Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/739E80F72DDB8B7AA2EB7BDFB4E1FAE51EB4770C.cer
File:                     739E80F72DDB8B7AA2EB7BDFB4E1FAE51EB4770C.cer (raw, json)
Hash identifier:          ecz1Mf/EJF4v7S3jVxjuMQ76Y53axfxCQwDYvtpbdGY=
Subject key identifier:   73:9E:80:F7:2D:DB:8B:7A:A2:EB:7B:DF:B4:E1:FA:E5:1E:B4:77:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3794793A28EF23F869CCD044FE78345FCDE7419D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/739E80F72DDB8B7AA2EB7BDFB4E1FAE51EB4770C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 15:28:19 +0000
Certificate not after:    Wed 03 Dec 2025 15:33:19 +0000
Subordinate resources:    AS: 271137
                          IP: 201.54.188.0/22
                          IP: 2804:76d4::/32
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 04:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:79:3a:28:ef:23:f8:69:cc:d0:44:fe:78:34:5f:cd:e7:41:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 15:28:19 2024 GMT
            Not After : Dec  3 15:33:19 2025 GMT
        Subject: CN=739E80F72DDB8B7AA2EB7BDFB4E1FAE51EB4770C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:ed:25:45:93:b6:59:8d:53:20:30:92:ff:
                    ea:e9:f7:26:39:d6:38:ce:2c:48:63:e7:12:b9:b5:
                    91:d9:e2:68:15:c4:ca:10:d4:3b:9e:6d:16:17:3f:
                    30:fb:97:25:5d:8b:88:f8:0f:a0:40:84:b6:f6:dc:
                    5d:1c:75:4e:df:44:2a:12:3f:2f:58:9d:fe:6c:ad:
                    f0:83:63:4b:c9:98:fd:89:c9:0a:8f:81:b6:56:cf:
                    48:96:1d:71:ca:28:8d:c5:85:49:db:be:f2:c0:02:
                    56:e4:35:9b:55:89:98:b4:f1:86:9d:8f:d6:89:c8:
                    de:c5:47:4e:5d:b7:f6:0a:d2:59:50:a4:70:f5:2d:
                    a9:78:82:75:49:5f:f7:50:3f:a1:6d:52:fa:65:96:
                    bf:fc:af:15:44:61:65:a2:4f:d1:73:25:fa:25:fe:
                    1e:3c:31:d0:76:25:8b:ca:16:aa:7a:3e:65:f6:65:
                    46:7a:67:d6:0b:0f:88:db:d5:cc:64:c0:18:57:b0:
                    b5:66:03:9e:dd:d9:bd:80:38:c9:7c:76:4e:5e:dc:
                    01:4b:73:5b:3e:b4:21:3d:18:ea:bd:0b:17:1f:d3:
                    90:f0:78:4b:7f:8e:96:aa:a8:3a:12:68:54:68:e3:
                    bc:79:cc:7a:cc:b5:5b:da:d4:2d:5f:96:06:a0:fc:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:9E:80:F7:2D:DB:8B:7A:A2:EB:7B:DF:B4:E1:FA:E5:1E:B4:77:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/739E80F72DDB8B7AA2EB7BDFB4E1FAE51EB4770C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.188.0/22
                IPv6:
                  2804:76d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271137

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:4b:21:6e:8d:51:d8:df:94:a4:f4:29:0d:3a:45:bb:e4:
         1b:8a:32:70:c3:38:af:1c:94:5f:4a:3a:ca:86:a5:02:d4:ee:
         25:c0:fd:0b:90:30:be:33:bd:ff:fa:28:0a:6c:10:80:e8:eb:
         2b:f4:a5:ff:78:6f:13:34:cb:6f:29:05:10:f2:4e:54:05:d1:
         10:eb:74:1e:b7:03:1a:ca:47:a1:39:dc:bc:e5:a1:76:71:c8:
         4a:c7:8a:3f:0a:4b:ff:75:b7:4d:0c:39:3c:64:f4:a2:e3:02:
         36:b0:16:ca:48:ba:96:38:20:9c:71:ad:38:6a:d0:3e:81:7d:
         82:9c:d9:d9:76:0e:0e:ac:9b:f1:e1:e5:65:b6:e8:3f:7c:51:
         d1:6b:be:ac:5f:83:4e:d6:d0:79:b2:a0:ce:e4:57:ba:47:af:
         77:15:7d:e1:46:be:a5:df:3a:0a:0b:40:53:47:ed:69:7c:fa:
         39:5d:15:c3:d2:20:da:e4:3b:e4:42:5b:b9:4a:b4:44:3d:f5:
         34:c8:35:62:b8:cb:6a:d0:8f:3a:db:46:41:a2:d0:8c:54:66:
         f7:50:09:00:74:18:ee:8b:8d:9c:10:f0:5a:10:09:57:9f:41:
         b7:b6:69:ed:c8:b1:a0:c6:64:d1:42:8f:f0:52:f2:a8:28:89:
         14:24:e4:91
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUN5R5OijvI/hpzNBE/ng0X83nQZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMDQxNTI4MTlaFw0yNTEyMDMxNTMzMTlaMDMxMTAvBgNV
BAMTKDczOUU4MEY3MkREQjhCN0FBMkVCN0JERkI0RTFGQUU1MUVCNDc3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCe0lRZO2WY1TIDCS/+rp9yY5
1jjOLEhj5xK5tZHZ4mgVxMoQ1DuebRYXPzD7lyVdi4j4D6BAhLb23F0cdU7fRCoS
Py9Ynf5srfCDY0vJmP2JyQqPgbZWz0iWHXHKKI3FhUnbvvLAAlbkNZtViZi08Yad
j9aJyN7FR05dt/YK0llQpHD1Lal4gnVJX/dQP6FtUvpllr/8rxVEYWWiT9FzJfol
/h48MdB2JYvKFqp6PmX2ZUZ6Z9YLD4jb1cxkwBhXsLVmA57d2b2AOMl8dk5e3AFL
c1s+tCE9GOq9Cxcf05DweEt/jpaqqDoSaFRo47x5zHrMtVva1C1flgag/Eo1AgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRznoD3LduLeqLr
e9+04frlHrR3DDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZE
b3VVdEFERk1UNWFKQUFxQkM0VVFZWlFZWUFGTDZFd0NaV0tXb2JNWi8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZE
b3VVdEFERk1UNWFKQUFxQkM0VVFZWlFZWUFGTDZFd0NaV0tXb2JNWi8wLzczOUU4
MEY3MkREQjhCN0FBMkVCN0JERkI0RTFGQUU1MUVCNDc3MEMubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAsk2vDANBAIAAjAHAwUAKAR21DAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEIyEwDQYJKoZIhvcNAQELBQADggEBAAWzSyFujVHY35Sk9CkN
OkW75BuKMnDDOK8clF9KOsqGpQLU7iXA/QuQML4zvf/6KApsEIDo6yv0pf94bxM0
y28pBRDyTlQF0RDrdB63AxrKR6E53LzloXZxyErHij8KS/91t00MOTxk9KLjAjaw
FspIupY4IJxxrThq0D6BfYKc2dl2Dg6sm/Hh5WW26D98UdFrvqxfg07W0HmyoM7k
V7pHr3cVfeFGvqXfOgoLQFNH7Wl8+jldFcPSINrkO+RCW7lKtEQ99TTINWK4y2rQ
jzrbRkGi0IxUZvdQCQB0GO6LjZwQ8FoQCVefQbe2ae3IsaDGZNFCj/BS8qgoiRQk
5JE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:07:57 2025 by rpki-client