Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.cer
File:                     CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.cer (raw, json)
Hash identifier:          E+yOPFE/ZzXZmiBGI3J6KyeJt0tNgIUpjKE27PZV9/E=
Subject key identifier:   CB:D3:C3:01:66:DF:D2:F8:DF:F4:BB:B7:56:68:13:A3:5A:D4:98:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       076009CB0670595EAEE8374235754B22AF1EAA01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2024 17:47:18 +0000
Certificate not after:    Fri 12 Dec 2025 17:52:18 +0000
Subordinate resources:    AS: 273810
                          IP: 2804:8c98::/32
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 04:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:09:cb:06:70:59:5e:ae:e8:37:42:35:75:4b:22:af:1e:aa:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 13 17:47:18 2024 GMT
            Not After : Dec 12 17:52:18 2025 GMT
        Subject: CN=CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:c7:41:2e:3d:14:03:d9:7b:8b:5b:ef:8c:
                    39:c1:6b:19:4c:a9:54:55:62:e5:ac:ce:da:d3:1f:
                    71:e9:cf:30:fd:9a:cc:4c:fc:fc:52:ec:b0:af:68:
                    72:9e:49:ea:dc:9c:28:dd:90:af:f5:8f:50:eb:ef:
                    54:99:0c:5d:1e:83:73:e9:b8:8a:da:01:0d:11:fa:
                    8e:5b:60:9e:d6:87:75:20:a6:b6:70:1d:60:e0:75:
                    fa:48:7e:59:8f:a6:85:64:0d:cd:47:08:d7:64:53:
                    e7:d3:11:ea:86:40:70:da:56:56:3e:6f:2f:97:16:
                    4f:18:f8:c0:68:09:5a:8c:e1:dd:ca:aa:48:eb:e6:
                    b1:3a:be:d5:95:c6:ce:27:e0:e2:48:8e:c2:f7:d4:
                    3c:1a:40:cc:d5:7b:3d:5f:80:a9:e0:d9:dc:b0:ac:
                    fa:9e:3b:df:5a:37:9a:20:f5:fc:49:22:13:5e:1c:
                    1a:1c:1d:f3:70:d6:cb:17:28:ed:32:a9:2e:4f:db:
                    21:35:29:0b:f8:28:20:6b:4b:92:0c:10:74:f2:e3:
                    d6:12:4e:87:0a:39:be:de:43:7a:a6:39:a2:e5:d0:
                    c7:70:95:48:d5:5d:75:6a:a3:a0:68:4c:7d:27:7e:
                    3a:c2:66:83:5e:ad:33:8b:09:4e:4e:dc:59:5a:e8:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:D3:C3:01:66:DF:D2:F8:DF:F4:BB:B7:56:68:13:A3:5A:D4:98:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273810

    Signature Algorithm: sha256WithRSAEncryption
         c6:ec:0d:d6:67:2e:42:ba:16:bd:42:2b:cd:1a:91:29:6e:3d:
         be:9d:a4:6b:53:0f:0d:57:90:31:16:bd:ce:19:cf:0a:37:86:
         37:54:41:1b:07:f0:81:20:8b:0e:2e:73:6b:ae:c5:de:ca:d8:
         d9:64:23:f4:b3:25:04:95:51:28:66:88:68:57:64:39:5d:98:
         bf:50:9a:af:c2:08:2b:f6:e1:8b:da:9c:fd:da:13:cb:ba:21:
         43:ec:d7:10:8b:3d:90:4e:1d:fa:a9:8a:55:bd:d7:85:b8:8d:
         39:31:02:dd:df:e7:ed:e1:a0:03:5e:da:00:54:ac:f8:10:5a:
         10:3e:ef:67:a1:82:f9:6a:95:27:43:16:9e:d7:dd:eb:75:5a:
         78:bd:49:f5:5a:8e:5c:55:39:64:18:1f:d2:60:69:04:58:01:
         f8:1c:83:85:ae:f0:e4:d5:34:ab:e0:cd:42:39:29:09:8b:8b:
         24:19:24:b3:64:54:c5:14:97:1d:f2:32:8a:d1:52:3f:06:61:
         9b:4f:6a:14:0b:1b:9c:f7:a4:d5:12:a2:5b:5d:5f:b7:1f:fb:
         e3:0b:c0:23:c6:5f:e8:40:3a:a7:93:54:68:db:9d:b9:bb:26:
         2b:2c:92:15:89:1e:7b:ea:e8:2b:49:88:aa:82:53:62:c8:91:
         6e:57:d5:53
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUB2AJywZwWV6u6DdCNXVLIq8eqgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTMxNzQ3MThaFw0yNTEyMTIxNzUyMThaMDMxMTAvBgNV
BAMTKENCRDNDMzAxNjZERkQyRjhERkY0QkJCNzU2NjgxM0EzNUFENDk4MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5sdBLj0UA9l7i1vvjDnBaxlM
qVRVYuWsztrTH3HpzzD9msxM/PxS7LCvaHKeSercnCjdkK/1j1Dr71SZDF0eg3Pp
uIraAQ0R+o5bYJ7Wh3UgprZwHWDgdfpIflmPpoVkDc1HCNdkU+fTEeqGQHDaVlY+
by+XFk8Y+MBoCVqM4d3Kqkjr5rE6vtWVxs4n4OJIjsL31DwaQMzVez1fgKng2dyw
rPqeO99aN5og9fxJIhNeHBocHfNw1ssXKO0yqS5P2yE1KQv4KCBrS5IMEHTy49YS
TocKOb7eQ3qmOaLl0MdwlUjVXXVqo6BoTH0nfjrCZoNerTOLCU5O3Fla6MxRAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL08MBZt/S+N/0
u7dWaBOjWtSYDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDdz
c1AyRHlyYk1uYXFjR0RKeVhocFB3V3F4c0w1VE5leDE3bjZkcGJoRFIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3
c3NQMkR5cmJNbmFxY0dESnlYaHBQd1dxeHNMNVROZXgxN242ZHBiaERSLzAvQ0JE
M0MzMDE2NkRGRDJGOERGRjRCQkI3NTY2ODEzQTM1QUQ0OTgwRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LZIwDQYJKoZIhvcNAQELBQADggEBAMbsDdZnLkK6Fr1CK80akSluPb6dpGtTDw1X
kDEWvc4Zzwo3hjdUQRsH8IEgiw4uc2uuxd7K2NlkI/SzJQSVUShmiGhXZDldmL9Q
mq/CCCv24YvanP3aE8u6IUPs1xCLPZBOHfqpilW914W4jTkxAt3f5+3hoANe2gBU
rPgQWhA+72ehgvlqlSdDFp7X3et1Wni9SfVajlxVOWQYH9JgaQRYAfgcg4Wu8OTV
NKvgzUI5KQmLiyQZJLNkVMUUlx3yMorRUj8GYZtPahQLG5z3pNUSoltdX7cf++ML
wCPGX+hAOqeTVGjbnbm7JisskhWJHnvq6CtJiKqCU2LIkW5X1VM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:29 2025 by rpki-client