Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B1D5D68C0EEBEA5107B638B1FF108F395BBAC18.cer
File:                     5B1D5D68C0EEBEA5107B638B1FF108F395BBAC18.cer (raw, json)
Hash identifier:          +P08hsU6gGdqJbhr4wAb1iG899It6CPYRnFKUHjQUKM=
Subject key identifier:   5B:1D:5D:68:C0:EE:BE:A5:10:7B:63:8B:1F:F1:08:F3:95:BB:AC:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FDE16E2111B8F23AAFC8FEA21E35F9B92B69313
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/5B1D5D68C0EEBEA5107B638B1FF108F395BBAC18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Dec 2024 20:14:48 +0000
Certificate not after:    Sat 20 Dec 2025 20:19:48 +0000
Subordinate resources:    AS: 268661
                          IP: 45.165.76.0/22
                          IP: 2804:549c::/32
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 05:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:de:16:e2:11:1b:8f:23:aa:fc:8f:ea:21:e3:5f:9b:92:b6:93:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 21 20:14:48 2024 GMT
            Not After : Dec 20 20:19:48 2025 GMT
        Subject: CN=5B1D5D68C0EEBEA5107B638B1FF108F395BBAC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:33:fc:94:0e:ab:48:a7:bb:0d:dd:64:3a:
                    43:91:86:a5:67:13:35:7d:06:78:5c:df:3e:78:1e:
                    a7:5c:a9:43:aa:7a:ac:ee:64:34:df:45:bc:f6:3c:
                    50:d4:02:b7:b6:24:4b:c5:d0:59:e1:6f:c7:6a:1c:
                    dd:56:64:2d:f0:ce:38:c4:8c:c5:c8:f4:5c:fa:13:
                    9f:c3:6f:3d:f4:75:0e:c0:ea:4c:85:10:0c:89:21:
                    b6:35:3f:ac:a6:56:0f:01:60:ef:fd:e2:55:70:0f:
                    0c:19:f5:e5:e8:b7:30:17:86:18:a1:5c:f1:94:cc:
                    82:bf:36:95:03:c6:6e:95:a0:f2:cb:d8:cd:7e:fa:
                    1e:bc:c3:80:50:a9:22:16:a5:ac:3c:8f:d7:39:d9:
                    1c:98:9a:c6:22:e9:dd:34:86:43:d4:ba:85:a7:75:
                    22:3b:e6:07:07:66:da:28:ea:e0:05:89:3b:b3:f8:
                    1f:2c:7e:5d:36:3c:64:15:d3:38:ae:c4:6e:ad:20:
                    19:73:79:e5:ed:ed:10:e5:a0:d4:b2:ad:48:8e:30:
                    d8:eb:9f:f1:ff:b3:75:d7:5f:7a:4e:2a:5b:66:b3:
                    d6:63:65:98:af:a0:43:c8:3b:23:49:8a:f5:51:71:
                    6e:cc:a2:44:f3:e8:e3:65:e5:39:2f:0b:e0:89:63:
                    3b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:1D:5D:68:C0:EE:BE:A5:10:7B:63:8B:1F:F1:08:F3:95:BB:AC:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/5B1D5D68C0EEBEA5107B638B1FF108F395BBAC18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.76.0/22
                IPv6:
