Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
File:                     0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer (raw, json)
Hash identifier:          hSCy2GxDV13XYh8rCzY/TmqTvKgrHeANI4JHPIKbNEw=
Subject key identifier:   0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F909D1E0C005ACEC78117CC6FFBE525EB097EB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 May 2025 08:55:23 +0000
Certificate not after:    Thu 21 May 2026 09:00:23 +0000
Subordinate resources:    AS: 61774
                          IP: 200.225.136.0/22
                          IP: 2804:1924::/32
Validation:               Failed, certificate revoked on Wed 18 Jun 2025 01:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:90:9d:1e:0c:00:5a:ce:c7:81:17:cc:6f:fb:e5:25:eb:09:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 08:55:23 2025 GMT
            Not After : May 21 09:00:23 2026 GMT
        Subject: CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:83:d9:3d:5e:3a:ed:79:7e:7a:a3:91:a5:
                    ef:19:3d:32:5f:70:5a:67:df:74:ba:19:10:19:90:
                    c5:d6:59:45:88:60:dd:35:ae:a5:a7:9a:d9:d0:a9:
                    71:e5:3a:a5:68:5e:8c:ca:15:01:4c:37:45:10:3a:
                    e0:12:f9:d8:17:b9:7b:81:78:e2:5c:9b:af:81:78:
                    d6:d7:d2:e4:4d:35:25:97:02:b7:bf:b9:c9:6f:97:
                    16:c0:b1:a8:87:5a:d1:06:71:9d:5f:0f:fe:8b:dd:
                    c0:42:0d:28:98:34:c1:58:51:e8:2e:40:ca:7a:41:
                    12:1f:4e:02:78:5a:ef:63:ec:ea:9f:bd:d0:52:6d:
                    a4:7c:1d:d7:07:3c:73:28:ac:60:b5:ec:5f:17:c7:
                    6a:49:5c:22:12:63:94:63:a8:60:1a:ca:a8:41:e7:
                    22:21:fb:6d:ce:66:6c:80:6e:0f:72:bb:f7:e0:fd:
                    c2:e5:38:06:da:01:34:67:c2:c0:ba:ee:38:e4:6d:
                    15:bd:58:15:02:2a:5a:da:f0:bb:e5:fa:55:7b:f2:
                    fc:0b:37:d7:b1:5a:c4:20:16:a5:6a:f8:d7:bf:87:
                    16:6b:63:8a:5d:50:99:91:7d:a1:79:4b:52:e6:c5:
                    aa:a5:21:04:8a:a2:4c:f1:5e:3a:cf:f8:bd:52:36:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/22
                IPv6:
                  2804:1924::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61774

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:3b:08:23:5f:cb:6c:aa:76:32:45:8e:ec:49:01:4a:27:
         f8:8a:4f:5b:4d:db:d8:51:0b:c0:de:54:7e:f7:1f:6b:c0:09:
         ca:46:b1:1d:71:e6:9c:4d:d1:b2:95:c2:47:f8:51:ba:9a:41:
         64:6d:5e:7a:5b:06:ac:dc:52:93:f7:b3:82:38:ae:0b:3b:7a:
         07:d9:3b:7a:90:66:1d:c0:14:0a:3b:26:72:fb:90:00:03:05:
         4f:4d:47:09:a2:bd:64:1b:6e:bc:cd:ae:d0:8a:dd:73:bb:dd:
         35:fd:8a:f7:65:9c:df:c6:03:12:e8:51:12:49:37:ca:b7:ae:
         8e:3d:e9:17:7a:42:27:56:c7:26:a7:15:dc:1a:15:f4:98:17:
         55:89:bb:d5:73:4f:bc:61:70:17:0e:27:c6:55:2e:d0:ce:d7:
         a5:df:7f:fd:97:b8:97:c3:63:b6:2b:ec:db:ad:f3:a1:f9:97:
         b3:7c:d8:3e:d2:70:26:24:aa:a6:b2:ad:4a:2e:73:26:c5:83:
         a5:c7:17:72:08:b7:fc:4d:07:e1:e3:73:54:e9:aa:b8:b8:ad:
         ee:97:09:10:f4:a1:af:53:0c:57:1b:0b:f3:31:d5:dd:46:e8:
         66:88:2a:6b:1a:84:37:12:12:8a:47:99:ac:32:87:47:32:1b:
         a8:cb:74:8a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUL5CdHgwAWs7HgRfMb/vlJesJfrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MjIwODU1MjNaFw0yNjA1MjEwOTAwMjNaMDMxMTAvBgNV
BAMTKDBDNkJGOEEzQjE1NEEzNTc5REEwMjJDQ0U0MkEwRTczMTFGMTMzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxIPZPV467Xl+eqORpe8ZPTJf
cFpn33S6GRAZkMXWWUWIYN01rqWnmtnQqXHlOqVoXozKFQFMN0UQOuAS+dgXuXuB
eOJcm6+BeNbX0uRNNSWXAre/uclvlxbAsaiHWtEGcZ1fD/6L3cBCDSiYNMFYUegu
QMp6QRIfTgJ4Wu9j7OqfvdBSbaR8HdcHPHMorGC17F8Xx2pJXCISY5RjqGAayqhB
5yIh+23OZmyAbg9yu/fg/cLlOAbaATRnwsC67jjkbRW9WBUCKlra8Lvl+lV78vwL
N9exWsQgFqVq+Ne/hxZrY4pdUJmRfaF5S1LmxaqlIQSKokzxXjrP+L1SNhCXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMa/ijsVSjV52g
IszkKg5zEfEzKDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWZv
cExqVHZacmlYYVI2cEZFUVV3cmNYUHJoblV3Q0VCNmVUSjlxV2c5SGovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlm
b3BMalR2WnJpWGFSNnBGRVFVd3JjWFByaG5Vd0NFQjZlVEo5cVdnOUhqLzAvMEM2
QkY4QTNCMTU0QTM1NzlEQTAyMkNDRTQyQTBFNzMxMUYxMzMyOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyOGIMA0EAgACMAcDBQAoBBkkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxTjANBgkqhkiG9w0BAQsFAAOCAQEAHfk7CCNfy2yqdjJF
juxJAUon+IpPW03b2FELwN5Ufvcfa8AJykaxHXHmnE3RspXCR/hRuppBZG1eelsG
rNxSk/ezgjiuCzt6B9k7epBmHcAUCjsmcvuQAAMFT01HCaK9ZBtuvM2u0Irdc7vd
Nf2K92Wc38YDEuhREkk3yreujj3pF3pCJ1bHJqcV3BoV9JgXVYm71XNPvGFwFw4n
xlUu0M7Xpd9//Ze4l8Njtivs263zofmXs3zYPtJwJiSqprKtSi5zJsWDpccXcgi3
/E0H4eNzVOmquLit7pcJEPShr1MMVxsL8zHV3UboZogqaxqENxISikeZrDKHRzIb
qMt0ig==
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:38:19 2025 by rpki-client