Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
File:                     F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer (raw, json)
Hash identifier:          QbiLwqntm1QY4gXp/tNe3b0SQBN7o/n+F0lePUytd/s=
Subject key identifier:   F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       10ED56973EA807B5DFBCEEE5AF6A9FBA997005FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 18:30:41 +0000
Certificate not after:    Wed 04 Feb 2026 18:35:41 +0000
Subordinate resources:    AS: 264162
                          IP: 138.97.116.0/22
                          IP: 2804:2370::/32
Validation:               Failed, certificate revoked on Wed 05 Feb 2025 19:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ed:56:97:3e:a8:07:b5:df:bc:ee:e5:af:6a:9f:ba:99:70:05:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  5 18:30:41 2025 GMT
            Not After : Feb  4 18:35:41 2026 GMT
        Subject: CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:d1:8b:a5:5a:02:39:d6:ef:5a:a5:18:55:
                    a3:af:ba:bc:b9:8a:96:8e:78:21:df:68:07:29:43:
                    a3:af:ac:aa:47:51:19:b7:c1:e4:91:4b:7e:88:15:
                    fe:0c:c8:6c:1b:15:47:49:7b:e2:2e:c2:35:a9:c7:
                    7f:75:97:f5:aa:38:ff:78:67:72:6e:47:77:1a:94:
                    23:3b:0d:0d:64:3b:6e:1d:31:36:22:cd:03:90:b9:
                    b3:27:42:25:b3:57:08:f3:8f:3f:c3:44:9b:02:b1:
                    20:5c:57:00:c2:8a:5f:01:e4:df:d0:5b:f8:f8:cc:
                    e5:b6:91:d7:8d:20:0e:e7:f5:04:b8:78:66:c4:0a:
                    e7:c7:fb:e9:c4:3e:50:c3:ea:72:86:7a:26:94:7a:
                    81:36:07:42:61:43:59:5c:7a:a8:71:2f:f7:44:52:
                    d7:ea:17:cb:b5:a4:24:94:b8:28:d0:3d:30:aa:2f:
                    0f:d9:5d:94:86:f9:31:2a:74:b2:df:81:99:f5:27:
                    21:db:45:eb:f3:25:fa:9d:79:99:a6:fd:04:33:7d:
                    c3:ab:db:25:b7:70:21:b9:07:0f:9d:b5:38:93:98:
                    e9:f5:eb:d4:73:c8:fc:da:3a:15:05:c1:78:82:88:
                    23:b5:b9:87:4d:65:d3:0d:68:23:ee:ed:2e:6a:fe:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.116.0/22
                IPv6:
                  2804:2370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264162

    Signature Algorithm: sha256WithRSAEncryption
         2c:24:6b:2c:eb:73:f2:09:ea:6f:52:9a:b6:00:fa:59:52:82:
         a7:c6:ef:27:44:90:43:03:eb:bd:b4:bc:c0:3a:cb:56:c1:5e:
         b0:3f:39:b7:2c:a9:41:30:1d:7f:54:34:f3:46:2e:21:f7:66:
         19:3c:a7:23:bb:4d:42:51:fd:89:58:9b:59:72:d2:14:79:53:
         02:ec:49:96:7b:b3:fd:3e:e6:bc:8a:4e:7f:92:55:b4:c1:ed:
         b5:11:5b:26:19:33:48:8a:44:f3:e5:48:0a:c2:1b:9c:79:5e:
         3f:f4:6a:06:f2:7a:11:36:7f:96:a4:70:de:69:ca:23:09:11:
         98:95:b7:a2:78:b5:66:0c:d4:d7:61:05:93:f6:6c:95:5f:73:
         a8:85:9b:91:b0:10:58:35:2c:b1:c5:ad:12:98:51:55:8a:f6:
         c3:b3:63:5f:98:1d:42:63:b5:2a:b3:79:97:20:41:8c:5e:c5:
         a3:c3:a7:bc:b4:c9:e9:dc:81:23:47:e1:89:a6:b9:ff:cb:2c:
         30:9f:11:1a:55:05:fc:b3:dd:ba:8d:12:60:1c:9d:07:82:37:
         3a:e3:57:92:13:9f:a2:6e:73:6b:d1:d3:ce:6d:fa:5d:91:67:
         be:0a:49:63:3b:ec:65:8b:26:85:e2:db:1f:0b:d6:c2:0d:a6:
         63:dd:d6:c1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEO1Wlz6oB7XfvO7lr2qfuplwBf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDUxODMwNDFaFw0yNjAyMDQxODM1NDFaMDMxMTAvBgNV
BAMTKEY3MzdFNjA5QzlBRTk1OTVEQzU1MDI1RkM5NUM4QkY2MzI0NEU4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BtGLpVoCOdbvWqUYVaOvury5
ipaOeCHfaAcpQ6OvrKpHURm3weSRS36IFf4MyGwbFUdJe+IuwjWpx391l/WqOP94
Z3JuR3calCM7DQ1kO24dMTYizQOQubMnQiWzVwjzjz/DRJsCsSBcVwDCil8B5N/Q
W/j4zOW2kdeNIA7n9QS4eGbECufH++nEPlDD6nKGeiaUeoE2B0JhQ1lceqhxL/dE
UtfqF8u1pCSUuCjQPTCqLw/ZXZSG+TEqdLLfgZn1JyHbRevzJfqdeZmm/QQzfcOr
2yW3cCG5Bw+dtTiTmOn169RzyPzaOhUFwXiCiCO1uYdNZdMNaCPu7S5q/ok/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3N+YJya6VldxV
Al/JXIv2MkTo8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRy
bXAyZHBqMlZLenZHOWZlZGdDeGs3Vm5KcmlmZ0xxQTFCOGJyNmdDU1IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk
cm1wMmRwajJWS3p2RzlmZWRnQ3hrN1ZuSnJpZmdMcUExQjhicjZnQ1NSLzAvRjcz
N0U2MDlDOUFFOTU5NURDNTUwMjVGQzk1QzhCRjYzMjQ0RThGMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCimF0MA0EAgACMAcDBQAoBCNwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQH4jANBgkqhkiG9w0BAQsFAAOCAQEALCRrLOtz8gnqb1Ka
tgD6WVKCp8bvJ0SQQwPrvbS8wDrLVsFesD85tyypQTAdf1Q080YuIfdmGTynI7tN
QlH9iVibWXLSFHlTAuxJlnuz/T7mvIpOf5JVtMHttRFbJhkzSIpE8+VICsIbnHle
P/RqBvJ6ETZ/lqRw3mnKIwkRmJW3oni1ZgzU12EFk/ZslV9zqIWbkbAQWDUsscWt
EphRVYr2w7NjX5gdQmO1KrN5lyBBjF7Fo8OnvLTJ6dyBI0fhiaa5/8ssMJ8RGlUF
/LPduo0SYBydB4I3OuNXkhOfom5za9HTzm36XZFnvgpJYzvsZYsmheLbHwvWwg2m
Y93WwQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:24 2025 by rpki-client