                  2804:549c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268661

    Signature Algorithm: sha256WithRSAEncryption
         b6:b4:35:38:00:f4:c8:b1:bc:43:a3:89:fe:b1:4f:62:db:3c:
         53:74:c7:7b:00:55:ac:69:a2:99:5b:3c:1d:fd:d6:6d:72:37:
         26:f9:a7:a2:19:fe:3e:8f:12:6b:f1:d6:80:09:60:db:33:17:
         79:9d:39:17:63:bf:bb:eb:d0:bf:20:7c:97:74:ce:d8:51:fe:
         5a:a5:b8:26:09:f9:54:73:55:15:e0:bb:d1:b8:c4:e4:4b:3c:
         1a:33:fa:24:e7:fa:43:42:2d:a2:f2:36:63:97:a1:f9:97:b2:
         d3:7a:5a:75:50:37:a1:58:88:90:9a:c2:8c:64:5e:b9:d4:2c:
         ba:8c:70:d7:a4:5c:ce:d4:d3:ee:ea:b1:af:b0:15:51:1f:02:
         b0:f2:d8:13:96:25:c1:43:28:26:84:9a:85:01:4e:ac:9f:ea:
         a4:60:5c:2f:f0:48:c0:9b:f1:a5:53:95:56:19:6a:f3:ec:0b:
         a7:f7:74:ce:2d:7d:8d:a0:a6:e5:2e:32:61:21:0c:cd:58:43:
         03:a2:9b:49:52:be:fb:6b:f9:c9:4e:76:0e:b8:e0:25:73:f8:
         4c:80:83:39:b0:0f:af:d0:9a:2e:be:61:dd:ab:9c:b0:a8:ca:
         cd:3d:34:7b:a2:7a:e7:f1:3c:f8:57:c3:28:4e:b8:94:c5:63:
         2d:aa:bc:60
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUD94W4hEbjyOq/I/qIeNfm5K2kxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMjEyMDE0NDhaFw0yNTEyMjAyMDE5NDhaMDMxMTAvBgNV
BAMTKDVCMUQ1RDY4QzBFRUJFQTUxMDdCNjM4QjFGRjEwOEYzOTVCQkFDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZojP8lA6rSKe7Dd1kOkORhqVn
EzV9Bnhc3z54HqdcqUOqeqzuZDTfRbz2PFDUAre2JEvF0Fnhb8dqHN1WZC3wzjjE
jMXI9Fz6E5/Dbz30dQ7A6kyFEAyJIbY1P6ymVg8BYO/94lVwDwwZ9eXotzAXhhih
XPGUzIK/NpUDxm6VoPLL2M1++h68w4BQqSIWpaw8j9c52RyYmsYi6d00hkPUuoWn
dSI75gcHZtoo6uAFiTuz+B8sfl02PGQV0ziuxG6tIBlzeeXt7RDloNSyrUiOMNjr
n/H/s3XXX3pOKltms9ZjZZivoEPIOyNJivVRcW7MokTz6ONl5TkvC+CJYzsvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbHV1owO6+pRB7
Y4sf8QjzlbusGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnVt
dUtOZDI3UTlFalpjZjd6TXZSNGNMV2FHM3J0UmtEWnRrMXpyYkRFV0MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z1
bXVLTmQyN1E5RWpaY2Y3ek12UjRjTFdhRzNydFJrRFp0azF6cmJERVdDLzAvNUIx
RDVENjhDMEVFQkVBNTEwN0I2MzhCMUZGMTA4RjM5NUJCQUMxOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaVMMA0EAgACMAcDBQAoBFScMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZdTANBgkqhkiG9w0BAQsFAAOCAQEAtrQ1OAD0yLG8Q6OJ
/rFPYts8U3THewBVrGmimVs8Hf3WbXI3Jvmnohn+Po8Sa/HWgAlg2zMXeZ05F2O/
u+vQvyB8l3TO2FH+WqW4Jgn5VHNVFeC70bjE5Es8GjP6JOf6Q0ItovI2Y5eh+Zey
03padVA3oViIkJrCjGReudQsuoxw16RcztTT7uqxr7AVUR8CsPLYE5YlwUMoJoSa
hQFOrJ/qpGBcL/BIwJvxpVOVVhlq8+wLp/d0zi19jaCm5S4yYSEMzVhDA6KbSVK+
+2v5yU52DrjgJXP4TICDObAPr9CaLr5h3aucsKjKzT00e6J65/E8+FfDKE64lMVj
Laq8YA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:05 2025 by rpki-client