Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69823D7679590091792F5A82532AAFFF1FBDB871.cer
File:                     69823D7679590091792F5A82532AAFFF1FBDB871.cer (raw, json)
Hash identifier:          +/Wwji6nAISONaeaTqW4guq4jT9oJA1jLhxcEd77BPs=
Subject key identifier:   69:82:3D:76:79:59:00:91:79:2F:5A:82:53:2A:AF:FF:1F:BD:B8:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       451EC7815BE199E1A488561243D9E1657474D6B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/69823D7679590091792F5A82532AAFFF1FBDB871.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 21:04:28 +0000
Certificate not after:    Tue 20 Jan 2026 21:09:28 +0000
Subordinate resources:    AS: 268307
                          IP: 45.237.240.0/22
                          IP: 2804:4f24::/32
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 21:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1e:c7:81:5b:e1:99:e1:a4:88:56:12:43:d9:e1:65:74:74:d6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 21:04:28 2025 GMT
            Not After : Jan 20 21:09:28 2026 GMT
        Subject: CN=69823D7679590091792F5A82532AAFFF1FBDB871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:d4:16:da:28:aa:14:61:cc:27:16:79:1a:
                    0c:b0:57:76:03:7d:65:34:0c:8c:60:ae:21:9c:51:
                    58:14:f6:df:78:01:e6:6c:72:41:f9:3c:ce:d2:24:
                    70:94:3d:a9:ec:54:6c:de:56:ae:63:c6:77:f5:9a:
                    c6:d2:ff:30:be:69:8f:a4:80:53:08:21:ad:00:96:
                    7c:81:73:2a:9c:f9:5b:90:66:a8:74:db:90:18:bc:
                    3c:13:f4:c4:d4:8b:41:1b:41:b2:19:bc:b3:9f:10:
                    79:21:50:d9:63:55:78:1f:c3:3c:d6:03:b7:be:39:
                    0c:81:9e:e8:dc:09:39:d2:9d:41:09:00:e8:f9:ce:
                    43:1a:33:2a:4f:12:e8:32:65:8f:53:e3:5f:8c:76:
                    7b:f2:25:f9:ca:cf:02:33:7e:e4:84:4b:16:16:92:
                    d1:25:a0:b7:8a:e5:cb:fb:fe:74:4e:9a:31:8f:f0:
                    9c:e0:b7:3c:26:9c:0d:44:e3:65:41:63:24:a3:2c:
                    b4:23:f9:5e:5c:a2:fb:6d:1a:c9:6d:98:57:ba:30:
                    93:3b:78:7e:d8:9f:29:0e:a9:07:bd:2c:61:fa:8b:
                    f8:4e:74:b8:20:e1:3a:58:c7:3a:94:59:75:8b:70:
                    17:1e:ed:24:c6:06:4d:bf:a6:4d:76:0b:dd:9f:57:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:82:3D:76:79:59:00:91:79:2F:5A:82:53:2A:AF:FF:1F:BD:B8:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/69823D7679590091792F5A82532AAFFF1FBDB871.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/22
                IPv6:
                  2804:4f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268307

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:4f:a0:de:41:0f:5c:c3:06:18:a4:ad:f8:6b:59:47:cc:
         90:4f:d5:09:4a:67:1b:09:38:7b:8f:3e:0e:dd:c5:4a:dd:be:
         6f:eb:33:71:dd:e0:5a:b6:d9:31:b6:e2:8a:e4:91:3a:3c:06:
         b7:71:1c:ce:3f:08:37:50:ed:e8:61:dd:50:ca:0f:5b:70:3c:
         ba:17:d4:36:70:93:fe:44:4e:18:26:da:d5:d1:25:7f:c0:36:
         51:56:e3:0e:b4:48:45:f9:7e:ca:f9:9f:1a:83:68:60:13:b7:
         37:27:93:0e:21:7c:25:f7:68:aa:89:e0:61:3c:e1:07:e6:7f:
         cb:0a:8c:06:de:18:81:2a:35:ed:64:7b:61:14:e0:28:b8:fd:
         64:31:44:6e:c5:e9:18:07:e1:b8:b6:4b:af:79:15:e9:60:d3:
         2b:03:0e:1f:c9:09:db:4e:73:f3:b4:39:ea:64:9b:39:cc:d5:
         04:45:ae:1a:86:a2:28:ce:8a:32:d1:c1:4b:54:6e:a6:08:24:
         2c:77:20:5c:b8:7c:32:e3:9b:86:0a:61:a2:65:99:8d:01:f7:
         30:d3:78:53:17:95:ab:45:d2:2f:15:1a:3b:41:e9:79:a3:62:
         f1:c0:9f:9f:e8:2a:49:25:a1:e4:a9:04:1f:7d:6b:5a:76:e4:
         21:fd:d4:e7
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIURR7HgVvhmeGkiFYSQ9nhZXR01rMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjEyMTA0MjhaFw0yNjAxMjAyMTA5MjhaMDMxMTAvBgNV
BAMTKDY5ODIzRDc2Nzk1OTAwOTE3OTJGNUE4MjUzMkFBRkZGMUZCREI4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkINQW2iiqFGHMJxZ5GgywV3YD
fWU0DIxgriGcUVgU9t94AeZsckH5PM7SJHCUPansVGzeVq5jxnf1msbS/zC+aY+k
gFMIIa0AlnyBcyqc+VuQZqh025AYvDwT9MTUi0EbQbIZvLOfEHkhUNljVXgfwzzW
A7e+OQyBnujcCTnSnUEJAOj5zkMaMypPEugyZY9T41+MdnvyJfnKzwIzfuSESxYW
ktEloLeK5cv7/nROmjGP8JzgtzwmnA1E42VBYySjLLQj+V5covttGsltmFe6MJM7
eH7YnykOqQe9LGH6i/hOdLgg4TpYxzqUWXWLcBce7STGBk2/pk12C92fV8y/AgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpgj12eVkAkXkv
WoJTKq//H724cTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBX
VGVENzRLM2o2NzFMVTZ0dXJDeFlGWmhIaTZxUHpLTEhLOWcyRTF6YS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBX
VGVENzRLM2o2NzFMVTZ0dXJDeFlGWmhIaTZxUHpLTEhLOWcyRTF6YS8wLzY5ODIz
RDc2Nzk1OTAwOTE3OTJGNUE4MjUzMkFBRkZGMUZCREI4NzEubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi3t8DANBAIAAjAHAwUAKARPJDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGBMwDQYJKoZIhvcNAQELBQADggEBAE4aT6DeQQ9cwwYYpK34
a1lHzJBP1QlKZxsJOHuPPg7dxUrdvm/rM3Hd4Fq22TG24orkkTo8BrdxHM4/CDdQ
7ehh3VDKD1twPLoX1DZwk/5EThgm2tXRJX/ANlFW4w60SEX5fsr5nxqDaGATtzcn
kw4hfCX3aKqJ4GE84Qfmf8sKjAbeGIEqNe1ke2EU4Ci4/WQxRG7F6RgH4bi2S695
Felg0ysDDh/JCdtOc/O0OepkmznM1QRFrhqGoijOijLRwUtUbqYIJCx3IFy4fDLj
m4YKYaJlmY0B9zDTeFMXlatF0i8VGjtB6XmjYvHAn5/oKkkloeSpBB99a1p25CH9
1Oc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:42:09 2025 by rpki-client