Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
File:                     A58717AA812972E28B6CC3B85ADD1610222992E2.cer (raw, json)
Hash identifier:          urdPClGutPESmfBAgKpc/fZ8t3KQpHwNQTU1s2+u6VQ=
Subject key identifier:   A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       331E579769A993C05E417A1502C3BD9DACFF55AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 11:20:07 +0000
Certificate not after:    Fri 06 Mar 2026 11:25:07 +0000
Subordinate resources:    AS: 268929
                          IP: 45.176.40.0/22
                          IP: 2804:5cc4::/32
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 16:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:57:97:69:a9:93:c0:5e:41:7a:15:02:c3:bd:9d:ac:ff:55:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 11:20:07 2025 GMT
            Not After : Mar  6 11:25:07 2026 GMT
        Subject: CN=A58717AA812972E28B6CC3B85ADD1610222992E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:e7:d5:84:a1:89:3e:6e:b6:6b:d3:8f:26:
                    46:bc:4f:3a:b6:72:4a:cf:c5:f1:02:2b:ee:a5:f7:
                    8a:b7:9e:09:e4:82:69:db:d3:7d:71:cb:94:a2:4f:
                    39:ef:43:64:0e:b9:89:d4:5d:55:a3:49:32:92:5c:
                    20:3d:8d:0f:21:39:e4:07:26:b7:b0:af:f7:20:18:
                    39:b7:86:af:55:51:a3:bd:11:fe:06:73:5a:e6:a2:
                    db:09:7c:da:85:e2:5b:56:cd:fd:dc:6e:f4:5a:61:
                    36:ca:45:17:a8:ba:46:3a:a6:60:77:80:88:6c:0b:
                    0e:be:e8:84:e2:28:fc:98:db:ec:9e:53:28:a4:1e:
                    9c:88:ba:32:82:d6:e2:35:3e:84:60:a3:8e:42:0c:
                    37:1e:af:ce:50:06:e8:f5:ca:89:28:28:6c:14:d0:
                    80:f2:5b:c8:cb:82:88:20:a7:41:69:88:62:62:99:
                    a6:4f:19:1f:a6:e2:41:1b:61:9a:2f:2c:50:65:82:
                    36:8e:74:df:4b:4f:f8:12:f7:89:4e:da:1d:d9:58:
                    d5:b4:0c:a2:c2:bf:a5:5e:8e:82:3d:6a:0d:b0:8a:
                    4b:ff:b2:ec:f9:fe:4a:6e:85:1a:95:b9:26:a1:76:
                    d1:56:36:d8:86:70:f5:99:9a:aa:91:e5:bf:f8:26:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.40.0/22
                IPv6:
                  2804:5cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268929

    Signature Algorithm: sha256WithRSAEncryption
         3f:03:2d:4f:e2:be:42:ee:73:c1:cf:d2:05:2c:e9:df:25:32:
         2b:b8:7a:4e:49:7c:6e:6d:b4:88:ee:b6:bd:b7:22:5e:e7:35:
         9f:62:02:d2:57:9f:86:f4:e7:6f:95:d7:59:b3:5c:3d:ac:dc:
         02:30:57:02:ef:81:7f:51:ce:fa:e5:f4:c5:1d:12:bd:2c:5c:
         f6:7f:2e:40:5d:ce:b2:5e:9a:ef:48:40:03:be:f7:37:99:0f:
         4b:38:7e:68:df:83:57:c8:67:fd:01:bf:8c:6d:31:3d:40:2c:
         1a:96:e5:54:a3:b8:0f:96:0b:99:ba:35:f1:b8:31:cd:0e:9d:
         b4:c3:7a:39:1a:18:b6:fb:a9:70:94:3e:e1:54:63:71:3d:06:
         50:02:b0:c2:f4:fe:28:e0:81:3a:99:51:2b:c1:61:a2:cd:1a:
         6c:3d:53:ac:73:f6:21:8a:b5:d5:0f:8b:cf:a3:92:46:ab:7f:
         c1:7c:64:5e:c4:d9:ba:2e:fd:db:55:58:eb:d3:3f:f6:63:30:
         f8:1d:4a:12:55:02:4a:91:b4:ca:ec:80:66:2e:ea:fe:f6:a4:
         5b:c2:b2:e1:51:34:ca:42:11:4e:7c:01:ef:43:55:ee:18:30:
         ac:3b:05:c8:b5:eb:38:d8:ee:00:a2:36:5e:e8:86:a2:62:41:
         48:cc:87:fa
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUMx5Xl2mpk8BeQXoVAsO9naz/Va8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcxMTIwMDdaFw0yNjAzMDYxMTI1MDdaMDMxMTAvBgNV
BAMTKEE1ODcxN0FBODEyOTcyRTI4QjZDQzNCODVBREQxNjEwMjIyOTkyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwufVhKGJPm62a9OPJka8Tzq2
ckrPxfECK+6l94q3ngnkgmnb031xy5SiTznvQ2QOuYnUXVWjSTKSXCA9jQ8hOeQH
Jrewr/cgGDm3hq9VUaO9Ef4Gc1rmotsJfNqF4ltWzf3cbvRaYTbKRReoukY6pmB3
gIhsCw6+6ITiKPyY2+yeUyikHpyIujKC1uI1PoRgo45CDDcer85QBuj1yokoKGwU
0IDyW8jLgoggp0FpiGJimaZPGR+m4kEbYZovLFBlgjaOdN9LT/gS94lO2h3ZWNW0
DKLCv6VejoI9ag2wikv/suz5/kpuhRqVuSahdtFWNtiGcPWZmqqR5b/4Jgr3AgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlhxeqgSly4ots
w7ha3RYQIimS4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS0s1
WGtuV29Xc2RyVmVpd0NaR3ppbkZxNkJOVzF2S05Ga29TOW5vWk1kaC8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS0s1
WGtuV29Xc2RyVmVpd0NaR3ppbkZxNkJOVzF2S05Ga29TOW5vWk1kaC8xL0E1ODcx
N0FBODEyOTcyRTI4QjZDQzNCODVBREQxNjEwMjIyOTkyRTIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi2wKDANBAIAAjAHAwUAKARcxDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGoEwDQYJKoZIhvcNAQELBQADggEBAD8DLU/ivkLuc8HP0gUs
6d8lMiu4ek5JfG5ttIjutr23Il7nNZ9iAtJXn4b052+V11mzXD2s3AIwVwLvgX9R
zvrl9MUdEr0sXPZ/LkBdzrJemu9IQAO+9zeZD0s4fmjfg1fIZ/0Bv4xtMT1ALBqW
5VSjuA+WC5m6NfG4Mc0OnbTDejkaGLb7qXCUPuFUY3E9BlACsML0/ijggTqZUSvB
YaLNGmw9U6xz9iGKtdUPi8+jkkarf8F8ZF7E2bou/dtVWOvTP/ZjMPgdShJVAkqR
tMrsgGYu6v72pFvCsuFRNMpCEU58Ae9DVe4YMKw7Bci16zjY7gCiNl7ohqJiQUjM
h/o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:40 2025 by rpki-client