Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer
File:                     CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer (raw, json)
Hash identifier:          UXdalNm7eZyfO1ZXDJDR/k3Wqw6i9tgDz0cKYuQ+z+o=
Subject key identifier:   CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A2DB752212FD39C7D0F91A17BC976D7EC8FDE70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2024 18:06:32 +0000
Certificate not after:    Wed 05 Nov 2025 18:11:32 +0000
Subordinate resources:    AS: 271308
                          IP: 177.125.96.0/22
                          IP: 2804:797c::/32
Validation:               Failed, certificate revoked on Tue 17 Dec 2024 02:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:b7:52:21:2f:d3:9c:7d:0f:91:a1:7b:c9:76:d7:ec:8f:de:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 18:06:32 2024 GMT
            Not After : Nov  5 18:11:32 2025 GMT
        Subject: CN=CE5AFAF91877392AB78A95A77E48B4731F1D8B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:f9:38:86:20:4e:ec:93:b4:5a:7b:b0:aa:
                    c5:26:d9:07:cb:c3:59:41:f0:c2:77:e4:5c:31:21:
                    29:9c:cd:ae:85:4d:29:d3:d5:47:bd:b9:c0:19:0c:
                    1b:d0:61:32:f2:ad:a8:60:64:1a:f4:1b:49:92:1c:
                    de:ff:87:8a:66:c8:49:8a:b6:bb:1a:fd:74:fa:78:
                    d5:9b:f6:b3:1d:4f:c2:54:04:05:11:fd:99:b7:08:
                    35:d2:8a:68:b0:19:b7:0d:eb:f4:1e:22:bf:6d:1b:
                    82:09:82:fa:67:65:93:f8:ee:6d:27:6b:93:28:2a:
                    16:94:17:4e:b0:8b:f8:bf:be:bc:37:da:e8:2f:07:
                    91:8b:01:36:c1:d4:15:e5:72:78:05:f9:dc:d5:ce:
                    c4:2e:33:52:47:b4:c2:f3:95:93:cd:d2:0c:c2:96:
                    32:02:2d:9b:64:47:34:f9:1c:19:99:c7:1c:52:cc:
                    9c:a3:aa:0e:ec:87:48:24:1f:3c:3d:d3:f7:70:a8:
                    f4:64:dc:6e:07:d3:9d:f2:ba:99:96:81:5a:7e:7b:
                    1d:de:ed:f0:06:02:c6:de:98:70:e8:38:3e:3e:87:
                    36:1d:94:c9:40:0b:de:09:24:46:ab:d8:28:92:66:
                    ca:b1:4e:5b:64:43:88:1d:6f:b6:c1:50:b4:f1:75:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.96.0/22
                IPv6:
                  2804:797c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271308

    Signature Algorithm: sha256WithRSAEncryption
         c5:c3:f6:3c:86:d1:3a:31:53:07:e4:9f:28:b9:c1:38:58:5b:
         03:d8:9a:66:66:21:4c:16:be:b4:58:4e:e5:e2:01:59:0d:f0:
         04:40:f4:a4:57:a5:13:fd:7f:bf:5d:84:db:3c:49:4f:04:a7:
         08:ed:40:97:9e:5f:8b:fe:2f:54:0c:36:44:7e:29:89:a4:08:
         e9:f2:d0:e0:77:3a:33:3f:e8:31:51:32:f6:3d:ef:54:4a:2d:
         f2:cb:f7:de:9c:4e:7a:6c:92:09:1e:ab:b7:f9:3d:2d:45:01:
         ea:49:25:f0:56:df:6c:85:8c:9a:44:ac:06:9e:ca:73:46:08:
         2f:86:e5:fc:7e:ac:f6:bd:d3:3a:c8:4b:d2:3d:12:94:22:c2:
         64:d4:60:01:59:d0:7b:e2:81:05:2c:be:69:3a:b6:56:48:af:
         71:43:0f:16:f1:50:37:a4:a7:f6:57:ac:0b:0c:51:50:06:a2:
         b3:d9:49:a9:52:97:36:d2:6e:96:43:c9:c4:9a:c3:36:68:77:
         4c:68:22:04:9e:83:b3:1e:88:64:45:0f:76:df:41:65:e8:ac:
         b8:ef:93:e0:c8:f5:10:c4:68:94:b5:c3:65:88:95:b8:c8:8c:
         f3:ce:86:f3:d7:a8:53:2d:29:ae:55:44:07:1d:40:f0:8c:08:
         f1:6a:75:40
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUCi23UiEv05x9D5Ghe8l21+yP3nAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDYxODA2MzJaFw0yNTExMDUxODExMzJaMDMxMTAvBgNV
BAMTKENFNUFGQUY5MTg3NzM5MkFCNzhBOTVBNzdFNDhCNDczMUYxRDhCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMvk4hiBO7JO0WnuwqsUm2QfL
w1lB8MJ35FwxISmcza6FTSnT1Ue9ucAZDBvQYTLyrahgZBr0G0mSHN7/h4pmyEmK
trsa/XT6eNWb9rMdT8JUBAUR/Zm3CDXSimiwGbcN6/QeIr9tG4IJgvpnZZP47m0n
a5MoKhaUF06wi/i/vrw32ugvB5GLATbB1BXlcngF+dzVzsQuM1JHtMLzlZPN0gzC
ljICLZtkRzT5HBmZxxxSzJyjqg7sh0gkHzw90/dwqPRk3G4H053yupmWgVp+ex3e
7fAGAsbemHDoOD4+hzYdlMlAC94JJEar2CiSZsqxTltkQ4gdb7bBULTxdUDHAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOWvr5GHc5KreK
lad+SLRzHx2LlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veEFE
UzVTZEJwdHFIdmhmYjZtOXREUlVMSHZNYnVFa3RFN0dRNU5ieHNyZS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veEFE
UzVTZEJwdHFIdmhmYjZtOXREUlVMSHZNYnVFa3RFN0dRNU5ieHNyZS8wL0NFNUFG
QUY5MTg3NzM5MkFCNzhBOTVBNzdFNDhCNDczMUYxRDhCOTUubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEArF9YDANBAIAAjAHAwUAKAR5fDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEI8wwDQYJKoZIhvcNAQELBQADggEBAMXD9jyG0ToxUwfknyi5
wThYWwPYmmZmIUwWvrRYTuXiAVkN8ARA9KRXpRP9f79dhNs8SU8EpwjtQJeeX4v+
L1QMNkR+KYmkCOny0OB3OjM/6DFRMvY971RKLfLL996cTnpskgkeq7f5PS1FAepJ
JfBW32yFjJpErAaeynNGCC+G5fx+rPa90zrIS9I9EpQiwmTUYAFZ0HvigQUsvmk6
tlZIr3FDDxbxUDekp/ZXrAsMUVAGorPZSalSlzbSbpZDycSawzZod0xoIgSeg7Me
iGRFD3bfQWXorLjvk+DI9RDEaJS1w2WIlbjIjPPOhvPXqFMtKa5VRAcdQPCMCPFq
dUA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:29 2025 by rpki-client