Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.cer
File:                     DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.cer (raw, json)
Hash identifier:          BsRqHGgQVVK+lWhdo+2GvAUyv5gEmzjd00+vw2M50BA=
Subject key identifier:   DC:CC:03:84:BC:FF:D1:A2:0A:E5:DE:A1:3B:02:26:C3:54:C6:12:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27DF55AA91F4428A530A07172844EECE7B109CEF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Dec 2024 01:44:44 +0000
Certificate not after:    Sat 06 Dec 2025 01:49:44 +0000
Subordinate resources:    AS: 266044
                          IP: 45.4.32.0/22
                          IP: 45.225.168.0/22
                          IP: 2804:4694::/32
Validation:               Failed, certificate revoked on Fri 03 Jan 2025 14:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:df:55:aa:91:f4:42:8a:53:0a:07:17:28:44:ee:ce:7b:10:9c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  7 01:44:44 2024 GMT
            Not After : Dec  6 01:49:44 2025 GMT
        Subject: CN=DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:1f:b1:45:0f:e3:d0:6b:14:9e:09:4d:73:
                    1a:84:87:9c:ee:23:93:fd:f1:23:a3:d1:38:5d:fb:
                    f7:95:df:61:82:87:df:26:9c:4f:00:a2:a2:f1:ad:
                    99:3d:ad:a7:7d:e7:c1:9b:a1:8e:36:09:8d:66:5f:
                    24:6f:fb:04:02:ed:72:35:13:38:ba:3c:f9:8b:d9:
                    05:23:11:fd:8a:c1:89:8e:23:e5:f9:5c:52:c4:a1:
                    e5:c0:ae:9f:5b:fa:3e:f6:a3:ca:b9:83:e2:3f:91:
                    46:18:1d:c9:27:d6:41:15:19:8c:92:70:1f:f3:bc:
                    7e:10:c5:1e:89:66:cb:a0:aa:20:24:a5:bd:b8:b3:
                    49:27:75:ba:73:db:cc:2f:00:95:41:4b:42:c7:a0:
                    30:68:cd:47:8d:24:7f:5d:8d:94:b8:57:2b:e1:29:
                    3c:aa:3f:6c:34:1d:ee:89:87:a1:65:da:f3:cd:9b:
                    ab:94:41:59:f9:d3:18:b0:d8:29:b0:d1:9e:29:8c:
                    c8:61:d9:07:34:3f:f6:5a:f2:d0:29:3a:6e:29:f5:
                    26:fc:44:ad:25:b1:f4:2f:9c:1b:27:e3:52:bd:1d:
                    02:c1:93:cb:25:83:75:5b:e8:42:bc:08:1e:a1:15:
                    16:c4:97:fa:a9:71:54:18:c0:4e:31:f6:41:1f:a9:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:CC:03:84:BC:FF:D1:A2:0A:E5:DE:A1:3B:02:26:C3:54:C6:12:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.32.0/22
                  45.225.168.0/22
                IPv6:
                  2804:4694::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266044

    Signature Algorithm: sha256WithRSAEncryption
         db:bc:df:4b:23:a6:08:ae:2c:2b:b0:01:7b:29:48:31:39:22:
         ad:c8:bc:f9:db:a7:cd:ca:02:36:7f:19:e2:fe:d0:04:48:de:
         70:5e:50:dd:2f:0b:1b:dd:1d:f8:38:ce:e7:6a:e2:f2:09:99:
         3a:9e:f6:ab:34:86:53:62:a6:63:dd:52:f4:44:1f:ad:a2:1a:
         97:44:9c:60:73:c0:86:af:3c:f0:af:50:71:87:1c:10:69:52:
         d3:1e:5d:a2:14:cd:46:8b:fd:96:0b:68:31:c4:15:72:c2:bf:
         ba:f8:90:ba:bf:24:b0:1c:49:ed:07:79:ff:ae:64:5e:2f:5b:
         d6:85:19:bd:1f:33:6a:42:ec:59:bc:56:bb:f9:8d:1d:1c:83:
         50:4a:bf:78:f2:ff:a4:de:18:d9:99:46:ca:0f:fa:fb:7b:bc:
         1c:34:84:b5:7b:51:97:12:1b:b6:2f:9c:85:61:91:cb:0e:f6:
         9f:11:54:36:97:fb:ec:b6:93:3c:49:52:1c:18:9f:38:86:ff:
         74:87:a9:0a:79:5c:b5:7b:39:86:48:19:4d:36:a5:87:40:9c:
         ea:73:f9:38:7b:41:60:46:60:62:81:e7:cc:6a:8f:31:dd:e8:
         d8:de:0a:fa:c7:9f:6a:71:ae:b8:75:54:f4:e3:1b:25:03:c2:
         0c:5d:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:56:43 2025 by rpki-client