c:
         02:6e:9f:2c:e0:22:d1:de:96:f8:7c:9b:db:c8:10:f5:ca:0d:
         2d:c9:db:a6:72:d0:be:7f:ad:ac:74:fe:8a:8e:f6:2e:e8:b6:
         f3:c7:af:67:bf:81:c4:79:71:ca:2b:14:53:7d:8a:5f:db:3e:
         53:8b:73:ef:42:fd:d2:31:3d:c5:94:3b:ab:0a:62:05:4b:97:
         41:1a:00:f2:c1:e9:9d:7e:69:1e:98:b9:2b:59:1d:df:75:56:
         7e:93:a9:7b:0d:be:b0:32:07:bf:b5:fd:55:be:d0:86:c4:81:
         3d:fd:52:74:f5:09:33:4d:8c:39:29:f6:7a:9f:74:e9:8e:2b:
         13:e3:72:6f:d0:e9:60:7d:13:d5:ea:db:1c:0b:b0:32:a2:4b:
         ea:09:0d:6a:a4:fa:6d:bf:36:10:7f:b4:8a:a9:20:08:74:f1:
         93:ed:38:51:bb:e2:2b:5c:4e:39:76:d9:f4:81:d6:2a:cf:7e:
         68:39:17:ac:73:56:fe:ec:1a:9c:bf:80:92:e7:1b:4a:2d:82:
         10:58:2c:e0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDj4gq+hK1G889Y2DhsfvGBAUJPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjkxNDI4MTRaFw0yNTExMjgxNDMzMTRaMDMxMTAvBgNV
BAMTKDU0MTIxODgxOEI1NkY2NjVFNDdDMjc5NTA5RUU3MjUzRkY4OUI5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr83XBxFwLFaX0GSKPp0bxhSFy
HA6w2Gr+DOqAah0zkyD6A3RvVEZEwluIYl626BfcmQoWl72UsLi+g1T3eRNzL7LS
zbE2lQWuOuMOTs3Lna2AcrKPrxr3xbIc9e7lyt58S8S8kqEMDKO3xzgSmE8DOU0x
xk9t2Tm49VDZS8rHfh03fZYAaR1AFOGpeVoyq1FIUBVi8hfTqCVbjaXRgiOHEqQn
TpEmRAbTphetOHROi2X1i/dibzs2pB5NSi4P18tSnfnUq7ZT2+1KpkOqxcmpeT5Q
G5wQ8d5/raXCGWJyS5leEEL7iIV9OqUMsrNMTnq+6hXFG+Rxx+15GsRcPwYDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUEhiBi1b2ZeR8
J5UJ7nJT/4m55DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN25N
Tk1LbmFyQkNtZ01qTXQ2OEFpYnhOZHQxYmRwbnQ0NmFlZ3l0Mm96RkYvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdu
TU5NS25hckJDbWdNak10NjhBaWJ4TmR0MWJkcG50NDZhZWd5dDJvekZGLzEvNTQx
MjE4ODE4QjU2RjY2NUU0N0MyNzk1MDlFRTcyNTNGRjg5QjlFNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsypkMA0EAgACMAcDBQAoBHcAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjLDANBgkqhkiG9w0BAQsFAAOCAQEAdj9Rafouh2PM/i0N
O2lbSiJgGTItEkdaxzYH7m5kB4IO+oJ7TDXBsLFf0KjTmW/ragGJyh9cAm6fLOAi
0d6W+Hyb28gQ9coNLcnbpnLQvn+trHT+io72Lui288evZ7+BxHlxyisUU32KX9s+
U4tz70L90jE9xZQ7qwpiBUuXQRoA8sHpnX5pHpi5K1kd33VWfpOpew2+sDIHv7X9
Vb7QhsSBPf1SdPUJM02MOSn2ep906Y4rE+Nyb9DpYH0T1erbHAuwMqJL6gkNaqT6
bb82EH+0iqkgCHTxk+04UbviK1xOOXbZ9IHWKs9+aDkXrHNW/uwanL+AkucbSi2C
EFgs4A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:44:00 2025 by rpki-client