Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer
File:                     78DCBCCBBA458183D7705328DD214CA0953E3E21.cer (raw, json)
Hash identifier:          V3pOOibaSAcU+ygSrHQjwVgsd6Mfd2PrsUBLdiKzu4s=
Subject key identifier:   78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74097B6BDD3D2DBF5633A9FF97BC30E8AB76F75E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/78DCBCCBBA458183D7705328DD214CA0953E3E21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Dec 2024 16:11:24 +0000
Certificate not after:    Tue 30 Dec 2025 16:16:24 +0000
Subordinate resources:    AS: 61785
                          IP: 201.131.152.0/22
                          IP: 2804:194c::/32
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 11:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:09:7b:6b:dd:3d:2d:bf:56:33:a9:ff:97:bc:30:e8:ab:76:f7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 31 16:11:24 2024 GMT
            Not After : Dec 30 16:16:24 2025 GMT
        Subject: CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0b:ee:4f:e3:e1:b0:c0:a7:0f:d4:a3:34:e5:
                    68:8c:2d:4e:70:d9:47:06:b3:e4:dd:b2:23:d9:de:
                    19:83:e1:2e:1b:ba:06:73:ed:f4:c3:64:af:2e:0d:
                    ff:f1:c6:07:80:ea:f2:59:36:81:07:db:91:ae:ec:
                    53:06:a4:08:1f:b2:39:c2:7b:4d:54:1f:53:04:16:
                    71:a2:dd:b6:99:78:cb:c9:e8:8c:57:c2:ff:78:72:
                    4b:64:fd:02:5a:0e:73:29:fc:7e:ee:4e:22:cb:81:
                    0a:24:68:2d:95:93:fb:4f:39:ca:a4:dc:ed:04:f1:
                    66:dc:99:ea:d0:a4:90:e3:82:d0:e3:82:58:b0:d1:
                    b3:2b:c6:3d:dc:39:6f:34:f0:3a:83:34:66:d5:8f:
                    68:34:d3:d2:36:52:ad:c7:f5:a6:ec:ba:20:11:6f:
                    a1:82:58:56:4e:82:29:ce:58:60:67:3f:96:f3:1c:
                    f6:ca:36:c1:72:3a:fb:16:bc:ba:74:8b:59:72:0b:
                    5b:36:be:73:cb:cf:e5:0a:21:42:00:bf:fb:a6:e8:
                    c7:80:a1:c0:bf:bd:12:ab:64:14:1b:a4:94:01:b0:
                    97:ae:ce:ac:21:f0:15:cc:60:f3:00:0b:51:03:2c:
                    2b:f6:d2:a5:65:e1:79:02:66:46:37:6e:8c:0e:82:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/78DCBCCBBA458183D7705328DD214CA0953E3E21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22
                IPv6:
                  2804:194c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61785

    Signature Algorithm: sha256WithRSAEncryption
         25:08:43:29:59:85:94:d2:88:64:93:f8:14:a0:c1:0b:89:8f:
         66:01:b4:8b:9b:11:67:d8:d4:2e:5b:26:61:b0:aa:ec:b5:29:
         25:d1:5f:3d:53:b9:4c:2e:da:9b:b6:af:27:ee:7b:ce:51:59:
         9c:76:cd:0c:8c:4b:1c:7b:02:15:2a:f3:93:28:31:20:b0:0e:
         14:92:7e:c1:9c:fa:a8:67:9f:c2:f7:9e:5e:b1:77:c5:d7:aa:
         79:e4:bd:6e:83:9e:66:f7:63:60:e4:d1:3f:49:4a:45:61:fd:
         6a:eb:47:99:0c:02:84:5e:f3:0e:5d:73:f9:8a:e7:cc:49:45:
         c0:d6:b2:ff:48:40:53:f2:ca:ee:59:50:0d:e6:e1:e9:94:f0:
         0a:9e:42:57:99:75:3f:c3:a0:81:41:81:b4:09:71:f1:80:4a:
         40:2c:e2:c2:71:3d:52:ba:bb:d9:c0:1c:88:be:1f:9c:d1:87:
         8c:36:22:dd:a3:cb:8d:79:5b:89:b8:33:28:29:86:f7:12:70:
         4c:e7:48:f4:c2:f3:9b:7c:d0:e2:46:5f:e8:a7:4e:eb:40:f5:
         6b:2d:d0:fc:08:1b:c9:1a:35:de:04:6f:b5:47:38:90:ef:2f:
         b5:36:20:d6:58:58:92:b2:c1:43:c0:3d:45:35:fc:f5:f2:56:
         4c:80:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:59 2025 by rpki-client