Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
File:                     8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer (raw, json)
Hash identifier:          DOjuXZE33xCY7FhULEwijcr/0gCYiqNlt7itTw0Trnw=
Subject key identifier:   8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       526D1F9768EE52F8BAB0CF145441CF18AC263F68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2024 12:56:05 +0000
Certificate not after:    Tue 09 Dec 2025 13:01:05 +0000
Subordinate resources:    AS: 270819
                          IP: 186.195.252.0/22
                          IP: 2804:71e8::/32
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 06:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6d:1f:97:68:ee:52:f8:ba:b0:cf:14:54:41:cf:18:ac:26:3f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 12:56:05 2024 GMT
            Not After : Dec  9 13:01:05 2025 GMT
        Subject: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:44:5b:77:c6:61:e2:12:09:d3:ff:93:81:
                    59:d9:06:26:70:f9:21:cf:36:93:dc:49:70:2a:41:
                    39:49:d3:6b:ec:1b:ec:18:33:ea:ba:ca:08:1d:89:
                    bb:9b:d9:8d:91:e0:dd:fb:7f:74:e9:48:ae:e6:57:
                    a6:f4:35:34:e1:ee:80:91:62:8e:95:f0:cd:10:d9:
                    6c:9d:64:17:28:7d:05:10:5d:b6:cf:73:a4:7a:16:
                    54:ce:a4:68:5e:af:e6:b3:98:ac:68:5c:db:8b:a6:
                    a0:c3:f5:2e:55:be:14:bd:74:6a:af:3f:ea:f5:b1:
                    7a:46:7f:2b:9b:43:5a:fe:2f:f2:04:4a:4f:76:16:
                    34:87:c2:11:d6:0e:ed:f8:40:20:36:78:41:b7:5a:
                    41:46:7c:61:80:29:00:a1:4c:b9:6e:53:64:7b:41:
                    2f:40:96:cd:9d:d7:4e:22:2a:1d:41:d5:26:1d:89:
                    5f:99:a9:42:8f:06:55:1e:41:55:8d:33:f5:c9:38:
                    82:62:ff:ac:95:c0:6c:82:b8:cb:f4:9a:41:63:95:
                    f5:b7:1d:cc:f3:cd:b2:ef:45:97:bf:06:a2:3d:ac:
                    3b:86:cd:62:e4:f0:78:6f:f9:38:9a:64:f3:83:4b:
                    95:e1:df:6d:3c:45:e0:4d:07:43:96:60:d1:69:22:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.252.0/22
                IPv6:
                  2804:71e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270819

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:35:82:89:85:36:87:a9:9a:66:2d:c8:92:95:15:bf:59:
         73:37:83:8a:5b:7a:df:80:09:60:d0:59:37:d2:71:10:82:5a:
         7b:98:bc:8c:41:30:20:c1:62:49:3e:2d:a2:43:ca:6f:4c:fc:
         e0:b6:ab:bf:2d:d3:59:09:6a:45:09:68:ff:08:d8:28:ec:a5:
         35:d9:e1:70:d7:a6:46:fd:2c:a3:b7:8f:6d:95:60:7d:cd:b8:
         97:58:3d:89:79:bc:05:64:dc:b4:76:30:42:4e:1e:b4:e7:e9:
         02:ea:7e:54:25:2c:66:d4:7d:8b:4f:f1:1b:00:bd:34:64:dd:
         57:a7:15:ed:fb:e9:3b:d1:86:38:67:21:03:47:f2:b7:4d:05:
         b0:1e:ac:f6:ea:8f:a7:ae:cb:3a:cf:6d:5b:68:2e:d0:28:a7:
         d3:56:3b:69:e7:b2:23:47:be:c4:1c:92:08:91:a7:37:ea:98:
         72:58:e8:72:0b:7c:36:75:95:ef:c5:6c:6f:3a:cc:af:f3:52:
         18:5f:d7:53:77:16:a2:15:0a:a3:09:8b:7d:e2:47:87:1f:fb:
         9d:75:21:7a:44:b7:5f:1b:d7:2c:6f:c1:cb:90:23:e5:ee:a3:
         ba:9e:ed:b4:a0:bf:1d:6f:56:ae:ec:81:8d:76:6f:0e:b3:7a:
         4f:22:b3:88
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUm0fl2juUvi6sM8UVEHPGKwmP2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTAxMjU2MDVaFw0yNTEyMDkxMzAxMDVaMDMxMTAvBgNV
BAMTKDhDMTJCNDU2MTdEMkUyQzE0MEFGRUY4QTc2RDE4MDQ2RjA4NEIxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dURbd8Zh4hIJ0/+TgVnZBiZw
+SHPNpPcSXAqQTlJ02vsG+wYM+q6yggdibub2Y2R4N37f3TpSK7mV6b0NTTh7oCR
Yo6V8M0Q2WydZBcofQUQXbbPc6R6FlTOpGher+azmKxoXNuLpqDD9S5VvhS9dGqv
P+r1sXpGfyubQ1r+L/IESk92FjSHwhHWDu34QCA2eEG3WkFGfGGAKQChTLluU2R7
QS9Als2d104iKh1B1SYdiV+ZqUKPBlUeQVWNM/XJOIJi/6yVwGyCuMv0mkFjlfW3
HczzzbLvRZe/BqI9rDuGzWLk8Hhv+TiaZPODS5Xh3208ReBNB0OWYNFpIiNDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMErRWF9LiwUCv
74p20YBG8ISxxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVNp
VlBvRE14ZWFNTEFmZms1NDNXUjlqWlhUdlp1aEJKZXRxa0RBamd4clAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlT
aVZQb0RNeGVhTUxBZmZrNTQzV1I5alpYVHZadWhCSmV0cWtEQWpneHJQLzAvOEMx
MkI0NTYxN0QyRTJDMTQwQUZFRjhBNzZEMTgwNDZGMDg0QjFDNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCusP8MA0EAgACMAcDBQAoBHHoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQh4zANBgkqhkiG9w0BAQsFAAOCAQEAX8k1gomFNoepmmYt
yJKVFb9ZczeDilt634AJYNBZN9JxEIJae5i8jEEwIMFiST4tokPKb0z84Larvy3T
WQlqRQlo/wjYKOylNdnhcNemRv0so7ePbZVgfc24l1g9iXm8BWTctHYwQk4etOfp
Aup+VCUsZtR9i0/xGwC9NGTdV6cV7fvpO9GGOGchA0fyt00FsB6s9uqPp67LOs9t
W2gu0Cin01Y7aeeyI0e+xBySCJGnN+qYcljocgt8NnWV78VsbzrMr/NSGF/XU3cW
ohUKowmLfeJHhx/7nXUhekS3XxvXLG/By5Aj5e6jup7ttKC/HW9WruyBjXZvDrN6
TyKziA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:18 2025 by rpki-client