Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer
File:                     ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer (raw, json)
Hash identifier:          dzXIRInBcdQYPmsgnYCS4jHbZnFnjOX47fp431Xyo0I=
Subject key identifier:   EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       450DE13DD9ABEA664C97753F3F0E07B98442C647
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 12:39:41 +0000
Certificate not after:    Mon 22 Dec 2025 12:44:41 +0000
Subordinate resources:    AS: 52898
                          IP: 168.227.156.0/22
                          IP: 177.184.64.0/20
                          IP: 2804:a9c::/32
Validation:               Failed, certificate revoked on Thu 16 Jan 2025 07:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0d:e1:3d:d9:ab:ea:66:4c:97:75:3f:3f:0e:07:b9:84:42:c6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 12:39:41 2024 GMT
            Not After : Dec 22 12:44:41 2025 GMT
        Subject: CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:ca:de:4b:3d:2d:8a:e0:00:61:e2:0e:9b:
                    4a:80:75:be:cb:d8:71:26:47:af:bd:9f:bd:20:bc:
                    3c:cf:ad:6e:2c:78:4f:51:35:6f:62:73:bd:ca:74:
                    4c:c4:2b:f4:27:f2:56:a6:ba:ff:b7:f6:fe:f9:e4:
                    82:73:47:ca:2e:99:e2:ce:64:4d:c2:72:b5:84:d9:
                    83:55:b0:70:84:5a:97:e5:7e:0b:16:80:fa:ec:6a:
                    ee:6c:05:16:79:3d:dc:a4:bd:7a:5a:88:ec:6c:8e:
                    f2:26:97:3c:c2:eb:a5:50:f3:46:66:9f:1f:33:03:
                    e8:a2:0c:d7:f3:12:fe:e2:cd:1d:40:03:8d:61:ac:
                    fc:41:23:48:4a:1a:fb:05:26:e1:14:e1:47:a7:e7:
                    91:e5:59:60:6d:68:1d:81:e7:f0:ca:58:fe:bc:f4:
                    15:9c:44:f3:d0:64:ce:f7:61:44:ca:f7:60:b5:db:
                    c1:87:47:b4:4c:69:b4:13:ae:c8:30:b1:42:39:3a:
                    f3:0e:b7:80:78:33:37:87:3d:4b:a7:a3:a0:b5:be:
                    66:48:2a:72:31:7c:65:f6:b0:d8:3d:76:f0:ff:9d:
                    91:16:e3:f1:a5:17:ab:3f:82:cc:8c:a9:b9:3d:17:
                    b1:0f:25:af:38:49:45:28:d9:48:3a:64:fc:02:54:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22
                  177.184.64.0/20
                IPv6:
                  2804:a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52898

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:58:1b:9f:02:2c:8b:a4:70:0f:cd:39:e6:cc:5d:92:3b:
         47:36:01:7a:85:6d:99:97:85:62:f8:6b:79:54:84:6c:4a:ff:
         be:f0:41:0e:9d:f4:77:41:ab:a9:f1:23:b0:3d:55:89:05:e4:
         74:d2:86:c3:83:32:6f:18:67:3e:24:b9:4f:7d:bd:33:5f:82:
         74:f9:02:6a:e0:e9:e3:33:9a:06:58:dc:53:1e:d9:82:25:cb:
         00:02:43:ce:83:a3:b8:dd:26:21:15:02:d1:11:b9:44:41:1a:
         18:ae:19:bb:47:f5:a4:8c:e8:ed:a7:18:d6:d4:4e:05:ae:e2:
         47:d5:7d:c5:bd:d9:a2:d7:2a:22:01:31:48:eb:e5:59:a6:80:
         51:7f:7a:39:de:7c:5d:8b:79:22:81:80:9b:6a:b3:93:fc:e9:
         03:e1:17:f9:91:05:bb:e0:82:10:63:fc:76:06:db:75:6f:47:
         7f:da:32:d7:de:eb:f5:64:17:d8:b8:b2:bb:e3:f4:a0:9f:7d:
         c8:17:17:de:12:49:e6:84:14:8a:5e:8c:9a:10:d6:7a:aa:e0:
         31:43:83:e7:80:38:83:e6:24:19:d7:5c:fb:d6:bc:a2:37:bf:
         96:e3:4f:b8:65:4c:19:c0:f4:8c:1d:55:73:eb:52:1a:59:98:
         e4:9b:9a:a1
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIURQ3hPdmr6mZMl3U/Pw4HuYRCxkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMjMxMjM5NDFaFw0yNTEyMjIxMjQ0NDFaMDMxMTAvBgNV
BAMTKEVDRkFCNkFDOTM3NEM2NTE4QUM5QjI1ODhDRTk4NDNFODlGRDg2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMsreSz0tiuAAYeIOm0qAdb7L
2HEmR6+9n70gvDzPrW4seE9RNW9ic73KdEzEK/Qn8lamuv+39v755IJzR8oumeLO
ZE3CcrWE2YNVsHCEWpflfgsWgPrsau5sBRZ5PdykvXpaiOxsjvImlzzC66VQ80Zm
nx8zA+iiDNfzEv7izR1AA41hrPxBI0hKGvsFJuEU4Uen55HlWWBtaB2B5/DKWP68
9BWcRPPQZM73YUTK92C128GHR7RMabQTrsgwsUI5OvMOt4B4MzeHPUuno6C1vmZI
KnIxfGX2sNg9dvD/nZEW4/GlF6s/gsyMqbk9F7EPJa84SUUo2Ug6ZPwCVKMZAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs+rask3TGUYrJ
sliM6YQ+if2GVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Fu
aEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4cTQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNh
bmhHWGNHYmU3bXpIU2RYUzFaMWY0cGhjU0NFelBSSFJvc1dRcWVleHE0LzAvRUNG
QUI2QUM5Mzc0QzY1MThBQzlCMjU4OENFOTg0M0U4OUZEODY1NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqOOcAwQEsbhAMA0EAgACMAcDBQAoBAqcMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDOojANBgkqhkiG9w0BAQsFAAOCAQEAnXVYG58C
LIukcA/NOebMXZI7RzYBeoVtmZeFYvhreVSEbEr/vvBBDp30d0GrqfEjsD1ViQXk
dNKGw4MybxhnPiS5T329M1+CdPkCauDp4zOaBljcUx7ZgiXLAAJDzoOjuN0mIRUC
0RG5REEaGK4Zu0f1pIzo7acY1tROBa7iR9V9xb3ZotcqIgExSOvlWaaAUX96Od58
XYt5IoGAm2qzk/zpA+EX+ZEFu+CCEGP8dgbbdW9Hf9oy197r9WQX2Liyu+P0oJ99
yBcX3hJJ5oQUil6MmhDWeqrgMUOD54A4g+YkGddc+9a8oje/luNPuGVMGcD0jB1V
c+tSGlmY5JuaoQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:15 2025 by rpki-client