Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E0F4F28DDE8036CE68B00D5BE9F594D61C9BC994.cer
File:                     E0F4F28DDE8036CE68B00D5BE9F594D61C9BC994.cer (raw, json)
Hash identifier:          XP33op0RxDdd/OlxQitPc0S0tpeuGp6VXpBshCV4OUc=
Subject key identifier:   E0:F4:F2:8D:DE:80:36:CE:68:B0:0D:5B:E9:F5:94:D6:1C:9B:C9:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F3C39774ADE2E2691B9047D67D7A6C6C49E47F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/E0F4F28DDE8036CE68B00D5BE9F594D61C9BC994.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jul 2024 14:53:59 +0000
Certificate not after:    Wed 30 Jul 2025 14:58:59 +0000
Subordinate resources:    AS: 268764
                          IP: 45.172.116.0/22
                          IP: 2804:5a50::/32
Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3c:39:77:4a:de:2e:26:91:b9:04:7d:67:d7:a6:c6:c4:9e:47:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 31 14:53:59 2024 GMT
            Not After : Jul 30 14:58:59 2025 GMT
        Subject: CN=E0F4F28DDE8036CE68B00D5BE9F594D61C9BC994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:a7:d9:c7:9b:13:26:68:3f:7e:1f:9c:c4:
                    bf:27:1e:d3:e2:bb:62:0e:c4:25:23:b2:25:20:35:
                    1c:18:99:d6:b1:11:2c:9c:e3:fb:68:1d:ed:68:78:
                    2b:76:55:e2:0e:2c:05:83:e6:a5:0a:4c:f4:fe:e0:
                    b5:3b:70:37:d7:1e:3a:6c:1b:87:2e:aa:7b:a9:cc:
                    0d:5f:6c:b4:6e:fc:5a:b0:fa:24:97:b4:16:52:7e:
                    a8:5f:51:79:da:13:43:c7:a3:1c:cc:1f:09:fd:a6:
                    50:13:90:ea:65:db:e7:21:e5:de:a7:10:22:9d:91:
                    cc:80:bc:49:05:ad:89:c1:28:3e:6a:fc:42:51:d1:
                    1d:0c:86:0c:ce:57:36:98:89:7d:a5:c7:ba:df:96:
                    fa:77:ac:1f:d7:de:46:05:50:9f:79:99:e2:b4:18:
                    db:ba:1c:86:c7:ac:91:8a:5e:fd:ad:e9:d3:61:7f:
                    de:0e:ab:21:c6:03:df:3f:2e:bd:72:6a:c0:d3:84:
                    53:20:10:1c:1f:30:76:df:c7:8d:59:d6:01:25:fe:
                    9d:98:5a:db:36:f9:ea:1f:e8:51:85:c1:0a:e2:06:
                    e3:ab:fd:0e:cd:7f:49:17:f1:28:6d:48:69:ad:45:
                    70:df:29:e3:fc:27:73:dd:11:2f:c7:24:57:36:bf:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:F4:F2:8D:DE:80:36:CE:68:B0:0D:5B:E9:F5:94:D6:1C:9B:C9:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/E0F4F28DDE8036CE68B00D5BE9F594D61C9BC994.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.116.0/22
                IPv6:
                  2804:5a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268764

    Signature Algorithm: sha256WithRSAEncryption
         01:93:c8:dd:41:df:fb:51:3a:46:96:bd:3a:85:2d:8d:2c:aa:
         eb:62:a9:cf:7f:e6:f9:41:11:3b:6d:8c:ad:72:11:b9:1a:25:
         28:96:0a:e3:a6:60:7f:68:be:d2:d2:61:33:ae:4a:09:ac:7b:
         a9:85:b0:13:de:41:6f:b7:c8:89:6c:f5:5b:8c:d9:09:24:7a:
         32:6c:29:a7:09:8e:09:5c:d0:fc:55:a4:5e:05:28:ad:dd:78:
         42:87:eb:03:95:8d:f6:91:64:44:24:7b:c7:d1:fa:2f:56:ef:
         08:15:76:90:8d:25:6f:58:76:1e:3c:85:1e:a6:b8:29:01:b7:
         bd:d9:30:02:15:a7:72:27:1b:bd:37:f1:25:b8:05:78:60:f4:
         ad:13:8d:b4:c2:61:02:04:e3:02:16:81:da:57:a2:11:ae:c3:
         35:e1:0b:dc:3a:96:ae:75:2e:52:13:10:21:07:1b:4a:84:5f:
         ce:07:9c:32:6f:4e:58:25:8c:24:ac:30:0d:3a:e0:6a:2a:84:
         63:64:ec:b8:fd:22:8c:1f:7f:cc:64:92:7d:2e:3b:07:1c:a4:
         3a:53:63:8d:57:05:03:cc:88:10:a6:df:57:06:bf:12:fb:b7:
         06:c1:a5:b5:e3:68:20:b0:93:61:5a:6e:c6:59:4a:5b:cb:e1:
         86:5b:09:a3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULzw5d0reLiaRuQR9Z9emxsSeR/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MzExNDUzNTlaFw0yNTA3MzAxNDU4NTlaMDMxMTAvBgNV
BAMTKEUwRjRGMjhEREU4MDM2Q0U2OEIwMEQ1QkU5RjU5NEQ2MUM5QkM5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtqfZx5sTJmg/fh+cxL8nHtPi
u2IOxCUjsiUgNRwYmdaxESyc4/toHe1oeCt2VeIOLAWD5qUKTPT+4LU7cDfXHjps
G4cuqnupzA1fbLRu/Fqw+iSXtBZSfqhfUXnaE0PHoxzMHwn9plATkOpl2+ch5d6n
ECKdkcyAvEkFrYnBKD5q/EJR0R0MhgzOVzaYiX2lx7rflvp3rB/X3kYFUJ95meK0
GNu6HIbHrJGKXv2t6dNhf94OqyHGA98/Lr1yasDThFMgEBwfMHbfx41Z1gEl/p2Y
Wts2+eof6FGFwQriBuOr/Q7Nf0kX8ShtSGmtRXDfKeP8J3PdES/HJFc2v+Q3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTg9PKN3oA2zmiw
DVvp9ZTWHJvJlDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFRG
cVE0dmkzZHNUM05pYlFVQjJLU0RLOVBScHRuTTlWNWY5dEpza2M3dUsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhU
RnFRNHZpM2RzVDNOaWJRVUIyS1NESzlQUnB0bk05VjVmOXRKc2tjN3VLLzAvRTBG
NEYyOERERTgwMzZDRTY4QjAwRDVCRTlGNTk0RDYxQzlCQzk5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLax0MA0EAgACMAcDBQAoBFpQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZ3DANBgkqhkiG9w0BAQsFAAOCAQEAAZPI3UHf+1E6Rpa9
OoUtjSyq62Kpz3/m+UERO22MrXIRuRolKJYK46Zgf2i+0tJhM65KCax7qYWwE95B
b7fIiWz1W4zZCSR6MmwppwmOCVzQ/FWkXgUord14QofrA5WN9pFkRCR7x9H6L1bv
CBV2kI0lb1h2HjyFHqa4KQG3vdkwAhWncicbvTfxJbgFeGD0rRONtMJhAgTjAhaB
2leiEa7DNeEL3DqWrnUuUhMQIQcbSoRfzgecMm9OWCWMJKwwDTrgaiqEY2TsuP0i
jB9/zGSSfS47BxykOlNjjVcFA8yIEKbfVwa/Evu3BsGlteNoILCTYVpuxllKW8vh
hlsJow==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:24:28 2025 by rpki-client