Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
File:                     B4F54174CAB335222D5C3A179199900DBAC503F6.cer (raw, json)
Hash identifier:          f+ueUG4bqtW4Tg57fEGd+v1vH2QShGg3fR5OoeAaDv8=
Subject key identifier:   B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C6AE1750236146D827D0A7F6436608CF0BD55DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Apr 2025 14:54:20 +0000
Certificate not after:    Mon 13 Apr 2026 14:59:20 +0000
Subordinate resources:    AS: 267256
                          IP: 45.232.48.0/22
                          IP: 2804:4aac::/32
Validation:               Failed, certificate revoked on Mon 14 Apr 2025 18:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6a:e1:75:02:36:14:6d:82:7d:0a:7f:64:36:60:8c:f0:bd:55:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 14 14:54:20 2025 GMT
            Not After : Apr 13 14:59:20 2026 GMT
        Subject: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:68:91:1f:db:1c:0c:cc:c8:c4:f8:51:36:
                    dc:62:c2:33:dc:79:e5:e8:59:ad:ba:e5:46:5a:59:
                    2e:f1:16:d2:6d:84:aa:e6:bd:ba:1b:27:d1:4f:b8:
                    35:3f:65:6d:33:80:26:0c:0b:0b:af:65:96:6c:00:
                    7a:4d:6c:19:95:a0:c9:d7:59:6c:d7:1b:d4:a2:1d:
                    0d:46:74:f2:96:25:95:ba:a0:d2:fe:69:c5:d8:68:
                    42:d6:fc:eb:d6:8b:e7:aa:cc:bd:27:30:d6:78:55:
                    7f:c0:2e:2a:3b:18:7b:02:c8:9f:b2:bc:56:17:7c:
                    44:3d:90:6e:34:80:80:b3:d2:7a:a2:d8:b6:a1:8a:
                    4b:c9:b2:b3:c9:bb:58:8e:ae:e3:fb:b6:34:cd:ab:
                    87:fb:fc:30:f0:8a:32:20:52:20:82:be:2a:93:37:
                    c9:aa:c0:90:a8:37:ab:8f:f9:28:cd:8a:b9:93:fc:
                    24:dd:bf:54:9c:7e:9e:cb:10:43:06:b6:0f:cf:aa:
                    5f:66:1b:4b:c2:88:4b:61:28:0c:f1:e0:0b:49:dd:
                    1b:1c:f3:3b:70:e8:d0:73:57:21:72:84:b7:1f:07:
                    3b:87:85:c1:a8:50:63:fc:22:14:b2:89:bf:d2:86:
                    45:89:0b:97:a0:16:19:14:c9:d3:ea:be:86:76:f2:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/22
                IPv6:
                  2804:4aac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267256

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:d4:61:a8:29:61:19:18:97:9e:eb:9d:1a:db:59:18:be:
         82:7f:a3:b5:78:dd:1c:77:7f:6b:cf:d1:21:92:bf:cd:61:7a:
         1b:9b:20:a2:20:1a:06:fa:ce:65:aa:bf:eb:fb:b1:a3:56:43:
         1c:5f:80:be:e9:d1:64:3b:e3:08:22:0b:54:c4:e2:4f:ca:ad:
         ff:6e:91:87:e8:ec:37:8f:54:b0:7c:97:08:44:85:2c:1b:52:
         9b:d7:17:63:0f:54:62:e4:68:93:59:20:38:c1:4f:29:6e:0b:
         86:99:21:0e:a8:58:6d:cb:88:1c:35:6d:f4:fd:70:00:90:05:
         b4:91:22:d2:93:b9:2a:58:48:f9:58:c5:0b:b2:38:65:a0:c1:
         a5:f1:ca:f6:22:46:a3:73:ab:2f:93:5c:fd:d5:e8:e2:3f:3c:
         9c:25:48:a8:f9:ec:d8:32:48:ea:95:85:f3:68:f3:ec:cb:50:
         8e:4b:a4:54:72:7d:f5:df:a4:32:65:e1:46:8f:69:3a:c0:a4:
         4d:e1:77:00:80:d8:3f:89:1c:68:54:90:3d:72:6c:66:fa:3b:
         4d:a8:98:72:63:9c:38:c5:e3:d8:11:d8:fd:7b:09:88:71:4c:
         fe:c2:d8:71:b0:14:28:18:85:60:1d:57:ad:ef:33:79:c5:af:
         4d:b3:81:08
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfGrhdQI2FG2CfQp/ZDZgjPC9VdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTQxNDU0MjBaFw0yNjA0MTMxNDU5MjBaMDMxMTAvBgNV
BAMTKEI0RjU0MTc0Q0FCMzM1MjIyRDVDM0ExNzkxOTk5MDBEQkFDNTAzRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTh2iRH9scDMzIxPhRNtxiwjPc
eeXoWa265UZaWS7xFtJthKrmvbobJ9FPuDU/ZW0zgCYMCwuvZZZsAHpNbBmVoMnX
WWzXG9SiHQ1GdPKWJZW6oNL+acXYaELW/OvWi+eqzL0nMNZ4VX/ALio7GHsCyJ+y
vFYXfEQ9kG40gICz0nqi2LahikvJsrPJu1iOruP7tjTNq4f7/DDwijIgUiCCviqT
N8mqwJCoN6uP+SjNirmT/CTdv1Scfp7LEEMGtg/Pql9mG0vCiEthKAzx4AtJ3Rsc
8ztw6NBzVyFyhLcfBzuHhcGoUGP8IhSyib/ShkWJC5egFhkUydPqvoZ28swrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS09UF0yrM1Ii1c
OheRmZANusUD9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzVl
SzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVprbmgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM1
ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzEvQjRG
NTQxNzRDQUIzMzUyMjJENUMzQTE3OTE5OTkwMERCQUM1MDNGNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLegwMA0EAgACMAcDBQAoBEqsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQT+DANBgkqhkiG9w0BAQsFAAOCAQEAnZnUYagpYRkYl57r
nRrbWRi+gn+jtXjdHHd/a8/RIZK/zWF6G5sgoiAaBvrOZaq/6/uxo1ZDHF+AvunR
ZDvjCCILVMTiT8qt/26Rh+jsN49UsHyXCESFLBtSm9cXYw9UYuRok1kgOMFPKW4L
hpkhDqhYbcuIHDVt9P1wAJAFtJEi0pO5KlhI+VjFC7I4ZaDBpfHK9iJGo3OrL5Nc
/dXo4j88nCVIqPns2DJI6pWF82jz7MtQjkukVHJ99d+kMmXhRo9pOsCkTeF3AIDY
P4kcaFSQPXJsZvo7TaiYcmOcOMXj2BHY/XsJiHFM/sLYcbAUKBiFYB1Xre8zecWv
TbOBCA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:10:15 2025 by rpki-client