Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
File:                     B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer (raw, json)
Hash identifier:          ZJn3SNaqPjuRmUdxLuJ0X3bCDIcaw0SFAsOUGBC/bKU=
Subject key identifier:   B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40A30D46BE79DB4FF1D63A0813F8DBDA486830CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 05:00:02 +0000
Certificate not after:    Fri 06 Mar 2026 05:05:02 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 18:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a3:0d:46:be:79:db:4f:f1:d6:3a:08:13:f8:db:da:48:68:30:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 05:00:02 2025 GMT
            Not After : Mar  6 05:05:02 2026 GMT
        Subject: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:f1:3e:80:f9:12:3e:b7:74:58:bc:d2:37:
                    56:14:5a:b1:a9:22:d5:ab:b3:3c:cf:4b:9e:5d:2c:
                    84:a0:38:8d:08:00:f1:f5:05:f4:26:81:84:0e:93:
                    91:c2:51:c8:dd:10:a3:64:60:97:61:62:54:af:11:
                    94:7e:23:f8:a2:6d:69:86:f4:65:64:72:3d:12:27:
                    80:be:d7:ec:29:96:48:72:43:98:ac:ef:49:39:80:
                    94:9f:e1:a8:4f:00:fe:f3:96:07:98:0c:c8:28:a6:
                    c4:67:f2:62:43:0c:90:e3:aa:c1:ba:3e:97:c2:3c:
                    3c:24:f9:97:3e:5d:0e:1b:85:cf:d4:04:e9:b1:80:
                    6a:01:b3:a7:c7:87:e8:90:55:93:06:e5:81:ec:e8:
                    d5:7e:33:05:bf:73:cf:21:98:f9:69:65:23:81:47:
                    a4:db:06:27:8d:63:f3:d6:e5:32:b6:bb:cb:09:9b:
                    1b:37:75:ac:9f:df:62:e9:7b:5c:a1:d3:18:75:f5:
                    32:98:57:17:9c:bc:a4:6d:e9:1e:36:c1:ce:4a:40:
                    a8:50:61:05:64:b9:31:c9:03:4c:d8:66:5e:2c:04:
                    35:29:de:03:08:fd:d8:41:55:04:c3:4a:ec:c4:25:
                    53:80:2a:8f:6f:4e:96:f5:e3:cf:fe:d1:67:ef:0a:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:4d:c9:df:3f:51:df:c1:18:15:ec:b2:a1:d7:ee:78:69:
         b0:69:32:19:b5:4f:2d:85:cd:eb:fb:67:3e:9d:b0:bd:5d:de:
         4d:54:64:30:59:f8:fe:92:de:b6:f1:9d:18:ac:d1:93:04:39:
         36:97:2a:65:7b:7b:f8:2a:2d:6e:ea:91:ea:4f:51:30:d1:3f:
         e9:8e:f4:0d:2f:a4:ec:d2:c7:89:ad:07:bb:8e:74:0f:86:ca:
         48:53:60:a1:8c:6b:17:c3:fb:fe:00:9d:0c:51:70:23:75:6e:
         e4:c9:ce:9c:cc:e5:86:5e:4c:f4:41:79:e9:a7:16:eb:e4:da:
         21:10:3f:83:2b:be:ce:f9:1c:6f:4e:93:56:fb:f5:7d:03:fa:
         a8:3c:63:e9:60:c9:68:5b:ce:22:06:69:80:13:a5:1f:0b:c6:
         21:d3:19:b5:58:9d:fd:47:9d:ed:20:49:76:71:d4:24:0b:33:
         1d:6f:74:31:e2:5a:df:b2:be:26:eb:91:0c:fd:33:9f:9f:f4:
         82:4b:5d:55:44:d7:c5:8f:6c:da:41:d2:dd:6e:90:8f:b6:55:
         7d:7e:66:5c:ae:76:bf:c7:1e:7d:5c:16:97:c9:de:9e:2c:6a:
         a2:6b:10:86:d1:14:ea:f4:d8:8e:ed:fa:9f:c2:23:71:39:3d:
         20:20:b5:47
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQKMNRr5520/x1joIE/jb2khoMMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwNTAwMDJaFw0yNjAzMDYwNTA1MDJaMDMxMTAvBgNV
BAMTKEIzOUJCOUFBRDgzRUJGREY3NDZFOUI4NzNDMEUxRkZBRkQwNzFFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeyPE+gPkSPrd0WLzSN1YUWrGp
ItWrszzPS55dLISgOI0IAPH1BfQmgYQOk5HCUcjdEKNkYJdhYlSvEZR+I/iibWmG
9GVkcj0SJ4C+1+wplkhyQ5is70k5gJSf4ahPAP7zlgeYDMgopsRn8mJDDJDjqsG6
PpfCPDwk+Zc+XQ4bhc/UBOmxgGoBs6fHh+iQVZMG5YHs6NV+MwW/c88hmPlpZSOB
R6TbBieNY/PW5TK2u8sJmxs3dayf32Lpe1yh0xh19TKYVxecvKRt6R42wc5KQKhQ
YQVkuTHJA0zYZl4sBDUp3gMI/dhBVQTDSuzEJVOAKo9vTpb148/+0WfvCs+lAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzm7mq2D6/33Ru
m4c8Dh/6/QceMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1l1
cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1lS3QvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdZ
dXBMQXB5RThwMWphQmFNUlZzVFdxcG9UZ1FKdGM0VVNUV2g2VmVtZUt0LzEvQjM5
QkI5QUFEODNFQkZERjc0NkU5Qjg3M0MwRTFGRkFGRDA3MUUzMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbAEMA0EAgACMAcDBQAoBFy0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQafTANBgkqhkiG9w0BAQsFAAOCAQEAqdpNyd8/Ud/BGBXs
sqHX7nhpsGkyGbVPLYXN6/tnPp2wvV3eTVRkMFn4/pLetvGdGKzRkwQ5NpcqZXt7
+CotbuqR6k9RMNE/6Y70DS+k7NLHia0Hu450D4bKSFNgoYxrF8P7/gCdDFFwI3Vu
5MnOnMzlhl5M9EF56acW6+TaIRA/gyu+zvkcb06TVvv1fQP6qDxj6WDJaFvOIgZp
gBOlHwvGIdMZtVid/Ued7SBJdnHUJAszHW90MeJa37K+JuuRDP0zn5/0gktdVUTX
xY9s2kHS3W6Qj7ZVfX5mXK52v8cefVwWl8nenixqomsQhtEU6vTYju36n8IjcTk9
ICC1Rw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:55:36 2025 by rpki-client