Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9100132DB58756EEA65FCBA677E9704941C852C8.cer
File:                     9100132DB58756EEA65FCBA677E9704941C852C8.cer (raw, json)
Hash identifier:          jwtxYIS5DnbK+PsIAYXF9swLcv3OMQ04xWX9cgStEUs=
Subject key identifier:   91:00:13:2D:B5:87:56:EE:A6:5F:CB:A6:77:E9:70:49:41:C8:52:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09A35AE4900FC144C523BBEE30D86B46FA05FE31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/9100132DB58756EEA65FCBA677E9704941C852C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Oct 2024 18:43:45 +0000
Certificate not after:    Tue 30 Sep 2025 18:48:45 +0000
Subordinate resources:    AS: 264337
                          IP: 138.122.148.0/22
                          IP: 2804:2648::/32
Validation:               Failed, certificate revoked on Tue 01 Oct 2024 19:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:5a:e4:90:0f:c1:44:c5:23:bb:ee:30:d8:6b:46:fa:05:fe:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 18:43:45 2024 GMT
            Not After : Sep 30 18:48:45 2025 GMT
        Subject: CN=9100132DB58756EEA65FCBA677E9704941C852C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:2f:5a:8b:a3:fc:3d:00:5c:1a:16:57:a9:
                    9a:b6:52:ca:20:be:b4:fa:4d:4c:82:4f:62:fa:86:
                    90:88:a1:d8:08:c0:d5:72:20:03:39:4d:d0:16:9c:
                    49:e1:50:bb:9d:0b:b0:e6:eb:1b:f6:79:c3:f6:86:
                    c0:f1:a2:08:59:54:cc:8f:0d:41:49:c2:d2:f2:d7:
                    ef:d7:0f:67:b5:3b:5e:a3:7c:37:8e:8b:9b:53:8f:
                    f6:0c:ad:b7:4b:3b:74:14:07:4f:4a:67:50:13:bb:
                    3b:67:b7:c2:2e:49:9d:11:14:70:4e:48:52:99:7c:
                    61:9f:36:f0:be:88:ae:0b:b1:5d:f3:c1:df:f4:ca:
                    ed:8e:55:7e:47:17:88:7f:e5:aa:66:22:a7:06:c5:
                    ef:08:eb:c9:a3:6b:55:a7:e0:cf:02:40:07:5c:b5:
                    c5:34:57:d2:5a:8a:ff:17:9f:9c:0f:7b:aa:59:89:
                    67:05:d3:17:45:f6:39:bf:24:6e:1f:01:32:d0:c8:
                    82:06:af:01:96:61:e7:56:fc:e6:24:24:61:34:b2:
                    38:b5:93:45:31:71:15:92:48:58:e3:3e:de:1c:9c:
                    0e:da:c7:2b:85:ef:08:35:62:1e:0f:2a:a8:8e:a7:
                    80:90:ed:63:28:ec:2e:ed:11:df:e0:b1:4a:8c:a1:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:00:13:2D:B5:87:56:EE:A6:5F:CB:A6:77:E9:70:49:41:C8:52:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/9100132DB58756EEA65FCBA677E9704941C852C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.148.0/22
                IPv6:
                  2804:2648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264337

    Signature Algorithm: sha256WithRSAEncryption
         58:df:58:88:8c:70:31:8d:39:cb:13:61:6e:58:d0:73:0c:1a:
         a8:0e:69:f8:46:a3:4e:ab:56:93:34:c2:66:0f:dd:13:72:58:
         f9:8b:db:4d:ad:a6:7d:3f:20:d8:24:00:a1:62:60:be:85:15:
         03:59:fa:cf:7b:5b:00:2c:09:ee:35:a2:be:83:09:df:ac:d4:
         e4:0e:28:4a:8b:cd:19:83:79:2f:68:15:4d:32:84:de:c3:7f:
         b3:ee:6f:eb:ef:3f:12:7b:0b:24:0a:0a:25:16:96:cd:38:be:
         f3:b9:c1:3d:b5:81:2e:95:f0:53:c8:92:29:d6:e9:62:a6:12:
         9c:72:a1:db:76:fd:64:5b:93:28:48:90:d5:4c:a7:db:4b:6d:
         69:df:27:29:d8:85:c1:19:7f:b4:3d:9c:b7:56:ba:cc:bf:76:
         1a:f5:d6:6e:4f:4d:41:25:46:11:88:6c:dd:ad:c1:04:06:20:
         91:28:45:cc:32:12:04:44:96:cb:29:ef:92:4f:e4:4a:d0:0a:
         f8:94:c3:73:bb:12:b1:5c:cd:17:84:cd:9e:63:9c:9e:3e:49:
         20:b0:d8:66:a7:a1:00:cb:92:78:5c:3f:1d:d0:d3:db:13:38:
         c4:3a:55:00:41:71:66:de:5d:eb:38:4a:ca:e1:24:82:e7:b7:
         73:c0:e5:3c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCaNa5JAPwUTFI7vuMNhrRvoF/jEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDExODQzNDVaFw0yNTA5MzAxODQ4NDVaMDMxMTAvBgNV
BAMTKDkxMDAxMzJEQjU4NzU2RUVBNjVGQ0JBNjc3RTk3MDQ5NDFDODUyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ri9ai6P8PQBcGhZXqZq2Usog
vrT6TUyCT2L6hpCIodgIwNVyIAM5TdAWnEnhULudC7Dm6xv2ecP2hsDxoghZVMyP
DUFJwtLy1+/XD2e1O16jfDeOi5tTj/YMrbdLO3QUB09KZ1ATuztnt8IuSZ0RFHBO
SFKZfGGfNvC+iK4LsV3zwd/0yu2OVX5HF4h/5apmIqcGxe8I68mja1Wn4M8CQAdc
tcU0V9Jaiv8Xn5wPe6pZiWcF0xdF9jm/JG4fATLQyIIGrwGWYedW/OYkJGE0sji1
k0UxcRWSSFjjPt4cnA7axyuF7wg1Yh4PKqiOp4CQ7WMo7C7tEd/gsUqMoXJ5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRABMttYdW7qZf
y6Z36XBJQchSyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnMx
VDRjSmVQVWFzcFc4SEs4Q0JEMmVGRHZHUXhUeHpQR0FiOERxUmVKblovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZz
MVQ0Y0plUFVhc3BXOEhLOENCRDJlRkR2R1F4VHh6UEdBYjhEcVJlSm5aLzAvOTEw
MDEzMkRCNTg3NTZFRUE2NUZDQkE2NzdFOTcwNDk0MUM4NTJDOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCinqUMA0EAgACMAcDBQAoBCZIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQIkTANBgkqhkiG9w0BAQsFAAOCAQEAWN9YiIxwMY05yxNh
bljQcwwaqA5p+EajTqtWkzTCZg/dE3JY+YvbTa2mfT8g2CQAoWJgvoUVA1n6z3tb
ACwJ7jWivoMJ36zU5A4oSovNGYN5L2gVTTKE3sN/s+5v6+8/EnsLJAoKJRaWzTi+
87nBPbWBLpXwU8iSKdbpYqYSnHKh23b9ZFuTKEiQ1Uyn20ttad8nKdiFwRl/tD2c
t1a6zL92GvXWbk9NQSVGEYhs3a3BBAYgkShFzDISBESWyynvkk/kStAK+JTDc7sS
sVzNF4TNnmOcnj5JILDYZqehAMuSeFw/HdDT2xM4xDpVAEFxZt5d6zhKyuEkgue3
c8DlPA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:47 2025 by rpki-client