Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
File:                     C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer (raw, json)
Hash identifier:          4ONJqSJRq3C1/cZQKbJnKn7xNZnRQwwgrh5D2/lcBM4=
Subject key identifier:   C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47503BD233685728C40A85802E01246DD8159C9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 06:09:56 +0000
Certificate not after:    Tue 02 Dec 2025 06:14:56 +0000
Subordinate resources:    AS: 267501
                          IP: 45.183.132.0/22
                          IP: 201.182.64.0/22
                          IP: 2804:4274::/32
Validation:               Failed, certificate revoked on Sat 04 Jan 2025 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:50:3b:d2:33:68:57:28:c4:0a:85:80:2e:01:24:6d:d8:15:9c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 06:09:56 2024 GMT
            Not After : Dec  2 06:14:56 2025 GMT
        Subject: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:9a:91:44:16:40:ff:11:fb:ff:b4:66:d8:
                    f9:5f:35:f7:52:da:a2:59:aa:2b:a3:b0:46:8c:ad:
                    ad:84:c4:f6:45:24:54:f8:1e:24:6e:25:49:4b:06:
                    2f:91:04:05:39:1b:37:05:d7:d9:8e:78:7e:0c:fc:
                    d7:b5:eb:e1:9d:5e:9d:78:66:81:42:6a:76:d1:a6:
                    e0:ba:96:43:21:21:8f:c4:9f:66:d9:95:90:0e:c2:
                    99:b9:1a:ec:ec:a3:39:2a:40:f7:5b:21:80:1b:05:
                    b5:92:2c:ea:36:4c:8b:9c:27:88:09:2d:df:9c:c5:
                    b9:37:85:8c:6a:a4:f0:87:49:b3:76:1c:78:02:68:
                    09:a9:e1:52:09:17:f8:35:83:9d:cf:dd:c6:96:40:
                    62:10:52:c5:ca:32:79:64:4a:63:11:a3:11:03:ae:
                    f0:f3:9f:0e:e5:43:b3:b9:20:6e:75:ac:e2:ef:c3:
                    d5:91:d4:6f:e8:ce:c7:df:bc:7c:6d:89:b4:4d:68:
                    9c:48:b6:8d:ad:e4:75:6f:99:e7:54:ea:16:20:2a:
                    b6:b7:18:19:ea:dc:37:2c:76:d6:35:12:e9:df:80:
                    68:7c:08:25:44:fc:07:46:25:d9:e7:62:13:c2:3d:
                    b4:94:6e:18:80:62:e8:ec:2e:49:c3:6e:20:28:40:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.132.0/22
                  201.182.64.0/22
                IPv6:
                  2804:4274::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267501

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:65:6d:a0:22:82:f8:26:c8:01:b1:36:2c:d3:aa:f1:c3:
         80:35:40:9a:5c:04:97:c5:1d:e6:8a:c5:4f:54:a5:7b:97:24:
         87:b6:a8:6c:76:50:e2:5e:eb:11:d4:fc:db:44:c1:60:94:ca:
         81:96:2a:1f:53:21:16:ca:d1:15:c1:61:6f:62:65:81:b1:83:
         6a:8a:72:94:d3:3b:e0:3d:43:ef:4e:70:bb:d0:70:6e:06:32:
         cb:b7:78:68:d7:24:21:11:fe:c3:38:20:64:97:6f:7d:e9:cd:
         6b:57:8f:dd:d6:bc:2c:dd:55:0a:00:1a:6c:ee:c5:1b:ad:bb:
         6d:f9:c7:05:f7:37:96:24:e9:cf:ce:37:79:f7:10:ca:1b:9d:
         53:34:ff:c7:c4:e1:87:33:8d:61:e0:6d:fe:68:9e:db:72:75:
         e3:95:57:04:28:1d:2b:ef:63:cb:b5:81:28:f6:ca:ba:0c:b7:
         71:f0:31:3f:f5:44:60:52:45:30:01:e1:3f:33:b7:f7:43:cf:
         d0:90:d3:f1:4b:3e:40:55:8c:d3:1d:01:7b:e1:5e:18:a5:ea:
         68:c1:3e:1e:70:29:29:69:13:95:56:95:45:41:0c:8d:fb:20:
         56:b1:f3:b7:2a:84:ea:f0:fa:79:e6:e4:60:e5:ed:73:12:33:
         0b:e7:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:08 2025 by rpki-client