Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.cer
File:                     D0403F4323AC053D7F7774E45B7604EBFC94DA8D.cer (raw, json)
Hash identifier:          LhhaImoTDiVc97q46NXQm0yTJSiZ09pi7VUDe8qIIec=
Subject key identifier:   D0:40:3F:43:23:AC:05:3D:7F:77:74:E4:5B:76:04:EB:FC:94:DA:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5693225777E26917A108B1AC73FB386D85AB115B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Feb 2025 22:33:26 +0000
Certificate not after:    Mon 16 Feb 2026 22:38:26 +0000
Subordinate resources:    AS: 274615
                          IP: 2804:910c::/32
Validation:               Failed, certificate revoked on Sat 01 Mar 2025 09:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:93:22:57:77:e2:69:17:a1:08:b1:ac:73:fb:38:6d:85:ab:11:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 17 22:33:26 2025 GMT
            Not After : Feb 16 22:38:26 2026 GMT
        Subject: CN=D0403F4323AC053D7F7774E45B7604EBFC94DA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:cf:f1:41:dc:cb:da:55:db:6b:4d:92:e0:
                    d6:1d:4f:d8:fc:19:73:c4:2b:4f:a2:21:39:c9:1e:
                    0c:d4:30:b1:11:40:d5:12:a2:93:14:c2:87:ce:18:
                    a4:ac:55:b1:f8:61:7c:2e:5c:51:48:c2:89:ba:e6:
                    75:85:fb:72:86:cb:15:a2:bd:e8:5e:28:a9:bf:06:
                    2c:b3:3f:78:49:ab:66:be:b9:25:42:a7:5b:40:f0:
                    7e:b7:7e:bc:df:4f:9c:37:f0:83:f5:6b:59:f4:0e:
                    d5:98:8e:06:12:f5:36:5d:21:41:3b:64:39:2b:59:
                    b5:34:2d:67:91:b5:39:e9:76:dc:d8:e5:c5:67:f6:
                    64:b1:c8:72:bd:73:7a:27:d5:5e:b2:a7:c6:0d:f8:
                    69:c9:74:a0:a7:68:d8:76:24:bc:91:e6:1e:37:a5:
                    ff:e4:a1:eb:62:df:ef:ea:ef:4e:76:dd:43:f1:e6:
                    24:fe:f1:f5:73:fb:64:05:6e:9a:0a:ea:52:ad:fc:
                    f5:b6:47:0e:6f:ae:db:b6:7d:53:54:43:7d:73:52:
                    21:8d:50:a0:f2:f3:50:7e:75:29:74:e8:58:46:9e:
                    9f:8d:8d:57:23:53:45:fd:d1:8a:ef:99:22:76:59:
                    7c:6b:d2:68:41:97:2e:2b:dc:7b:c7:46:12:69:63:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:40:3F:43:23:AC:05:3D:7F:77:74:E4:5B:76:04:EB:FC:94:DA:8D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274615

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:9d:4c:a9:d9:8a:17:eb:64:27:16:4b:3a:81:9a:08:9c:
         91:43:a8:61:21:bc:16:7d:76:03:4d:be:e2:f8:3a:68:36:d9:
         23:cb:55:0d:1d:de:9f:e1:75:0c:07:fc:ae:d7:04:4e:8a:70:
         0c:6e:e9:c8:cd:6e:f7:1c:60:b0:5e:b1:25:65:14:9b:90:c5:
         9d:6c:2c:85:76:a9:54:0b:7a:9f:bd:c6:94:2d:72:34:73:f6:
         f6:a4:b3:cc:a1:34:81:cb:4b:46:52:d2:96:c5:da:15:42:c9:
         1b:b4:22:35:39:ef:75:55:f5:c4:0e:5b:b8:e9:32:ae:33:a8:
         3f:e9:41:a6:32:94:23:d7:f3:9c:12:94:3a:88:52:14:ef:d9:
         2a:87:20:33:d9:91:33:dc:cd:78:b5:58:b9:38:f4:32:62:87:
         96:01:fc:eb:fc:c4:45:dc:3c:c7:58:55:e8:f9:4f:bf:9e:7a:
         c2:f2:15:21:52:fd:34:ff:b3:ae:58:33:c5:eb:80:ff:41:c6:
         ab:f4:87:2d:f7:4f:a5:3f:42:fc:ea:58:3a:10:7f:c4:f9:9c:
         dd:cf:b2:32:bf:19:1f:dd:b9:49:88:20:48:78:3e:67:72:a8:
         50:c0:49:11:07:c6:75:c8:78:28:94:df:09:83:7f:7d:66:13:
         85:30:df:f5
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUVpMiV3fiaRehCLGsc/s4bYWrEVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTcyMjMzMjZaFw0yNjAyMTYyMjM4MjZaMDMxMTAvBgNV
BAMTKEQwNDAzRjQzMjNBQzA1M0Q3Rjc3NzRFNDVCNzYwNEVCRkM5NERBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XM/xQdzL2lXba02S4NYdT9j8
GXPEK0+iITnJHgzUMLERQNUSopMUwofOGKSsVbH4YXwuXFFIwom65nWF+3KGyxWi
veheKKm/BiyzP3hJq2a+uSVCp1tA8H63frzfT5w38IP1a1n0DtWYjgYS9TZdIUE7
ZDkrWbU0LWeRtTnpdtzY5cVn9mSxyHK9c3on1V6yp8YN+GnJdKCnaNh2JLyR5h43
pf/koeti3+/q70523UPx5iT+8fVz+2QFbpoK6lKt/PW2Rw5vrtu2fVNUQ31zUiGN
UKDy81B+dSl06FhGnp+NjVcjU0X90YrvmSJ2WXxr0mhBly4r3HvHRhJpY97jAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQQD9DI6wFPX93
dORbdgTr/JTajTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3hT
dVQzWXA3ZjQ2VDZLR1RqM1JSeWd6ZWM3eWZYcHljdThTUEhQMU1ralAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N4
U3VUM1lwN2Y0NlQ2S0dUajNSUnlnemVjN3lmWHB5Y3U4U1BIUDFNa2pQLzAvRDA0
MDNGNDMyM0FDMDUzRDdGNzc3NEU0NUI3NjA0RUJGQzk0REE4RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASRDDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
MLcwDQYJKoZIhvcNAQELBQADggEBAIcunUyp2YoX62QnFks6gZoInJFDqGEhvBZ9
dgNNvuL4Omg22SPLVQ0d3p/hdQwH/K7XBE6KcAxu6cjNbvccYLBesSVlFJuQxZ1s
LIV2qVQLep+9xpQtcjRz9vaks8yhNIHLS0ZS0pbF2hVCyRu0IjU573VV9cQOW7jp
Mq4zqD/pQaYylCPX85wSlDqIUhTv2SqHIDPZkTPczXi1WLk49DJih5YB/Ov8xEXc
PMdYVej5T7+eesLyFSFS/TT/s65YM8XrgP9Bxqv0hy33T6U/QvzqWDoQf8T5nN3P
sjK/GR/duUmIIEh4PmdyqFDASREHxnXIeCiU3wmDf31mE4Uw3/U=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:16 2025 by rpki-client