Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE34B40F14C08C7F9D138FEB5FD7706634BE16FB.cer
File:                     FE34B40F14C08C7F9D138FEB5FD7706634BE16FB.cer (raw, json)
Hash identifier:          nLFNc7vExfADwGsfi4uhfwW1RIew3yH8YVTDMw8hsU8=
Subject key identifier:   FE:34:B4:0F:14:C0:8C:7F:9D:13:8F:EB:5F:D7:70:66:34:BE:16:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       609EFBEEB45B29AC3A337A91689513C7D6B61982
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FE34B40F14C08C7F9D138FEB5FD7706634BE16FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Feb 2025 18:14:01 +0000
Certificate not after:    Mon 09 Feb 2026 18:19:01 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 00:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9e:fb:ee:b4:5b:29:ac:3a:33:7a:91:68:95:13:c7:d6:b6:19:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 10 18:14:01 2025 GMT
            Not After : Feb  9 18:19:01 2026 GMT
        Subject: CN=FE34B40F14C08C7F9D138FEB5FD7706634BE16FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:44:87:c8:1b:01:eb:4b:eb:c6:49:31:dc:
                    9e:d8:36:88:f6:4e:bc:08:c3:22:77:4b:90:62:31:
                    3b:b9:17:d5:47:6c:00:0e:41:d2:4e:9d:b2:26:d2:
                    a2:a2:ae:94:e2:6f:dd:13:4f:76:ad:be:ea:ff:a5:
                    7b:93:33:06:fc:27:c5:67:dd:69:11:34:00:94:9b:
                    de:c9:b6:93:0e:49:71:37:ab:8a:c4:52:a6:5d:9e:
                    82:04:f5:39:28:9f:1b:df:92:df:27:11:5e:62:46:
                    26:d3:33:ea:df:25:a7:7b:d0:91:66:d6:32:8d:61:
                    29:66:93:a1:c6:48:17:a8:23:6f:e4:1b:94:62:19:
                    ef:9b:4d:e1:f0:7e:c9:a3:17:4c:86:8a:73:7e:71:
                    0f:6a:2d:87:6d:53:ce:c7:c5:44:db:eb:d2:4a:86:
                    3b:b3:6e:2f:60:e0:b8:1b:49:88:29:04:7e:18:7f:
                    56:2e:93:a5:c4:2e:71:bb:2e:3c:6a:85:c7:fd:68:
                    88:60:b2:f9:9e:e0:93:af:e8:60:ae:ab:fd:d6:65:
                    78:59:5a:47:53:cc:3d:4c:05:04:aa:be:76:be:7f:
                    f1:8f:47:84:df:61:ac:09:45:f4:d1:98:c2:17:01:
                    ea:aa:2e:5b:6f:e9:2a:70:01:a7:00:d5:6d:16:51:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:34:B4:0F:14:C0:8C:7F:9D:13:8F:EB:5F:D7:70:66:34:BE:16:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FE34B40F14C08C7F9D138FEB5FD7706634BE16FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         d4:b4:be:e6:64:d5:ee:25:d5:38:78:ad:d7:40:68:67:a8:21:
         e8:46:40:21:38:11:2d:2f:ef:49:2b:2f:c4:13:23:09:ec:9c:
         52:58:7b:f4:04:f1:79:a5:cc:5a:bb:3b:5e:49:40:db:ba:69:
         23:f8:d1:d6:1c:9b:b6:b4:0d:45:8e:f6:4a:7c:47:58:3e:53:
         1e:9d:f6:ec:7d:67:26:fb:09:66:cb:4c:aa:9b:d6:23:ac:64:
         4c:82:29:34:83:f5:1d:07:04:1e:a2:41:e8:ac:01:bf:a5:c3:
         37:43:02:14:40:64:69:20:e5:60:02:60:64:e6:55:33:93:53:
         58:b1:d4:9a:be:bf:3d:c7:d8:d3:23:68:fe:f3:49:e0:5a:fa:
         7e:85:37:62:f8:cc:00:33:23:91:20:0a:4d:10:59:23:a9:29:
         5c:50:64:8a:05:93:bd:89:2b:1a:4d:e3:1c:46:c9:43:40:8f:
         30:4e:b9:c0:ab:05:ff:ef:95:06:b3:c7:95:d5:e3:99:11:3f:
         a4:77:3b:51:67:82:03:b4:32:11:56:30:75:42:f4:f4:e1:13:
         e3:b5:dc:df:a0:35:b7:9c:20:c6:35:8c:7c:b5:9d:68:aa:28:
         4c:04:b5:48:1c:3e:22:bb:d2:c1:36:37:41:88:5b:46:66:bf:
         a4:e1:ee:e1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYJ777rRbKaw6M3qRaJUTx9a2GYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTAxODE0MDFaFw0yNjAyMDkxODE5MDFaMDMxMTAvBgNV
BAMTKEZFMzRCNDBGMTRDMDhDN0Y5RDEzOEZFQjVGRDc3MDY2MzRCRTE2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmb0SHyBsB60vrxkkx3J7YNoj2
TrwIwyJ3S5BiMTu5F9VHbAAOQdJOnbIm0qKirpTib90TT3atvur/pXuTMwb8J8Vn
3WkRNACUm97JtpMOSXE3q4rEUqZdnoIE9Tkonxvfkt8nEV5iRibTM+rfJad70JFm
1jKNYSlmk6HGSBeoI2/kG5RiGe+bTeHwfsmjF0yGinN+cQ9qLYdtU87HxUTb69JK
hjuzbi9g4LgbSYgpBH4Yf1Yuk6XELnG7Ljxqhcf9aIhgsvme4JOv6GCuq/3WZXhZ
WkdTzD1MBQSqvna+f/GPR4TfYawJRfTRmMIXAeqqLltv6SpwAacA1W0WUeClAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+NLQPFMCMf50T
j+tf13BmNL4W+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzVO
aWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhFdUQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c1
TmlmdHNVYnVwMXVUWThqamtzQVFnVXJQejExY25oUzNFODc1Y1VoRXVELzAvRkUz
NEI0MEYxNEMwOEM3RjlEMTM4RkVCNUZENzcwNjYzNEJFMTZGQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeoEMA0EAgACMAcDBQAoBEwgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUVzANBgkqhkiG9w0BAQsFAAOCAQEA1LS+5mTV7iXVOHit
10BoZ6gh6EZAITgRLS/vSSsvxBMjCeycUlh79ATxeaXMWrs7XklA27ppI/jR1hyb
trQNRY72SnxHWD5THp327H1nJvsJZstMqpvWI6xkTIIpNIP1HQcEHqJB6KwBv6XD
N0MCFEBkaSDlYAJgZOZVM5NTWLHUmr6/PcfY0yNo/vNJ4Fr6foU3YvjMADMjkSAK
TRBZI6kpXFBkigWTvYkrGk3jHEbJQ0CPME65wKsF/++VBrPHldXjmRE/pHc7UWeC
A7QyEVYwdUL09OET47Xc36A1t5wgxjWMfLWdaKooTAS1SBw+IrvSwTY3QYhbRma/
pOHu4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:59 2025 by rpki-client