Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
File:                     E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer (raw, json)
Hash identifier:          nulVwAKabVsMasa2in5NTNDYglDLGzax9AhXhVrSwdk=
Subject key identifier:   E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A5AB1F6B88E9D0899F714A06295E6B9D30BFEB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Feb 2025 00:32:01 +0000
Certificate not after:    Sat 07 Feb 2026 00:37:01 +0000
Subordinate resources:    AS: 262590
                          IP: 138.122.248.0/22
                          IP: 170.231.172.0/22
                          IP: 177.84.192.0/21
                          IP: 2804:684::/32
Validation:               Failed, certificate revoked on Tue 04 Mar 2025 13:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5a:b1:f6:b8:8e:9d:08:99:f7:14:a0:62:95:e6:b9:d3:0b:fe:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  8 00:32:01 2025 GMT
            Not After : Feb  7 00:37:01 2026 GMT
        Subject: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:77:88:01:fe:f1:3e:bf:3e:64:3a:69:71:
                    36:50:ed:ba:a4:a5:54:86:78:ec:dd:ef:ad:32:05:
                    b9:53:62:c1:28:41:fd:9d:91:08:9a:a5:ad:ab:85:
                    27:5a:35:27:15:dc:d6:ee:a1:23:2c:f8:04:89:ec:
                    1b:3d:88:58:08:64:16:be:78:09:7b:4d:d1:5f:ab:
                    40:7e:35:56:96:0d:5e:60:a8:a1:2b:3e:bf:36:56:
                    dd:13:a6:2b:69:5e:e2:67:d3:8c:61:a1:2a:24:74:
                    61:41:c2:3f:12:9e:d6:42:79:02:81:e2:de:dd:75:
                    b8:c6:41:ff:05:2b:2d:67:cb:57:7a:13:f8:4a:c5:
                    e8:4e:7d:5c:85:8e:68:2e:b2:5b:78:2a:85:95:90:
                    6a:c6:3f:60:fe:9b:64:6c:41:e3:55:93:32:45:d9:
                    b3:60:b5:48:17:39:74:20:13:7f:74:26:99:a7:00:
                    a8:b9:04:af:73:c0:b6:3c:ea:24:6e:11:03:f0:50:
                    f9:59:38:57:8d:ea:c4:d1:58:a2:9b:fb:bb:78:e9:
                    94:e3:9b:cf:9b:f2:71:52:43:06:d4:ac:6b:ac:1c:
                    6b:3e:4f:a0:53:b7:d8:6b:e2:6b:66:e3:7f:93:58:
                    23:73:32:8a:95:8a:c4:cb:b1:dd:0b:b9:5c:6e:90:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.248.0/22
                  170.231.172.0/22
                  177.84.192.0/21
                IPv6:
                  2804:684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262590

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:d6:fd:48:42:66:a0:23:67:31:84:c8:35:7d:48:f3:19:
         4c:d2:7c:79:42:23:1c:e8:37:5e:78:24:09:e4:65:7a:e4:4b:
         f1:c3:df:8d:f4:8b:f2:01:d5:77:cb:26:1d:ed:6e:bb:1b:4a:
         19:4b:b0:0b:3e:86:81:55:cd:8a:88:28:84:3f:d8:62:34:c7:
         e3:45:0d:a4:95:ec:12:07:a9:b3:ed:55:84:a5:48:ed:8d:df:
         e9:b1:16:2a:c9:33:54:dc:27:d4:68:71:b9:74:77:2a:57:71:
         e2:f0:a7:ab:9d:6d:00:67:01:e1:53:7e:98:09:d4:7b:1d:be:
         ee:47:84:7a:68:47:4f:53:32:44:b9:21:e0:66:f0:27:a3:d1:
         f1:5f:a7:9a:b5:e3:6b:dc:6c:0e:55:65:0b:d5:c9:77:b6:7f:
         f2:e4:bd:b2:75:14:e3:da:45:df:f7:13:ac:51:ef:5f:02:11:
         dc:18:7e:73:ee:df:ca:33:b1:bc:1b:53:fc:f5:86:22:95:99:
         8d:f3:d4:a8:bb:5a:da:50:1a:68:2e:96:05:bb:9b:c3:2a:0a:
         b7:fc:ea:d4:07:6c:73:74:3b:a3:fe:5c:04:c2:a7:76:8b:45:
         ee:9e:56:62:d4:d6:84:27:99:a5:d1:15:2d:fc:a5:01:53:ec:
         0b:58:a2:5e
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUClqx9riOnQiZ9xSgYpXmudML/rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDgwMDMyMDFaFw0yNjAyMDcwMDM3MDFaMDMxMTAvBgNV
BAMTKEU1REJDOEIxOTc0QzA2MzBCNEY3MDVBM0ZDMTQ0OUIzRjRGRUFDMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgj3eIAf7xPr8+ZDppcTZQ7bqk
pVSGeOzd760yBblTYsEoQf2dkQiapa2rhSdaNScV3NbuoSMs+ASJ7Bs9iFgIZBa+
eAl7TdFfq0B+NVaWDV5gqKErPr82Vt0TpitpXuJn04xhoSokdGFBwj8SntZCeQKB
4t7ddbjGQf8FKy1ny1d6E/hKxehOfVyFjmguslt4KoWVkGrGP2D+m2RsQeNVkzJF
2bNgtUgXOXQgE390JpmnAKi5BK9zwLY86iRuEQPwUPlZOFeN6sTRWKKb+7t46ZTj
m8+b8nFSQwbUrGusHGs+T6BTt9hr4mtm43+TWCNzMoqVisTLsd0LuVxukETvAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTl28ixl0wGMLT3
BaP8FEmz9P6sAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFM
MWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpBMUcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ux
TDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAvRTVE
QkM4QjE5NzRDMDYzMEI0RjcwNUEzRkMxNDQ5QjNGNEZFQUMwMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCinr4AwQCquesAwQDsVTAMA0EAgACMAcDBQAoBAaE
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBvjANBgkqhkiG9w0BAQsFAAOCAQEA
dvDW/UhCZqAjZzGEyDV9SPMZTNJ8eUIjHOg3XngkCeRleuRL8cPfjfSL8gHVd8sm
He1uuxtKGUuwCz6GgVXNiogohD/YYjTH40UNpJXsEgeps+1VhKVI7Y3f6bEWKskz
VNwn1GhxuXR3Kldx4vCnq51tAGcB4VN+mAnUex2+7keEemhHT1MyRLkh4GbwJ6PR
8V+nmrXja9xsDlVlC9XJd7Z/8uS9snUU49pF3/cTrFHvXwIR3Bh+c+7fyjOxvBtT
/PWGIpWZjfPUqLta2lAaaC6WBbubwyoKt/zq1Adsc3Q7o/5cBMKndotF7p5WYtTW
hCeZpdEVLfylAVPsC1iiXg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:57 2025 by rpki-client