Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB51DA4A4FAE4CB0F740B7FF3DC6463F3A25E895.cer
File:                     EB51DA4A4FAE4CB0F740B7FF3DC6463F3A25E895.cer (raw, json)
Hash identifier:          wORvH8mioa/DdBvUrCF5jha847eCA2nMgjJOPBbM4II=
Subject key identifier:   EB:51:DA:4A:4F:AE:4C:B0:F7:40:B7:FF:3D:C6:46:3F:3A:25:E8:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       164F0B2DE215F3313CDF9BB606BF65AAED188198
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/EB51DA4A4FAE4CB0F740B7FF3DC6463F3A25E895.mft
caRepository:             rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:05:36 +0000
Certificate not after:    Fri 11 Apr 2025 13:10:36 +0000
Subordinate resources:    AS: 264138
                          IP: 138.97.84.0/22
                          IP: 2804:2308::/32

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 22:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4f:0b:2d:e2:15:f3:31:3c:df:9b:b6:06:bf:65:aa:ed:18:81:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 12 13:05:36 2024 GMT
            Not After : Apr 11 13:10:36 2025 GMT
        Subject: CN=EB51DA4A4FAE4CB0F740B7FF3DC6463F3A25E895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:37:ad:7f:86:c0:9b:1a:ad:e2:c7:63:bd:
                    85:2f:b9:8c:f8:b4:8e:0e:a0:b4:2c:6c:7f:6b:30:
                    3a:57:54:3e:41:a7:4e:78:08:9d:ce:eb:cd:eb:fd:
                    73:4f:4d:53:37:77:2c:3a:c5:df:9d:17:bf:b0:c7:
                    2c:ca:2c:3e:f1:6a:da:b5:ac:57:0a:35:97:29:a6:
                    97:0e:94:3b:5a:cf:c1:ea:3f:74:c9:2c:91:1e:3a:
                    28:ba:5a:16:19:31:7a:ea:f2:82:8d:61:d2:8f:63:
                    75:9a:60:95:94:a0:ee:78:7e:89:48:6c:a1:e4:47:
                    4b:50:e1:7a:2b:d0:9c:3e:71:94:4b:06:29:26:79:
                    18:89:08:0f:42:2f:0b:c0:af:8b:9b:20:37:2f:f8:
                    4f:74:f6:4a:21:c0:e0:50:65:db:e0:21:b0:97:75:
                    46:0f:0a:81:58:27:23:50:c5:21:93:f3:e1:de:28:
                    9d:66:b9:52:d8:49:31:b2:f7:20:c0:08:6c:18:39:
                    96:e9:49:5c:37:5d:61:fd:f9:fc:78:2a:5a:bf:31:
                    70:4c:3b:40:10:10:cf:7e:26:01:d2:0e:89:6a:0e:
                    bd:8d:02:39:e7:fe:0b:bd:86:89:d6:29:82:15:00:
                    51:e3:76:05:1a:66:dc:5c:46:e9:63:06:01:e1:c1:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:51:DA:4A:4F:AE:4C:B0:F7:40:B7:FF:3D:C6:46:3F:3A:25:E8:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/EB51DA4A4FAE4CB0F740B7FF3DC6463F3A25E895.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.84.0/22
                IPv6:
                  2804:2308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264138

    Signature Algorithm: sha256WithRSAEncryption
         a8:74:ee:f4:01:b5:35:d9:57:30:09:8d:a3:69:02:6e:2f:27:
         fd:5a:37:a5:b7:52:ce:0e:20:3f:cf:34:41:e9:4d:8d:66:98:
         e4:66:95:aa:24:9e:86:53:94:b9:39:ed:79:6e:c4:a1:90:13:
         dc:82:46:a5:21:33:ca:0d:77:a9:a2:42:e6:e6:42:26:72:df:
         fa:8d:c5:b7:c8:68:f6:72:a1:d2:6c:01:f0:a2:89:78:f2:62:
         72:a0:ab:62:05:04:01:da:ec:08:f3:9a:8b:d9:2c:9c:5b:59:
         25:79:20:5b:f9:ee:2a:f6:da:52:7a:b8:35:f6:ef:c4:e5:d2:
         94:ca:9b:89:36:85:86:98:f6:e5:8d:84:23:76:3b:f6:a4:30:
         71:6a:d9:96:61:37:70:d5:55:f3:56:4f:df:84:57:93:49:61:
         2d:0c:b4:66:06:af:3b:35:4a:00:93:39:a4:93:ba:71:1b:55:
         a6:f7:ee:5a:ff:7e:ee:63:59:a2:97:91:64:18:01:3c:9f:50:
         16:bb:ac:86:c1:fa:ec:d3:7c:6d:b9:58:6e:5d:e6:cd:ef:36:
         c7:d5:7d:91:ad:e3:38:c2:98:a0:39:cf:4f:65:c6:24:a5:92:
         ad:17:9b:2f:5e:a7:a8:bb:43:9a:ac:56:88:c0:68:1b:03:50:
         d0:03:2a:47
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFk8LLeIV8zE835u2Br9lqu0YgZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MTIxMzA1MzZaFw0yNTA0MTExMzEwMzZaMDMxMTAvBgNV
BAMTKEVCNTFEQTRBNEZBRTRDQjBGNzQwQjdGRjNEQzY0NjNGM0EyNUU4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOTetf4bAmxqt4sdjvYUvuYz4
tI4OoLQsbH9rMDpXVD5Bp054CJ3O683r/XNPTVM3dyw6xd+dF7+wxyzKLD7xatq1
rFcKNZcpppcOlDtaz8HqP3TJLJEeOii6WhYZMXrq8oKNYdKPY3WaYJWUoO54folI
bKHkR0tQ4Xor0Jw+cZRLBikmeRiJCA9CLwvAr4ubIDcv+E909kohwOBQZdvgIbCX
dUYPCoFYJyNQxSGT8+HeKJ1muVLYSTGy9yDACGwYOZbpSVw3XWH9+fx4Klq/MXBM
O0AQEM9+JgHSDolqDr2NAjnn/gu9honWKYIVAFHjdgUaZtxcRuljBgHhwei1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrUdpKT65MsPdA
t/89xkY/OiXolTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjNN
TnpqaU15QnRncTFmdDJBYXBxM1ljamp3bldLc2taQkxIMWp2QnJTRHYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzYz
TU56amlNeUJ0Z3ExZnQyQWFwcTNZY2pqd25XS3NrWkJMSDFqdkJyU0R2LzAvRUI1
MURBNEE0RkFFNENCMEY3NDBCN0ZGM0RDNjQ2M0YzQTI1RTg5NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCimFUMA0EAgACMAcDBQAoBCMIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHyjANBgkqhkiG9w0BAQsFAAOCAQEAqHTu9AG1NdlXMAmN
o2kCbi8n/Vo3pbdSzg4gP880QelNjWaY5GaVqiSehlOUuTnteW7EoZAT3IJGpSEz
yg13qaJC5uZCJnLf+o3Ft8ho9nKh0mwB8KKJePJicqCrYgUEAdrsCPOai9ksnFtZ
JXkgW/nuKvbaUnq4NfbvxOXSlMqbiTaFhpj25Y2EI3Y79qQwcWrZlmE3cNVV81ZP
34RXk0lhLQy0ZgavOzVKAJM5pJO6cRtVpvfuWv9+7mNZopeRZBgBPJ9QFrushsH6
7NN8bblYbl3mze82x9V9ka3jOMKYoDnPT2XGJKWSrRebL16nqLtDmqxWiMBoGwNQ
0AMqRw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:09:30 2024 by rpki-client on console-fra.rpki-client.org