Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
File:                     7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer (raw, json)
Hash identifier:          DzxxHXN2HPga+9z2Q7MJzdpC1rfRf8DTLVraryL8Fkg=
Subject key identifier:   7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D174C068342B70372739A1591E66FBE401D50FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Oct 2024 01:34:55 +0000
Certificate not after:    Mon 13 Oct 2025 01:39:55 +0000
Subordinate resources:    AS: 28270
                          IP: 131.196.76.0/22
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 138.121.220.0/22
                          IP: 138.122.236.0/22
                          IP: 143.255.112.0/22
                          IP: 160.238.220.0/22
                          IP: 168.121.52.0/22
                          IP: 168.227.44.0/22
                          IP: 168.228.128.0/22
                          IP: 168.232.116.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 170.247.52.0/22
                          IP: 177.66.64.0/21
                          IP: 177.67.0.0/21
                          IP: 177.70.128.0/20
                          IP: 177.75.192.0/19
                          IP: 177.87.144.0/21
                          IP: 177.130.192.0/19
                          IP: 179.191.128.0/19
                          IP: 186.219.144.0/20
                          IP: 186.233.72.0/21
                          IP: 187.18.128.0/17
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.45.64.0/18
                          IP: 189.50.144.0/20
                          IP: 191.6.80.0/21
                          IP: 200.94.240.0/22
                          IP: 201.149.120.0/22
                          IP: 2804:880::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 20:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:17:4c:06:83:42:b7:03:72:73:9a:15:91:e6:6f:be:40:1d:50:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 01:34:55 2024 GMT
            Not After : Oct 13 01:39:55 2025 GMT
        Subject: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:ec:0d:d0:42:98:c8:dd:45:f6:88:37:cc:
                    57:64:c8:2e:b2:52:8f:1d:39:eb:1b:5d:1b:8e:b0:
                    a8:8c:d5:33:e3:7a:96:f3:2c:09:97:1f:b4:2b:43:
                    8a:df:bc:35:f7:d9:a8:42:3c:95:02:47:f2:9f:ae:
                    50:9b:05:ad:e9:11:b5:6a:cd:61:52:b3:20:c9:44:
                    79:f2:cf:c1:48:bc:ff:8c:55:e1:0f:de:ff:54:a2:
                    db:9d:ce:51:cf:92:6d:66:4b:ae:69:25:08:c1:3b:
                    c1:da:7e:72:e2:74:8c:48:01:7b:aa:89:70:16:57:
                    22:68:1d:11:10:1d:94:3c:36:9c:43:0e:e4:a9:d1:
                    2a:20:07:90:9b:ee:27:ec:16:8d:25:c8:c4:be:d7:
                    b7:e0:d2:4f:6a:9b:77:95:79:de:5b:d7:17:9b:13:
                    88:62:6a:10:ad:b8:4f:d1:95:43:c1:79:75:78:6a:
                    4f:29:b7:66:e3:c9:16:7b:d3:75:f5:c5:93:6e:c1:
                    bb:8e:ea:d0:0b:3d:02:25:c4:0e:d5:99:72:1e:da:
                    d5:cb:bc:86:c0:28:54:00:52:6a:8e:86:2d:36:e8:
                    de:d8:93:7a:1c:7b:7f:cd:3c:38:e8:e0:c7:65:3d:
                    20:71:d3:21:a7:4e:e0:8a:c7:c8:28:07:1a:59:ce:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  131.221.68.0/22
                  138.117.124.0/22
                  138.121.220.0/22
                  138.122.236.0/22
                  143.255.112.0/22
                  160.238.220.0/22
                  168.121.52.0/22
                  168.227.44.0/22
                  168.228.128.0/22
