Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.cer
File:                     69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.cer (raw, json)
Hash identifier:          RyvoCbGI6/LIII1mEUiyij+Q+kwrzxf5CnXsreHkYIs=
Subject key identifier:   69:CD:8F:9F:14:C7:92:DC:1F:86:C8:3F:2E:B2:E2:3E:9C:07:4A:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5ED881275A3DA05450BA5C024BD8AC13C05CC40D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2024 02:44:35 +0000
Certificate not after:    Fri 12 Dec 2025 02:49:35 +0000
Subordinate resources:    AS: 264345
                          IP: 138.185.144.0/22
                          IP: 2804:267c::/32
Validation:               Failed, certificate revoked on Tue 25 Feb 2025 22:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:81:27:5a:3d:a0:54:50:ba:5c:02:4b:d8:ac:13:c0:5c:c4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 13 02:44:35 2024 GMT
            Not After : Dec 12 02:49:35 2025 GMT
        Subject: CN=69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:55:4d:6c:35:1d:3e:3b:be:10:49:ab:af:
                    59:40:79:dd:ac:12:53:ee:c8:25:91:20:6b:ad:fa:
                    32:ee:db:ca:df:8e:e4:2d:35:4e:b8:1d:21:66:52:
                    b6:c5:ef:14:8a:04:3e:6c:fa:93:85:47:f9:07:98:
                    bd:c7:95:86:07:a8:44:73:42:04:e5:33:b5:0c:34:
                    73:df:7c:49:8d:68:2d:39:20:13:ee:0e:cb:f8:3b:
                    7a:b9:a6:e7:9d:2b:90:76:fd:0f:2b:f9:8b:27:ad:
                    26:9f:ad:8f:a2:26:4b:0b:01:37:76:79:67:47:04:
                    12:21:23:31:36:a3:8e:e6:e2:2d:ed:36:ad:41:7d:
                    6d:6f:ee:62:2d:54:e2:7d:5b:1c:81:1d:53:31:20:
                    07:b9:6e:23:fc:74:2e:f0:6e:5a:8f:07:9e:f2:d8:
                    1b:01:20:c3:79:a6:a3:d0:05:6a:02:d9:51:cb:9b:
                    bb:7c:b6:72:a6:ed:57:92:eb:47:58:73:12:47:67:
                    d2:7b:90:09:ad:f9:9a:46:fb:79:98:32:d2:95:d2:
                    a0:7d:7a:29:8f:cb:ff:3c:8f:e5:42:93:e2:a7:52:
                    87:e0:2a:0f:2f:84:30:5d:7c:fb:04:ec:75:6f:01:
                    fb:eb:51:6b:8e:13:4f:f6:31:e6:31:7e:22:e9:6e:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:CD:8F:9F:14:C7:92:DC:1F:86:C8:3F:2E:B2:E2:3E:9C:07:4A:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.144.0/22
                IPv6:
                  2804:267c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264345

    Signature Algorithm: sha256WithRSAEncryption
         72:90:4a:ce:d3:49:c0:78:21:ee:d3:3b:18:c5:bd:3f:ca:fe:
         26:28:e9:fc:09:b4:5b:ca:92:c1:97:73:c3:dc:42:d2:6c:46:
         82:bf:55:70:05:07:d0:51:b9:4f:ea:1f:22:0b:00:71:ff:6d:
         05:0e:6e:db:ed:57:7b:fd:4a:fb:5f:92:26:46:58:25:b3:92:
         c8:8c:61:09:d1:99:67:9e:81:12:d1:0d:8c:c6:2d:95:3c:ab:
         ca:83:d4:67:bf:e5:24:c8:5e:bb:e7:f8:33:30:27:10:fd:c5:
         ca:6b:c1:55:60:02:81:75:98:d2:4b:6c:57:ce:57:68:92:ab:
         c7:9e:2e:4c:b4:fe:63:39:ea:0b:07:53:4b:a1:dd:97:6c:de:
         02:c3:82:f5:c1:50:e1:15:a6:fd:12:d3:b8:9e:08:44:95:f6:
         f8:bb:70:4e:b1:ad:ce:c0:21:ef:bb:f6:61:60:cf:dc:09:7e:
         78:cb:fb:c5:b5:f8:d7:c4:9c:7e:d2:f3:b9:cb:f7:95:eb:d8:
         b4:9b:51:65:9c:37:35:dc:56:e6:d2:14:02:ea:d4:ca:bd:18:
         42:05:c3:42:6a:49:d4:43:e9:4c:31:9b:a9:ab:af:3f:52:06:
         23:56:80:91:dd:4e:53:11:71:20:59:2a:a6:54:0c:74:07:78:
         38:c0:69:eb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXtiBJ1o9oFRQulwCS9isE8BcxA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTMwMjQ0MzVaFw0yNTEyMTIwMjQ5MzVaMDMxMTAvBgNV
BAMTKDY5Q0Q4RjlGMTRDNzkyREMxRjg2QzgzRjJFQjJFMjNFOUMwNzRBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirFVNbDUdPju+EEmrr1lAed2s
ElPuyCWRIGut+jLu28rfjuQtNU64HSFmUrbF7xSKBD5s+pOFR/kHmL3HlYYHqERz
QgTlM7UMNHPffEmNaC05IBPuDsv4O3q5puedK5B2/Q8r+YsnrSafrY+iJksLATd2
eWdHBBIhIzE2o47m4i3tNq1BfW1v7mItVOJ9WxyBHVMxIAe5biP8dC7wblqPB57y
2BsBIMN5pqPQBWoC2VHLm7t8tnKm7VeS60dYcxJHZ9J7kAmt+ZpG+3mYMtKV0qB9
eimPy/88j+VCk+KnUofgKg8vhDBdfPsE7HVvAfvrUWuOE0/2MeYxfiLpbv3TAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpzY+fFMeS3B+G
yD8usuI+nAdKcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk1u
MlJ6RjFkV1NEc285SzViYzdlOXBXUXhHTVNTWjhMQkdHZkVUdHlzUmIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZN
bjJSekYxZFdTRHNvOUs1YmM3ZTlwV1F4R01TU1o4TEJHR2ZFVHR5c1JiLzAvNjlD
RDhGOUYxNEM3OTJEQzFGODZDODNGMkVCMkUyM0U5QzA3NEE3Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCirmQMA0EAgACMAcDBQAoBCZ8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQImTANBgkqhkiG9w0BAQsFAAOCAQEAcpBKztNJwHgh7tM7
GMW9P8r+Jijp/Am0W8qSwZdzw9xC0mxGgr9VcAUH0FG5T+ofIgsAcf9tBQ5u2+1X
e/1K+1+SJkZYJbOSyIxhCdGZZ56BEtENjMYtlTyryoPUZ7/lJMheu+f4MzAnEP3F
ymvBVWACgXWY0ktsV85XaJKrx54uTLT+YznqCwdTS6Hdl2zeAsOC9cFQ4RWm/RLT
uJ4IRJX2+LtwTrGtzsAh77v2YWDP3Al+eMv7xbX418ScftLzucv3levYtJtRZZw3
NdxW5tIUAurUyr0YQgXDQmpJ1EPpTDGbqauvP1IGI1aAkd1OUxFxIFkqplQMdAd4
OMBp6w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:05 2025 by rpki-client