Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
File:                     7C85DCA145843B801E0DE7F701B0084B2991189D.cer (raw, json)
Hash identifier:          sG1enXW8pg7nwoUIS69LzGobNmZCzM1KT85UWVABY0w=
Subject key identifier:   7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       267F77957E41E465CC590454CE00B7E3671B37BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 19:59:54 +0000
Certificate not after:    Fri 18 Apr 2025 20:04:54 +0000
Subordinate resources:    AS: 269073
                          IP: 45.179.36.0/22
                          IP: 138.94.124.0/22
                          IP: 138.97.120.0/22
                          IP: 168.121.132.0/22
                          IP: 187.17.32.0/20
                          IP: 187.86.192.0 -- 187.86.194.255
                          IP: 187.110.144.0/21
                          IP: 201.150.144.0/22
                          IP: 207.248.28.0/22
                          IP: 2804:5f0c::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 09:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7f:77:95:7e:41:e4:65:cc:59:04:54:ce:00:b7:e3:67:1b:37:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 19 19:59:54 2024 GMT
            Not After : Apr 18 20:04:54 2025 GMT
        Subject: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:ec:84:8b:16:ba:72:24:fa:c9:4b:24:c2:
                    33:df:fc:99:a6:45:73:2e:15:d8:d4:85:3e:93:a1:
                    e2:aa:ae:ed:af:30:d4:db:f2:95:2b:9c:d6:cc:c4:
                    1b:83:fa:10:fd:07:2d:fc:8a:3f:55:78:68:56:69:
                    f6:13:2a:f3:d6:01:c1:3c:53:ab:e4:d0:44:12:04:
                    3d:73:2d:31:35:00:05:48:af:7a:f1:31:de:8c:3a:
                    7b:f4:67:fb:06:35:23:30:f1:0a:56:51:cf:2e:e5:
                    e0:9e:21:e7:d7:be:09:0a:1f:5b:77:05:85:c8:f7:
                    9a:32:35:e7:fd:63:ee:af:39:5f:c5:b2:a7:d0:36:
                    3f:3e:05:e5:a7:c8:e6:66:2b:d4:14:73:1c:c4:15:
                    4e:11:35:94:ba:88:32:c1:b7:dd:82:f2:d2:95:36:
                    de:f9:02:43:73:c0:bb:de:8c:2a:de:ab:61:2f:02:
                    2e:54:d5:09:6a:05:59:7c:0c:0a:35:ea:b9:e5:35:
                    7a:30:98:58:85:89:c1:97:67:3d:00:9b:9d:af:fe:
                    49:60:00:22:27:6e:ba:44:fa:a4:39:f6:7f:d2:41:
                    28:92:4c:d8:87:f8:2b:91:bb:89:ac:78:64:13:15:
                    08:1d:ca:92:9c:21:ff:bc:e0:ed:15:2c:d4:c1:26:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/22
                  138.94.124.0/22
                  138.97.120.0/22
                  168.121.132.0/22
                  187.17.32.0/20
                  187.86.192.0-187.86.194.255
                  187.110.144.0/21
                  201.150.144.0/22
                  207.248.28.0/22
                IPv6:
                  2804:5f0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269073

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:a8:a6:64:59:48:31:a6:44:52:f7:f0:0d:d3:9c:9c:cd:
         3b:ca:94:90:fc:d9:66:ce:ab:e3:a1:d3:c6:15:a9:b4:30:0a:
         f0:3d:77:90:7e:b9:67:00:80:09:37:5b:e1:62:d1:70:a1:47:
         9a:a8:7d:5d:c1:e2:5c:28:d2:45:cd:3e:6f:7c:26:bc:b9:bf:
         17:22:0e:34:f7:15:d9:31:b1:da:cb:90:c8:6a:c5:c7:c6:f9:
         f1:ad:b9:43:ca:8b:25:79:e2:d3:c6:83:7b:5e:0c:5f:bd:00:
         ff:c7:82:0d:39:5b:5b:99:b9:8c:33:b5:b5:82:5f:b5:d4:1a:
         c3:8e:5e:cc:e1:50:6f:01:60:76:e9:0d:64:aa:f4:25:6c:77:
         d9:dc:5e:52:13:b6:8e:74:7f:3d:37:fb:59:1a:10:a4:23:2b:
         cc:4b:02:2a:9d:65:d1:67:87:e1:26:fd:83:60:54:30:5b:b3:
         b8:50:a5:61:bc:4c:4d:91:99:5b:d1:93:e6:dc:3d:79:79:e9:
         b3:dc:6b:ef:a4:43:90:f5:95:e6:02:11:4a:f1:8f:1d:10:4a:
         f2:68:2c:f5:e4:77:be:62:0a:85:f1:3f:b6:70:10:f2:ff:da:
         11:70:d8:65:6a:b7:90:54:d7:97:33:c8:20:98:d8:c4:5b:f0:
         2b:4f:fa:63
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUJn93lX5B5GXMWQRUzgC342cbN7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTkxOTU5NTRaFw0yNTA0MTgyMDA0NTRaMDMxMTAvBgNV
BAMTKDdDODVEQ0ExNDU4NDNCODAxRTBERTdGNzAxQjAwODRCMjk5MTE4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60+yEixa6ciT6yUskwjPf/Jmm
RXMuFdjUhT6ToeKqru2vMNTb8pUrnNbMxBuD+hD9By38ij9VeGhWafYTKvPWAcE8
U6vk0EQSBD1zLTE1AAVIr3rxMd6MOnv0Z/sGNSMw8QpWUc8u5eCeIefXvgkKH1t3
BYXI95oyNef9Y+6vOV/FsqfQNj8+BeWnyOZmK9QUcxzEFU4RNZS6iDLBt92C8tKV
Nt75AkNzwLvejCreq2EvAi5U1QlqBVl8DAo16rnlNXowmFiFicGXZz0Am52v/klg
ACInbrpE+qQ59n/SQSiSTNiH+CuRu4mseGQTFQgdypKcIf+84O0VLNTBJtELAgMB
AAGjggNyMIIDbjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8hdyhRYQ7gB4N
5/cBsAhLKZEYnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnZH
ekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2OTMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J2
R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAvN0M4
NURDQTE0NTg0M0I4MDFFMERFN0Y3MDFCMDA4NEIyOTkxMTg5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEH
AQH/BFcwVTBEBAIAATA+AwQCLbMkAwQCil58AwQCimF4AwQCqHmEAwQEuxEgMAwD
BAa7VsADBAC7VsIDBAO7bpADBALJlpADBALP+BwwDQQCAAIwBwMFACgEXwwwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBBsRMA0GCSqGSIb3DQEBCwUAA4IBAQB7paim
ZFlIMaZEUvfwDdOcnM07ypSQ/NlmzqvjodPGFam0MArwPXeQfrlnAIAJN1vhYtFw
oUeaqH1dweJcKNJFzT5vfCa8ub8XIg409xXZMbHay5DIasXHxvnxrblDyosleeLT
xoN7XgxfvQD/x4INOVtbmbmMM7W1gl+11BrDjl7M4VBvAWB26Q1kqvQlbHfZ3F5S
E7aOdH89N/tZGhCkIyvMSwIqnWXRZ4fhJv2DYFQwW7O4UKVhvExNkZlb0ZPm3D15
eemz3GvvpEOQ9ZXmAhFK8Y8dEEryaCz15He+YgqF8T+2cBDy/9oRcNhlareQVNeX
M8ggmNjEW/ArT/pj
-----END CERTIFICATE-----
Generated at Mon Oct 21 13:23:56 2024 by rpki-client on console-ams.rpki-client.org