                  168.232.116.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  170.247.52.0/22
                  177.66.64.0/21
                  177.67.0.0/21
                  177.70.128.0/20
                  177.75.192.0/19
                  177.87.144.0/21
                  177.130.192.0/19
                  179.191.128.0/19
                  186.219.144.0/20
                  186.233.72.0/21
                  187.18.128.0/17
                  187.108.96.0/20
                  187.110.208.0/20
                  189.45.64.0/18
                  189.50.144.0/20
                  191.6.80.0/21
                  200.94.240.0/22
                  201.149.120.0/22
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         11:96:33:a4:04:37:c6:af:af:75:78:92:07:0c:d6:58:2f:e0:
         1d:dd:72:b9:8a:c0:3a:64:02:21:4e:5d:6f:e1:5b:4d:8f:65:
         bf:e0:5d:3d:13:2d:2e:c3:82:cf:18:be:bc:1f:6d:cd:f9:0b:
         17:e0:71:ae:9d:f6:e9:a8:36:bd:e3:a7:ee:96:7e:3e:93:fd:
         40:ec:59:b2:e0:b8:61:7c:75:7f:76:39:7e:ad:ce:93:2a:6b:
         e1:98:f6:73:64:a2:8e:5a:a8:56:b8:05:88:bf:ae:ef:38:69:
         ef:b1:6a:28:60:cd:b7:37:82:f9:43:1d:e4:0f:ec:d8:78:ff:
         dd:ec:97:3f:50:b1:13:81:a5:35:42:ae:4f:56:97:76:98:34:
         de:9d:54:43:16:0b:f9:9b:9f:d0:98:c5:29:54:ca:c8:42:eb:
         e2:d4:23:5c:e4:3b:f4:dc:ab:a4:57:62:39:4e:da:14:b2:0d:
         71:ee:1c:48:ac:fa:e9:6f:8f:fe:70:9c:14:24:3c:b1:76:9f:
         18:ed:56:a7:53:9f:af:f7:fd:2d:cd:37:17:cf:52:e4:7b:e1:
         b7:23:0f:8e:13:dd:11:c3:48:50:f8:40:48:27:f5:d3:4f:85:
         16:d7:1f:15:90:f0:82:0d:e9:2d:83:22:aa:13:7f:00:17:e2:
         95:47:e0:f7
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUTRdMBoNCtwNyc5oVkeZvvkAdUPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMTQwMTM0NTVaFw0yNTEwMTMwMTM5NTVaMDMxMTAvBgNV
BAMTKDdDQUQ3RkJFQjYyRDQxQkVERUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxw+wN0EKYyN1F9og3zFdkyC6y
Uo8dOesbXRuOsKiM1TPjepbzLAmXH7QrQ4rfvDX32ahCPJUCR/KfrlCbBa3pEbVq
zWFSsyDJRHnyz8FIvP+MVeEP3v9UotudzlHPkm1mS65pJQjBO8HafnLidIxIAXuq
iXAWVyJoHREQHZQ8NpxDDuSp0SogB5Cb7ifsFo0lyMS+17fg0k9qm3eVed5b1xeb
E4hiahCtuE/RlUPBeXV4ak8pt2bjyRZ703X1xZNuwbuO6tALPQIlxA7VmXIe2tXL
vIbAKFQAUmqOhi026N7Yk3oce3/NPDjo4MdlPSBx0yGnTuCKx8goBxpZzoKfAgMB
AAGjggPyMIID7jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8rX++ti1Bvt64
IEmoNuRnYViG/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1o5
bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3REYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNa
OW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAvN0NB
RDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2MTU4ODZGQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHmBggrBgEFBQcB
BwEB/wSB1jCB0zCBwQQCAAEwgboDBAKDxEwDBAKD3UQDBAKKdXwDBAKKedwDBAKK
euwDBAKP/3ADBAKg7twDBAKoeTQDBAKo4ywDBAKo5IADBAKo6HQDBAKqAMwDBAKq
9WQDBAKq9zQDBAOxQkADBAOxQwADBASxRoADBAWxS8ADBAOxV5ADBAWxgsADBAWz
v4ADBAS625ADBAO66UgDBAe7EoADBAS7bGADBAS7btADBAa9LUADBAS9MpADBAO/
BlADBALIXvADBALJlXgwDQQCAAIwBwMFACgECIAwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICbm4wDQYJKoZIhvcNAQELBQADggEBABGWM6QEN8avr3V4kgcM1lgv4B3d
crmKwDpkAiFOXW/hW02PZb/gXT0TLS7Dgs8Yvrwfbc35Cxfgca6d9umoNr3jp+6W
fj6T/UDsWbLguGF8dX92OX6tzpMqa+GY9nNkoo5aqFa4BYi/ru84ae+xaihgzbc3
gvlDHeQP7Nh4/93slz9QsROBpTVCrk9Wl3aYNN6dVEMWC/mbn9CYxSlUyshC6+LU
I1zkO/Tcq6RXYjlO2hSyDXHuHEis+ulvj/5wnBQkPLF2nxjtVqdTn6/3/S3NNxfP
UuR74bcjD44T3RHDSFD4QEgn9dNPhRbXHxWQ8IIN6S2DIqoTfwAX4pVH4Pc=
-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:34 2024 by rpki-client on console-fra.rpki-client.org