Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.cer
File:                     B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.cer (raw, json)
Hash identifier:          T5u0agVpFjgcVEv1P6mXwTLKzSCuk/REE6NbwH/Se+I=
Subject key identifier:   B5:AF:99:93:AB:3F:76:FA:F2:71:D8:EF:DA:2E:E9:E6:91:E3:85:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B8BB8F1920FD3807E48CFCA74FE458C10CB357C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Feb 2025 16:38:26 +0000
Certificate not after:    Mon 23 Feb 2026 16:43:26 +0000
Subordinate resources:    AS: 269632
                          IP: 45.190.28.0/22
                          IP: 2804:6780::/32
Validation:               Failed, certificate revoked on Sun 30 Mar 2025 02:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8b:b8:f1:92:0f:d3:80:7e:48:cf:ca:74:fe:45:8c:10:cb:35:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 24 16:38:26 2025 GMT
            Not After : Feb 23 16:43:26 2026 GMT
        Subject: CN=B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:6d:96:51:67:e9:a5:bd:71:1b:74:8f:46:
                    7c:a5:44:ef:b5:e1:d5:6c:bc:1c:42:ae:03:a3:f1:
                    c9:b9:5c:a0:39:25:09:e3:be:3a:e8:64:4a:7e:0f:
                    f5:6e:13:9c:42:a1:41:e5:09:99:26:e4:91:cb:3d:
                    55:6e:7f:dc:b4:36:2d:89:04:2b:7a:e3:22:66:64:
                    a2:bb:77:da:a0:e9:47:83:7a:24:b8:5c:1b:b7:de:
                    61:92:84:8e:5f:bc:99:c6:79:24:94:e3:38:36:f6:
                    ad:7b:f0:0d:26:1b:89:05:7c:f2:6d:67:10:8c:0a:
                    64:fc:27:3c:a3:b8:28:3b:d8:9b:ee:22:af:44:cc:
                    60:a5:46:83:b2:d0:d6:7a:e5:84:9d:27:95:4c:3a:
                    8c:7a:bf:63:8d:a1:a3:44:74:01:b6:d3:d5:ae:6f:
                    b3:26:e7:5b:ec:b4:1c:49:a7:f9:97:c9:a4:7b:50:
                    cd:77:cb:ea:ff:91:9a:13:90:d2:0c:8a:fe:7f:e9:
                    c2:66:8f:ee:b2:ed:d2:c5:ea:50:8d:46:72:c8:cc:
                    6b:9f:64:f4:1c:5a:35:b9:71:d0:97:2c:86:c8:27:
                    05:e5:50:35:c5:a7:6d:b0:80:ca:a6:8a:cc:fb:6f:
                    7b:62:a9:63:5b:4f:b1:9a:09:c7:2e:6c:fb:ba:47:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:AF:99:93:AB:3F:76:FA:F2:71:D8:EF:DA:2E:E9:E6:91:E3:85:2D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.28.0/22
                IPv6:
                  2804:6780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269632

    Signature Algorithm: sha256WithRSAEncryption
         b6:2e:56:97:81:7e:e1:88:5b:2f:25:ed:15:8d:99:68:63:73:
         e3:4b:d2:db:c4:67:f5:46:e0:ee:d9:41:01:ac:d5:39:c2:be:
         13:14:bb:6f:43:c5:7e:c1:d9:f4:03:81:10:5a:aa:98:64:d0:
         75:5d:c6:23:91:11:4a:cd:a3:f6:48:2f:ce:d4:f6:30:c6:1e:
         72:ae:c1:67:55:d9:6f:b1:a3:2b:6d:19:1a:53:a4:35:96:e9:
         c7:0c:04:f7:df:31:a5:b6:91:ef:2c:b1:63:d7:e4:02:e7:9c:
         86:62:d1:ad:0e:ad:50:3e:7a:5d:72:4a:d1:a9:f4:31:f9:30:
         13:c8:f8:fb:09:ec:b3:8b:a4:2a:5b:75:32:16:50:20:c9:af:
         73:92:1c:b0:ef:c0:ce:bb:06:4c:1c:1b:ff:4d:6d:1e:f8:2a:
         af:4b:f0:7b:12:f9:22:e9:6c:3f:2b:94:13:b7:1d:3f:85:6a:
         49:76:88:99:d9:11:37:93:6d:9a:f5:92:21:3a:60:20:92:be:
         ef:d7:8f:1a:40:3b:9a:aa:ce:66:07:7a:93:f0:1a:11:89:5d:
         34:8f:79:ff:d0:a0:81:0f:7e:66:31:7a:cd:3d:c0:a6:83:32:
         04:01:48:f8:fc:03:6f:8d:ba:90:9b:d1:cc:88:3c:98:cd:04:
         8a:2f:f0:db
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUS4u48ZIP04B+SM/KdP5FjBDLNXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMjQxNjM4MjZaFw0yNjAyMjMxNjQzMjZaMDMxMTAvBgNV
BAMTKEI1QUY5OTkzQUIzRjc2RkFGMjcxRDhFRkRBMkVFOUU2OTFFMzg1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRm2WUWfppb1xG3SPRnylRO+1
4dVsvBxCrgOj8cm5XKA5JQnjvjroZEp+D/VuE5xCoUHlCZkm5JHLPVVuf9y0Ni2J
BCt64yJmZKK7d9qg6UeDeiS4XBu33mGShI5fvJnGeSSU4zg29q178A0mG4kFfPJt
ZxCMCmT8JzyjuCg72JvuIq9EzGClRoOy0NZ65YSdJ5VMOox6v2ONoaNEdAG209Wu
b7Mm51vstBxJp/mXyaR7UM13y+r/kZoTkNIMiv5/6cJmj+6y7dLF6lCNRnLIzGuf
ZPQcWjW5cdCXLIbIJwXlUDXFp22wgMqmisz7b3tiqWNbT7GaCccubPu6R4fjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1r5mTqz92+vJx
2O/aLunmkeOFLTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU13
MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVN
dzJmYmd6Z3c2aEZNd2pYYmlEU1F5cVRRZk00d25NWXcyQjlBNTRMNUw4LzAvQjVB
Rjk5OTNBQjNGNzZGQUYyNzFEOEVGREEyRUU5RTY5MUUzODUyRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb4cMA0EAgACMAcDBQAoBGeAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdQDANBgkqhkiG9w0BAQsFAAOCAQEAti5Wl4F+4YhbLyXt
FY2ZaGNz40vS28Rn9Ubg7tlBAazVOcK+ExS7b0PFfsHZ9AOBEFqqmGTQdV3GI5ER
Ss2j9kgvztT2MMYecq7BZ1XZb7GjK20ZGlOkNZbpxwwE998xpbaR7yyxY9fkAuec
hmLRrQ6tUD56XXJK0an0MfkwE8j4+wnss4ukKlt1MhZQIMmvc5IcsO/AzrsGTBwb
/01tHvgqr0vwexL5IulsPyuUE7cdP4VqSXaImdkRN5NtmvWSITpgIJK+79ePGkA7
mqrOZgd6k/AaEYldNI95/9CggQ9+ZjF6zT3ApoMyBAFI+PwDb426kJvRzIg8mM0E
ii/w2w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:51 2025 by rpki-client