Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer
File:                     00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer (raw, json)
Hash identifier:          oy9c1eyPABBfggFv3dYMxjr5IZa+YirR9YpgIGj/RuE=
Subject key identifier:   00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54FDA8FE0AAEA8DCC330AF318A66539E0B00F149
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Mar 2025 11:54:47 +0000
Certificate not after:    Mon 23 Mar 2026 11:59:47 +0000
Subordinate resources:    AS: 263997
                          IP: 143.0.52.0/22
                          IP: 2804:2918::/32

Validation:               Failed, certificate revoked on Sat 12 Apr 2025 05:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fd:a8:fe:0a:ae:a8:dc:c3:30:af:31:8a:66:53:9e:0b:00:f1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 11:54:47 2025 GMT
            Not After : Mar 23 11:59:47 2026 GMT
        Subject: CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:62:d4:90:ed:a9:bc:55:4c:18:57:d8:62:
                    71:de:cf:ae:36:47:22:63:a7:00:04:9d:ab:29:77:
                    c1:67:5a:64:e2:8a:42:c5:34:e0:00:5a:03:87:cc:
                    b8:26:8e:81:ec:0c:a3:fb:ed:2d:55:ac:3d:5a:c9:
                    40:7e:b1:7a:b5:8e:0e:ba:4b:35:e2:5f:19:a3:97:
                    c0:1d:6b:22:a8:fe:46:a6:9f:a7:a6:9c:5d:f2:60:
                    2f:6a:32:1f:5c:c6:84:24:96:cc:60:e9:33:82:fe:
                    ed:d0:5a:6b:8b:37:31:27:2e:f6:36:81:98:12:69:
                    9e:a5:3d:5d:5a:12:1f:b9:ee:aa:6f:a4:d9:4f:02:
                    6b:aa:d4:25:40:72:a8:20:db:4d:d8:d5:38:f9:dc:
                    01:98:2e:ba:0d:76:44:ce:20:37:6d:2a:64:4c:a4:
                    42:2e:d2:42:b3:0d:b0:a7:98:ca:43:10:80:4e:d7:
                    a2:3c:7f:9b:91:10:e7:20:9b:ef:44:98:c3:93:be:
                    25:f6:89:6f:0e:78:00:02:50:49:3c:c0:ca:30:12:
                    c8:16:19:8e:d2:8f:a2:0c:81:18:41:79:cc:25:43:
                    aa:40:2e:5b:bb:cd:f0:88:4f:11:84:7f:c7:8e:a5:
                    47:a2:ef:88:16:2f:5a:7d:45:a3:72:90:70:74:1e:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.52.0/22
                IPv6:
                  2804:2918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263997

    Signature Algorithm: sha256WithRSAEncryption
         cf:ee:58:1c:e1:ac:9b:56:fe:af:72:90:98:9b:ca:df:a9:d6:
         3c:46:05:7b:3e:63:ea:98:32:5e:01:24:78:af:26:6c:e3:c6:
         46:e4:4c:5e:95:b1:19:c9:36:2d:c9:81:b1:d0:20:e6:1e:34:
         c3:9d:9f:90:fc:b9:c2:5c:68:5c:06:34:c4:84:cb:d7:4f:c5:
         34:12:0c:da:ed:d6:da:aa:77:ac:f5:f0:4f:4b:95:7a:51:15:
         cb:31:52:18:5b:cd:04:11:ef:d2:40:f7:f6:c4:39:37:a8:b1:
         8c:70:f1:34:69:a5:c4:67:c1:84:71:32:e6:68:d2:63:24:f9:
         a9:75:32:5a:46:4e:a0:00:44:83:48:11:c1:27:60:1c:ee:b2:
         47:6f:02:e8:b0:ec:93:4f:51:eb:d0:c5:24:5c:43:95:7b:54:
         a4:9f:f7:76:30:36:18:36:aa:e8:26:00:bc:fe:b8:b9:da:80:
         12:8b:73:6c:07:ab:1c:d8:98:24:ef:7d:f5:72:0a:f9:7f:08:
         1b:42:fe:b1:b4:6d:8a:1c:fc:e0:d6:a2:3a:45:80:a5:1f:80:
         93:71:4c:7f:7a:b8:9b:42:3a:e4:f9:5d:d6:18:91:ef:39:7f:
         5a:bb:35:cc:b2:c2:8e:e4:91:2c:a2:cb:00:0c:59:16:c9:52:
         a0:6a:11:a1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVP2o/gquqNzDMK8ximZTngsA8UkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjQxMTU0NDdaFw0yNjAzMjMxMTU5NDdaMDMxMTAvBgNV
BAMTKDAwQzY1Qjg2RDIwN0Y5RTBFMzExRUNEOTVCREVGRjU2NzUyMDg0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYWLUkO2pvFVMGFfYYnHez642
RyJjpwAEnaspd8FnWmTiikLFNOAAWgOHzLgmjoHsDKP77S1VrD1ayUB+sXq1jg66
SzXiXxmjl8AdayKo/kamn6emnF3yYC9qMh9cxoQklsxg6TOC/u3QWmuLNzEnLvY2
gZgSaZ6lPV1aEh+57qpvpNlPAmuq1CVAcqgg203Y1Tj53AGYLroNdkTOIDdtKmRM
pEIu0kKzDbCnmMpDEIBO16I8f5uREOcgm+9EmMOTviX2iW8OeAACUEk8wMowEsgW
GY7Sj6IMgRhBecwlQ6pALlu7zfCITxGEf8eOpUei74gWL1p9RaNykHB0Htd3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAxluG0gf54OMR
7Nlb3v9WdSCE0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEdu
dDJvQkZ3MW5rajZwM3BFS1dLekZYSjhYbnBUaGRmdGpKYUtuOVBVVmQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH
bnQyb0JGdzFua2o2cDNwRUtXS3pGWEo4WG5wVGhkZnRqSmFLbjlQVVZkLzAvMDBD
NjVCODZEMjA3RjlFMEUzMTFFQ0Q5NUJERUZGNTY3NTIwODREMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCjwA0MA0EAgACMAcDBQAoBCkYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHPTANBgkqhkiG9w0BAQsFAAOCAQEAz+5YHOGsm1b+r3KQ
mJvK36nWPEYFez5j6pgyXgEkeK8mbOPGRuRMXpWxGck2LcmBsdAg5h40w52fkPy5
wlxoXAY0xITL10/FNBIM2u3W2qp3rPXwT0uVelEVyzFSGFvNBBHv0kD39sQ5N6ix
jHDxNGmlxGfBhHEy5mjSYyT5qXUyWkZOoABEg0gRwSdgHO6yR28C6LDsk09R69DF
JFxDlXtUpJ/3djA2GDaq6CYAvP64udqAEotzbAerHNiYJO999XIK+X8IG0L+sbRt
ihz84NaiOkWApR+Ak3FMf3q4m0I65Pld1hiR7zl/Wrs1zLLCjuSRLKLLAAxZFslS
oGoRoQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:22:35 2025 by rpki-client on console.sobornost.net