Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer
File:                     573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer (raw, json)
Hash identifier:          Z+46eku/OBuVHs78tTwuYqzvsN+M1XfU4lDW7Ay/xg4=
Subject key identifier:   57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F6B65B0399B474A67692294ECD8B82D0CBFAE18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Nov 2024 13:43:30 +0000
Certificate not after:    Sat 29 Nov 2025 13:48:30 +0000
Subordinate resources:    AS: 266172
                          IP: 160.19.248.0/22
                          IP: 2804:3bd0::/32
Validation:               Failed, certificate revoked on Mon 17 Feb 2025 12:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6b:65:b0:39:9b:47:4a:67:69:22:94:ec:d8:b8:2d:0c:bf:ae:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 30 13:43:30 2024 GMT
            Not After : Nov 29 13:48:30 2025 GMT
        Subject: CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:96:86:49:6f:52:e7:46:e5:90:04:1c:40:
                    6c:22:4d:cc:9b:9f:5b:c6:60:c5:0c:b5:40:93:5c:
                    51:6e:de:31:ad:0b:ba:61:ff:ee:f6:9d:de:a8:fa:
                    3b:70:c3:41:5f:6b:68:f1:3d:89:c4:60:8b:72:98:
                    41:fa:ba:dc:28:6d:9b:42:22:17:c6:5e:1d:95:66:
                    d5:de:36:03:94:78:fa:77:05:59:08:52:be:f3:6e:
                    b4:03:d6:54:f0:60:fb:32:92:dd:a1:0e:be:d4:2e:
                    aa:98:24:4a:60:c2:1e:ca:1d:0f:12:67:a5:84:a1:
                    7c:90:7a:d7:93:d7:3f:67:4f:4c:61:03:26:66:46:
                    9e:8a:03:01:65:e0:84:4f:e6:c2:f0:04:4c:9e:d2:
                    74:25:59:85:14:89:21:4b:c1:3a:ca:93:ea:0c:d7:
                    3f:a5:9d:89:4d:70:a2:cd:b6:43:dd:11:49:6c:39:
                    83:d9:e9:6d:55:7d:ee:16:8e:e5:e9:89:45:0d:ce:
                    54:0a:95:47:bb:d6:d3:69:19:a0:63:e1:6e:f8:4a:
                    1a:4c:aa:58:af:fb:50:c8:ff:57:ed:46:89:e3:16:
                    30:5d:43:37:ed:ed:d2:4a:a5:ef:f8:d2:18:55:38:
                    f5:8c:95:54:01:28:17:df:93:0c:9d:51:3e:43:0c:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.248.0/22
                IPv6:
                  2804:3bd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266172

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:a0:5e:14:f3:b3:f3:6b:8a:fb:e3:65:ce:2e:58:a3:e8:
         a0:54:80:dc:aa:f6:09:29:08:72:79:5b:74:a2:ae:77:09:90:
         8c:45:e3:42:c1:99:30:bd:6c:78:60:9f:ee:92:dc:db:df:3c:
         7f:00:4b:4b:70:aa:cd:66:8a:0c:14:18:d9:f1:be:d4:27:d8:
         f6:7f:04:74:9c:ed:6b:9f:61:ea:60:69:f3:41:aa:3a:0f:90:
         03:24:f4:b1:d9:e4:f6:e3:84:56:50:53:a2:66:12:b2:0f:96:
         f7:83:43:80:e7:14:71:71:30:95:1c:84:cc:65:3a:f1:5c:cd:
         c3:99:00:db:59:be:23:4f:9e:0e:f0:0e:8e:23:52:a9:a1:e2:
         a8:e9:af:1a:a5:c1:a2:16:73:cc:8f:c9:42:d2:68:25:97:1f:
         dc:26:e4:81:66:70:3c:cd:4d:45:a3:6f:f7:f9:05:3a:ae:41:
         64:af:db:b7:61:ac:38:9c:6a:85:f7:50:6c:95:cf:1b:98:26:
         f0:15:ad:84:3f:7e:a2:21:7e:2b:a7:5d:8b:cd:ee:18:68:86:
         17:03:ff:50:53:e5:76:f9:86:f6:52:44:fa:08:4e:bf:0e:a6:
         5c:63:ee:d1:76:e8:7b:6d:21:9b:30:5d:d3:7d:50:57:26:65:
         a9:53:70:4c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUH2tlsDmbR0pnaSKU7Ni4LQy/rhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMzAxMzQzMzBaFw0yNTExMjkxMzQ4MzBaMDMxMTAvBgNV
BAMTKDU3M0Q3RTRGRUU2MkJDRjg0MTQyODI0QTM0OTc5QkIwQTEzRDFFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRZaGSW9S50blkAQcQGwiTcyb
n1vGYMUMtUCTXFFu3jGtC7ph/+72nd6o+jtww0Ffa2jxPYnEYItymEH6utwobZtC
IhfGXh2VZtXeNgOUePp3BVkIUr7zbrQD1lTwYPsykt2hDr7ULqqYJEpgwh7KHQ8S
Z6WEoXyQeteT1z9nT0xhAyZmRp6KAwFl4IRP5sLwBEye0nQlWYUUiSFLwTrKk+oM
1z+lnYlNcKLNtkPdEUlsOYPZ6W1Vfe4WjuXpiUUNzlQKlUe71tNpGaBj4W74ShpM
qliv+1DI/1ftRonjFjBdQzft7dJKpe/40hhVOPWMlVQBKBffkwydUT5DDJhpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXPX5P7mK8+EFC
gko0l5uwoT0eBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM05M
S3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4cDcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNO
TEt2VWNSeGdTRzVpdWpVUndYZ3RiZ1B3aXJmNTkzZnhEajh5eHlzOHA3LzAvNTcz
RDdFNEZFRTYyQkNGODQxNDI4MjRBMzQ5NzlCQjBBMTNEMUUwNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCoBP4MA0EAgACMAcDBQAoBDvQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPvDANBgkqhkiG9w0BAQsFAAOCAQEAqHugXhTzs/Nrivvj
Zc4uWKPooFSA3Kr2CSkIcnlbdKKudwmQjEXjQsGZML1seGCf7pLc2988fwBLS3Cq
zWaKDBQY2fG+1CfY9n8EdJzta59h6mBp80GqOg+QAyT0sdnk9uOEVlBTomYSsg+W
94NDgOcUcXEwlRyEzGU68VzNw5kA21m+I0+eDvAOjiNSqaHiqOmvGqXBohZzzI/J
QtJoJZcf3CbkgWZwPM1NRaNv9/kFOq5BZK/bt2GsOJxqhfdQbJXPG5gm8BWthD9+
oiF+K6ddi83uGGiGFwP/UFPldvmG9lJE+ghOvw6mXGPu0Xboe20hmzBd031QVyZl
qVNwTA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:03:36 2025 by rpki-client