Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
File:                     B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer (raw, json)
Hash identifier:          Dvh2TjXgp2Ry27ol0/dtLPjrnzz9lyVPuMOHlzSbQCA=
Subject key identifier:   B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BBDB0055ACD4098D95179CE97AFE48738A284CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 14:45:41 +0000
Certificate not after:    Mon 15 Dec 2025 14:50:41 +0000
Subordinate resources:    AS: 264525
                          IP: 45.71.80.0/22
                          IP: 128.201.208.0/22
                          IP: 138.0.52.0/22
                          IP: 138.122.240.0/22
                          IP: 2804:20fc::/32
Validation:               Failed, certificate revoked on Sat 21 Dec 2024 16:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:b0:05:5a:cd:40:98:d9:51:79:ce:97:af:e4:87:38:a2:84:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 14:45:41 2024 GMT
            Not After : Dec 15 14:50:41 2025 GMT
        Subject: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:8c:f7:11:ab:d3:0d:d9:63:40:6c:db:2d:
                    09:6c:11:12:f6:3b:c0:65:09:87:78:36:7b:31:ea:
                    79:f0:96:8d:68:4a:c8:37:69:4e:23:b3:c1:f2:be:
                    04:20:05:9a:1d:60:a3:10:1b:30:72:3b:d1:51:77:
                    44:36:46:7d:23:c2:13:4f:f0:71:6b:ad:a5:5a:2b:
                    3b:60:2d:09:3f:38:b8:a8:94:87:87:33:a0:b9:9e:
                    a6:fc:3a:cf:0c:7e:2b:13:75:56:54:0b:f1:1b:e1:
                    0d:d1:91:f1:b0:5f:08:66:4d:fe:7d:a9:86:52:c1:
                    7d:db:a1:f8:ac:31:9c:2e:2b:b7:25:fd:94:a3:cc:
                    40:c1:ac:8c:70:4a:af:e3:05:42:13:28:03:66:16:
                    0d:d0:87:10:1f:68:5d:ca:23:48:df:51:7b:4a:04:
                    1e:aa:f6:10:8e:39:c3:5b:32:a3:2e:20:8d:7d:12:
                    2e:de:8f:d2:6c:f4:5f:d0:4c:05:9f:bb:e7:1e:73:
                    02:c1:97:79:52:3e:99:a7:c8:f7:3a:d0:55:1a:c6:
                    45:38:f5:17:df:e0:a7:84:15:07:4c:46:3a:b5:a6:
                    66:d3:4a:a9:f6:90:5f:b7:59:19:be:ab:04:6d:df:
                    07:76:57:2f:6e:c3:cf:16:26:c7:ff:f8:a4:2d:33:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.80.0/22
                  128.201.208.0/22
                  138.0.52.0/22
                  138.122.240.0/22
                IPv6:
                  2804:20fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264525

    Signature Algorithm: sha256WithRSAEncryption
         d7:14:b5:eb:5f:54:d5:a1:52:0f:fd:a1:c7:ec:9d:8e:93:8e:
         4d:e5:0a:10:aa:14:6f:50:73:7f:d3:c9:d2:23:e9:68:b1:a2:
         7e:fd:fc:0f:25:36:be:eb:7c:2e:71:de:8c:b4:b3:f8:3a:0a:
         9f:3d:bd:b0:31:89:ec:f1:f5:73:31:c5:ad:20:45:bd:a9:2a:
         d4:9d:d6:41:5c:76:2d:06:ee:76:bc:5c:4c:13:c8:31:65:bc:
         b6:fc:ac:c4:e4:d6:c6:90:e8:6a:45:7d:d2:84:cd:a0:ad:a0:
         97:b8:e1:f3:a3:d3:46:ec:81:b0:d8:71:25:93:b0:01:75:db:
         bc:c7:1d:dd:5f:a7:0c:38:40:9f:e4:bc:13:89:86:3d:39:a7:
         75:bc:2d:2a:27:13:28:07:c6:47:f6:27:23:94:8d:53:2a:f0:
         fc:d3:dc:58:91:6d:18:cd:e5:0b:53:3e:58:d8:9e:63:b5:2b:
         3e:ee:2e:85:d8:e3:49:0e:29:95:ea:c6:69:33:07:93:02:1a:
         b0:e7:f2:e6:20:ff:ed:5f:71:af:4a:4d:b0:33:1b:7e:c7:61:
         35:e3:f5:d1:35:ad:0f:39:ba:01:41:b9:46:6f:4a:71:d5:a1:
         02:a7:8e:21:53:1e:1d:48:a0:9e:a3:1f:48:26:b8:2c:59:41:
         c6:f2:73:10
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUC72wBVrNQJjZUXnOl6/khziihMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTYxNDQ1NDFaFw0yNTEyMTUxNDUwNDFaMDMxMTAvBgNV
BAMTKEI5REI4RUFDQjlGNzhBNTY0QTU1OTQ1NEUzNTdFMUUzMTM0NEIxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA34z3EavTDdljQGzbLQlsERL2
O8BlCYd4Nnsx6nnwlo1oSsg3aU4js8HyvgQgBZodYKMQGzByO9FRd0Q2Rn0jwhNP
8HFrraVaKztgLQk/OLiolIeHM6C5nqb8Os8MfisTdVZUC/Eb4Q3RkfGwXwhmTf59
qYZSwX3bofisMZwuK7cl/ZSjzEDBrIxwSq/jBUITKANmFg3QhxAfaF3KI0jfUXtK
BB6q9hCOOcNbMqMuII19Ei7ej9Js9F/QTAWfu+cecwLBl3lSPpmnyPc60FUaxkU4
9Rff4KeEFQdMRjq1pmbTSqn2kF+3WRm+qwRt3wd2Vy9uw88WJsf/+KQtM7K7AgMB
AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5246sufeKVkpV
lFTjV+HjE0SxyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRS
d3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4d2kvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0
Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAvQjlE
QjhFQUNCOUY3OEE1NjRBNTU5NDU0RTM1N0UxRTMxMzQ0QjFDOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQCLUdQAwQCgMnQAwQCigA0AwQCinrwMA0EAgACMAcD
BQAoBCD8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJTTANBgkqhkiG9w0BAQsF
AAOCAQEA1xS1619U1aFSD/2hx+ydjpOOTeUKEKoUb1Bzf9PJ0iPpaLGifv38DyU2
vut8LnHejLSz+DoKnz29sDGJ7PH1czHFrSBFvakq1J3WQVx2LQbudrxcTBPIMWW8
tvysxOTWxpDoakV90oTNoK2gl7jh86PTRuyBsNhxJZOwAXXbvMcd3V+nDDhAn+S8
E4mGPTmndbwtKicTKAfGR/YnI5SNUyrw/NPcWJFtGM3lC1M+WNieY7UrPu4uhdjj
SQ4plerGaTMHkwIasOfy5iD/7V9xr0pNsDMbfsdhNeP10TWtDzm6AUG5Rm9KcdWh
AqeOIVMeHUignqMfSCa4LFlBxvJzEA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:39:14 2025 by rpki-client