Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/908579108D7A183795A3DE9DEB22E3F17A2ECACF.cer
File:                     908579108D7A183795A3DE9DEB22E3F17A2ECACF.cer (raw, json)
Hash identifier:          uQouTq2ufZ/vBxRSMX3sSkLv0Ktk4Qk7xCyZ8NPLtvQ=
Subject key identifier:   90:85:79:10:8D:7A:18:37:95:A3:DE:9D:EB:22:E3:F1:7A:2E:CA:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       536FEED6E52FEE467D744CE395F70E60D56666D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/908579108D7A183795A3DE9DEB22E3F17A2ECACF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Nov 2024 10:13:47 +0000
Certificate not after:    Wed 26 Nov 2025 10:18:47 +0000
Subordinate resources:    AS: 52679
                          IP: 177.67.216.0/21
                          IP: 2804:c1c::/32
Validation:               Failed, certificate revoked on Tue 28 Jan 2025 13:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6f:ee:d6:e5:2f:ee:46:7d:74:4c:e3:95:f7:0e:60:d5:66:66:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 27 10:13:47 2024 GMT
            Not After : Nov 26 10:18:47 2025 GMT
        Subject: CN=908579108D7A183795A3DE9DEB22E3F17A2ECACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:6a:27:ea:2f:08:4a:80:fd:81:a7:1e:ae:
                    22:36:0b:1e:c9:fd:48:f4:9b:36:bd:3e:91:28:34:
                    70:54:94:9d:0b:f8:a7:71:39:13:cb:66:68:81:c6:
                    af:2a:6e:4d:fc:d8:49:74:c7:f3:fb:cc:ff:04:ff:
                    9a:02:ac:99:bf:09:7e:be:b1:99:20:c3:45:dc:d2:
                    e8:5f:ff:00:da:95:34:d6:1c:df:c8:cf:6f:3c:85:
                    d8:92:50:1d:29:29:a4:ee:d5:b8:28:7a:63:00:7c:
                    ce:ce:07:02:72:35:c8:d1:6a:fd:09:5f:03:6f:2c:
                    f0:8e:31:e7:99:16:4a:1c:eb:fe:e2:56:2c:6f:59:
                    cb:57:f0:88:4f:1b:83:69:21:ff:55:2d:d7:9f:44:
                    c4:7b:b0:68:9b:51:62:30:5d:1a:00:a4:4e:cc:04:
                    b6:a5:8c:6d:b5:06:87:8c:f4:9d:88:d3:93:d4:b3:
                    f0:6e:90:c3:66:48:8c:c7:9f:0e:27:0d:a7:66:ba:
                    89:1e:91:26:ef:5a:7d:42:b3:09:e7:f1:fd:48:4f:
                    67:48:90:06:56:43:32:d9:cd:c3:9d:7a:96:38:d2:
                    5c:28:82:e9:cf:0f:c3:d2:6e:aa:5d:ca:af:73:d1:
                    5d:61:01:06:53:7d:81:ce:e0:3b:ef:e0:e4:6a:19:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:85:79:10:8D:7A:18:37:95:A3:DE:9D:EB:22:E3:F1:7A:2E:CA:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/908579108D7A183795A3DE9DEB22E3F17A2ECACF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.216.0/21
                IPv6:
                  2804:c1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52679

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:8c:dc:ca:db:f0:67:9f:51:dd:8e:30:f7:9e:39:42:fa:
         02:6b:34:ea:05:a6:cc:32:06:43:34:9f:a0:21:59:41:7f:ca:
         a6:0d:3f:95:c2:df:56:18:af:09:5a:16:a0:35:34:93:3b:09:
         19:ac:f5:56:b1:16:4a:ee:cf:b9:1e:0b:2b:d7:f0:b2:eb:42:
         b2:a0:fe:af:d0:07:0f:24:14:81:04:40:05:28:4a:92:b5:51:
         72:d2:b1:2d:b2:60:21:5b:6f:7a:e6:40:42:33:0d:e2:1f:f8:
         d8:5a:c8:95:80:2d:f9:5e:aa:91:fb:30:dc:f0:5f:8c:a3:9f:
         b5:2c:ce:de:26:54:ed:21:ad:2e:95:5c:06:12:5a:20:ab:b5:
         32:88:f2:aa:a9:b4:4c:76:94:9a:42:3b:e2:b7:8b:0e:71:fa:
         35:2c:91:0b:e7:d8:9c:6b:31:74:f9:01:46:5d:31:4d:78:cc:
         d5:06:af:9f:a4:e3:02:33:0d:22:16:1f:d3:9a:d3:0c:a8:98:
         57:1f:c0:f8:ac:fd:cc:b6:e2:7e:37:36:f5:4f:aa:38:36:3e:
         08:02:d0:34:d9:b6:45:01:a4:40:bc:df:6a:5a:84:7c:b0:5f:
         f4:0a:6d:c8:c2:b3:43:c3:3a:84:85:13:07:4c:86:2c:6e:94:
         78:4e:36:21
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUU2/u1uUv7kZ9dEzjlfcOYNVmZtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjcxMDEzNDdaFw0yNTExMjYxMDE4NDdaMDMxMTAvBgNV
BAMTKDkwODU3OTEwOEQ3QTE4Mzc5NUEzREU5REVCMjJFM0YxN0EyRUNBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnWon6i8ISoD9gaceriI2Cx7J
/Uj0mza9PpEoNHBUlJ0L+KdxORPLZmiBxq8qbk382El0x/P7zP8E/5oCrJm/CX6+
sZkgw0Xc0uhf/wDalTTWHN/Iz288hdiSUB0pKaTu1bgoemMAfM7OBwJyNcjRav0J
XwNvLPCOMeeZFkoc6/7iVixvWctX8IhPG4NpIf9VLdefRMR7sGibUWIwXRoApE7M
BLaljG21BoeM9J2I05PUs/BukMNmSIzHnw4nDadmuokekSbvWn1Cswnn8f1IT2dI
kAZWQzLZzcOdepY40lwogunPD8PSbqpdyq9z0V1hAQZTfYHO4Dvv4ORqGb6ZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQhXkQjXoYN5Wj
3p3rIuPxei7KzzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG1p
N1BSR3U1bkJtNXk0dFN6ZHdzSm5mc2M2Tmt4cmNHdTZMdHhlU1h4bzUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht
aTdQUkd1NW5CbTV5NHRTemR3c0puZnNjNk5reHJjR3U2THR4ZVNYeG81LzAvOTA4
NTc5MTA4RDdBMTgzNzk1QTNERTlERUIyMkUzRjE3QTJFQ0FDRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsUPYMA0EAgACMAcDBQAoBAwcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDNxzANBgkqhkiG9w0BAQsFAAOCAQEAMbaM3Mrb8GefUd2O
MPeeOUL6Ams06gWmzDIGQzSfoCFZQX/Kpg0/lcLfVhivCVoWoDU0kzsJGaz1VrEW
Su7PuR4LK9fwsutCsqD+r9AHDyQUgQRABShKkrVRctKxLbJgIVtveuZAQjMN4h/4
2FrIlYAt+V6qkfsw3PBfjKOftSzO3iZU7SGtLpVcBhJaIKu1Mojyqqm0THaUmkI7
4reLDnH6NSyRC+fYnGsxdPkBRl0xTXjM1Qavn6TjAjMNIhYf05rTDKiYVx/A+Kz9
zLbifjc29U+qODY+CALQNNm2RQGkQLzfalqEfLBf9AptyMKzQ8M6hIUTB0yGLG6U
eE42IQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:08:57 2025 by rpki-client