Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
File:                     C0103B8E7179240C3C384BF92594051EBD742508.cer (raw, json)
Hash identifier:          BBCGTjlayrRYdTap0JibytAtcgHveR1pK8eb7B+Mhy8=
Subject key identifier:   C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C76D6A62D186E78A9A7C20E2CC5709944FA3EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 18:32:08 +0000
Certificate not after:    Mon 15 Dec 2025 18:37:08 +0000
Subordinate resources:    AS: 264373
                          IP: 131.161.76.0/22
                          IP: 2804:1d7c::/32
Validation:               Failed, certificate revoked on Fri 28 Mar 2025 16:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:76:d6:a6:2d:18:6e:78:a9:a7:c2:0e:2c:c5:70:99:44:fa:3e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 18:32:08 2024 GMT
            Not After : Dec 15 18:37:08 2025 GMT
        Subject: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:14:0e:87:b5:0b:43:a4:89:2b:1e:5e:04:
                    39:9f:a4:b7:b8:27:b6:cf:db:3d:5e:da:df:6c:12:
                    20:81:ef:89:29:07:bf:82:ed:71:62:7b:15:96:a3:
                    b9:af:38:60:25:d9:be:04:20:8d:94:3d:b6:cd:d5:
                    1f:a7:04:01:c0:bc:5e:81:15:d0:a8:60:ae:75:5a:
                    87:fd:69:f6:43:a5:fe:51:fa:00:09:f0:35:25:08:
                    61:dd:93:4f:0a:02:28:5c:d7:84:bf:ac:dc:79:c1:
                    40:b2:70:1f:e8:f1:85:c0:a7:a9:07:4d:62:9c:90:
                    73:81:9e:69:6c:38:fd:e1:8e:4a:5a:7d:cd:3d:e7:
                    05:27:93:40:ec:ac:e1:fc:7b:88:43:3f:69:09:59:
                    86:eb:6e:e9:87:44:8c:4d:09:fa:e5:74:73:79:fb:
                    4c:7d:5d:4b:aa:ef:78:0c:b6:07:a7:1a:a8:0e:90:
                    fe:9e:90:5c:86:60:b5:43:94:5d:28:21:08:b0:62:
                    c2:37:7a:fd:d3:1f:da:2f:84:ad:c8:8b:bd:04:45:
                    31:0f:a2:58:0a:b2:3c:2d:20:81:3b:bd:04:b3:d5:
                    b2:18:fb:c9:2e:cd:be:cd:94:09:87:41:39:43:4f:
                    df:ac:4e:53:3e:09:24:9f:72:49:77:88:d0:67:25:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.76.0/22
                IPv6:
                  2804:1d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264373

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:24:7a:50:b2:a9:33:50:24:f0:ed:cf:d9:f6:e6:e8:c5:
         43:90:ef:58:b7:d7:ad:86:26:51:14:ba:45:b7:31:57:0b:8d:
         a2:43:33:00:70:36:3e:41:4e:09:6a:8d:bf:25:91:14:7a:9c:
         26:bd:47:83:24:b5:d4:2b:22:3f:ea:8f:18:8e:3a:0a:a6:e7:
         0b:8d:65:49:56:c0:16:4d:9a:1c:fc:b7:2e:91:c5:e0:e6:ee:
         c6:17:aa:c3:b6:aa:f5:46:12:6b:5e:26:b3:1e:87:bc:b1:d8:
         d1:a1:a1:80:f4:41:5b:b2:69:a6:42:fd:c9:aa:c4:c5:73:8a:
         95:2c:56:7e:47:0c:e7:11:d1:50:db:2c:b5:2e:78:34:96:43:
         86:a3:23:71:d4:c0:ad:25:2b:71:c3:9e:b1:4d:00:ed:b1:a2:
         50:99:66:0f:a0:63:7c:ef:50:96:9d:f2:58:79:b7:60:23:40:
         78:71:de:0d:19:04:05:92:86:54:5a:5e:fc:cf:ac:d4:87:5d:
         a2:cd:08:1e:8d:27:d2:19:45:72:20:c2:0c:35:66:8e:fc:86:
         59:26:b5:9f:1e:1e:39:2e:15:7c:b8:5d:92:a4:80:fc:f9:e2:
         24:35:d3:1e:47:39:5b:a3:6d:70:b9:cd:d3:24:ff:2e:8c:da:
         b1:7e:0c:9c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPHbWpi0Ybnipp8IOLMVwmUT6PuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTYxODMyMDhaFw0yNTEyMTUxODM3MDhaMDMxMTAvBgNV
BAMTKEMwMTAzQjhFNzE3OTI0MEMzQzM4NEJGOTI1OTQwNTFFQkQ3NDI1MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQhhQOh7ULQ6SJKx5eBDmfpLe4
J7bP2z1e2t9sEiCB74kpB7+C7XFiexWWo7mvOGAl2b4EII2UPbbN1R+nBAHAvF6B
FdCoYK51Wof9afZDpf5R+gAJ8DUlCGHdk08KAihc14S/rNx5wUCycB/o8YXAp6kH
TWKckHOBnmlsOP3hjkpafc095wUnk0DsrOH8e4hDP2kJWYbrbumHRIxNCfrldHN5
+0x9XUuq73gMtgenGqgOkP6ekFyGYLVDlF0oIQiwYsI3ev3TH9ovhK3Ii70ERTEP
olgKsjwtIIE7vQSz1bIY+8kuzb7NlAmHQTlDT9+sTlM+CSSfckl3iNBnJXODAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAEDuOcXkkDDw4
S/kllAUevXQlCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ01v
V3M0a0pTNkxqaHRHdThwWFp4Rkw1QnFtSFJjZWZncmNQbjJZam1DcU4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NN
b1dzNGtKUzZMamh0R3U4cFhaeEZMNUJxbUhSY2VmZ3JjUG4yWWptQ3FOLzAvQzAx
MDNCOEU3MTc5MjQwQzNDMzg0QkY5MjU5NDA1MUVCRDc0MjUwOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg6FMMA0EAgACMAcDBQAoBB18MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQItTANBgkqhkiG9w0BAQsFAAOCAQEAPwQkelCyqTNQJPDt
z9n25ujFQ5DvWLfXrYYmURS6RbcxVwuNokMzAHA2PkFOCWqNvyWRFHqcJr1HgyS1
1CsiP+qPGI46CqbnC41lSVbAFk2aHPy3LpHF4Obuxheqw7aq9UYSa14msx6HvLHY
0aGhgPRBW7JppkL9yarExXOKlSxWfkcM5xHRUNsstS54NJZDhqMjcdTArSUrccOe
sU0A7bGiUJlmD6BjfO9Qlp3yWHm3YCNAeHHeDRkEBZKGVFpe/M+s1Iddos0IHo0n
0hlFciDCDDVmjvyGWSa1nx4eOS4VfLhdkqSA/PniJDXTHkc5W6NtcLnN0yT/Loza
sX4MnA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:36 2025 by rpki-client