Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B322D42ABD645759DF392C1454BDCEB01C3E1A83.cer
File:                     B322D42ABD645759DF392C1454BDCEB01C3E1A83.cer (raw, json)
Hash identifier:          1SApYWfRkVEpkSt/c52xbs+mE1nmlq7gPWpGp6D1Smg=
Subject key identifier:   B3:22:D4:2A:BD:64:57:59:DF:39:2C:14:54:BD:CE:B0:1C:3E:1A:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C750D794E75CF4613E80979970D47655A802545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/B322D42ABD645759DF392C1454BDCEB01C3E1A83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 19:39:12 +0000
Certificate not after:    Tue 03 Feb 2026 19:44:12 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32
Validation:               Failed, certificate revoked on Sun 23 Mar 2025 09:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:75:0d:79:4e:75:cf:46:13:e8:09:79:97:0d:47:65:5a:80:25:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  4 19:39:12 2025 GMT
            Not After : Feb  3 19:44:12 2026 GMT
        Subject: CN=B322D42ABD645759DF392C1454BDCEB01C3E1A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:ac:c8:ff:25:15:54:0d:df:16:18:35:13:
                    fc:e0:6d:a3:c8:a1:44:f8:85:5c:68:8d:09:c5:38:
                    5a:a2:e3:fb:f7:05:24:52:c2:da:09:e2:12:c3:28:
                    21:66:de:77:9d:d6:d3:b2:0d:36:6e:07:14:65:1e:
                    a0:2a:c4:03:6d:55:53:69:b8:46:04:cd:9a:19:ab:
                    f0:63:0f:15:45:e6:a5:35:7e:ef:89:68:51:9f:f8:
                    e7:78:99:79:fe:17:66:9a:a7:df:81:ea:78:23:0f:
                    21:56:f8:f4:cf:d1:e4:4b:f9:41:dd:95:59:ad:0b:
                    ac:4f:d9:6d:01:a6:26:65:42:2a:cc:7d:a7:78:a2:
                    61:cb:2b:61:7f:34:f4:af:7c:c8:36:e5:af:04:ec:
                    49:29:6a:59:be:a2:04:25:a6:ea:b2:eb:dc:27:2b:
                    7f:a1:4a:08:2d:90:ac:81:f8:a5:1f:56:25:41:e2:
                    d9:9f:bd:fb:dc:ae:84:9a:63:30:6f:9b:98:5e:4c:
                    2e:a4:13:f7:91:ae:4e:e2:91:a6:2a:92:b8:37:f5:
                    dd:ad:1c:de:e4:cb:34:7c:22:02:6b:ee:03:ef:c2:
                    1e:88:2d:25:8c:13:68:b6:ef:eb:03:b1:2c:67:6d:
                    65:2e:77:af:84:54:a6:fc:f0:fb:3e:dc:a0:72:2a:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:22:D4:2A:BD:64:57:59:DF:39:2C:14:54:BD:CE:B0:1C:3E:1A:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/B322D42ABD645759DF392C1454BDCEB01C3E1A83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         60:40:10:a2:12:31:43:4f:48:38:25:0d:17:4d:34:21:9f:74:
         9c:2e:74:a8:3d:30:34:2e:09:9a:19:6c:81:48:a1:61:a0:92:
         05:33:ce:3d:7a:c8:a0:ea:1b:f5:49:d7:8f:79:8a:5b:73:c7:
         69:c0:d4:d1:22:6e:ac:f7:e8:f3:44:50:c3:11:aa:41:8d:eb:
         a7:30:82:bc:32:37:7d:e6:4b:5d:cb:7e:e5:e1:3c:9a:bf:6e:
         35:85:8b:a7:8c:ec:29:54:ed:94:0b:16:c1:6c:d9:0e:30:d6:
         c9:89:53:33:36:73:6e:78:e9:c2:e3:6c:b9:c5:4d:8d:13:0a:
         8a:9e:2c:ad:09:9e:61:72:42:86:5d:fa:4b:b5:cb:ba:9b:80:
         2e:14:18:4e:65:06:b9:7a:02:f9:d4:5c:86:ed:9c:bd:6b:f3:
         3b:00:a5:5b:1c:d0:16:ed:b1:f7:40:71:42:b0:90:09:b7:e2:
         42:98:59:03:9e:70:39:51:3d:b4:13:da:4b:e4:8a:6b:de:c3:
         15:cb:22:ab:a5:5e:5d:a3:0f:3d:e3:6f:78:72:13:a3:0a:c9:
         69:50:ed:20:bd:a7:83:ce:87:bf:db:4e:f2:6e:79:3e:db:df:
         b8:b5:97:c2:a7:73:b1:3f:ad:48:08:f4:a8:04:9b:aa:48:93:
         9f:a8:14:76
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbHUNeU51z0YT6Al5lw1HZVqAJUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDQxOTM5MTJaFw0yNjAyMDMxOTQ0MTJaMDMxMTAvBgNV
BAMTKEIzMjJENDJBQkQ2NDU3NTlERjM5MkMxNDU0QkRDRUIwMUMzRTFBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBKzI/yUVVA3fFhg1E/zgbaPI
oUT4hVxojQnFOFqi4/v3BSRSwtoJ4hLDKCFm3ned1tOyDTZuBxRlHqAqxANtVVNp
uEYEzZoZq/BjDxVF5qU1fu+JaFGf+Od4mXn+F2aap9+B6ngjDyFW+PTP0eRL+UHd
lVmtC6xP2W0BpiZlQirMfad4omHLK2F/NPSvfMg25a8E7Ekpalm+ogQlpuqy69wn
K3+hSggtkKyB+KUfViVB4tmfvfvcroSaYzBvm5heTC6kE/eRrk7ikaYqkrg39d2t
HN7kyzR8IgJr7gPvwh6ILSWME2i27+sDsSxnbWUud6+EVKb88Ps+3KByKuTHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzItQqvWRXWd85
LBRUvc6wHD4agzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEgx
NzhDSjVWd2I2RFNxbXpnU0Z6aDcxNVQxczdlb0NVQk5Od0JLVEdaVWMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhI
MTc4Q0o1VndiNkRTcW16Z1NGemg3MTVUMXM3ZW9DVUJOTndCS1RHWlVjLzAvQjMy
MkQ0MkFCRDY0NTc1OURGMzkyQzE0NTRCRENFQjAxQzNFMUE4My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqMWQMA0EAgACMAcDBQAoBDToMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQNDzANBgkqhkiG9w0BAQsFAAOCAQEAYEAQohIxQ09IOCUN
F000IZ90nC50qD0wNC4JmhlsgUihYaCSBTPOPXrIoOob9UnXj3mKW3PHacDU0SJu
rPfo80RQwxGqQY3rpzCCvDI3feZLXct+5eE8mr9uNYWLp4zsKVTtlAsWwWzZDjDW
yYlTMzZzbnjpwuNsucVNjRMKip4srQmeYXJChl36S7XLupuALhQYTmUGuXoC+dRc
hu2cvWvzOwClWxzQFu2x90BxQrCQCbfiQphZA55wOVE9tBPaS+SKa97DFcsiq6Ve
XaMPPeNveHITowrJaVDtIL2ng86Hv9tO8m55PtvfuLWXwqdzsT+tSAj0qASbqkiT
n6gUdg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:13:25 2025 by rpki-client