Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer
File:                     E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer (raw, json)
Hash identifier:          MR9sv6hj6rbPD2T8Kbm/5Xs0KlulURIQ/317ipsSDuI=
Subject key identifier:   E0:99:E1:E5:52:70:BB:43:96:5A:6A:88:64:FD:6A:4E:45:81:BB:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4486A29470928A3AB16ECDA660F8BC54777A9366
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Apr 2025 09:38:52 +0000
Certificate not after:    Wed 15 Apr 2026 09:43:52 +0000
Subordinate resources:    AS: 61696
                          IP: 138.36.232.0/22
                          IP: 201.140.248.0/22
                          IP: 2804:1ae0::/32
Validation:               Failed, certificate revoked on Wed 16 Apr 2025 10:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:86:a2:94:70:92:8a:3a:b1:6e:cd:a6:60:f8:bc:54:77:7a:93:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 09:38:52 2025 GMT
            Not After : Apr 15 09:43:52 2026 GMT
        Subject: CN=E099E1E55270BB43965A6A8864FD6A4E4581BB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:0f:e9:1e:81:7f:ee:88:65:3d:ba:70:21:
                    d3:eb:07:e3:e1:42:54:51:7b:14:e0:4b:14:1b:d6:
                    1b:65:09:e7:92:e9:1a:0c:60:a7:76:4b:01:cd:7f:
                    10:d9:91:f2:b6:be:2c:4c:65:d6:ce:69:de:47:04:
                    4a:cc:75:48:33:55:08:2c:57:80:b1:34:48:a3:e6:
                    34:08:23:0a:4a:34:b4:4d:32:5f:cd:60:ae:7b:17:
                    ff:e1:5a:cc:ce:11:2c:d4:23:32:e9:3e:eb:ae:88:
                    70:40:e7:c1:54:22:3b:d9:ce:af:f6:c8:ce:54:0c:
                    8d:ec:c4:85:34:2a:9a:92:4a:1e:65:2a:f8:a5:52:
                    3d:f9:64:8d:41:7e:4d:a1:0b:73:94:53:de:2b:03:
                    ad:b6:68:1d:b3:ab:1a:7c:62:a9:74:78:e5:51:fd:
                    02:b2:ef:8c:e0:58:57:35:34:d4:aa:c4:e4:1d:56:
                    e2:20:fb:a0:57:b0:1b:b3:e1:c1:6b:2d:a8:0c:51:
                    e8:03:27:21:c5:a8:ee:6f:32:46:5d:c9:0d:55:81:
                    db:5e:73:ba:f9:04:03:f7:15:b8:bc:52:cb:90:95:
                    24:50:d2:34:ba:de:41:4d:5e:dc:c4:71:e6:bb:49:
                    69:c6:2a:35:b1:49:16:6e:ec:ca:89:b9:c3:ef:63:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:99:E1:E5:52:70:BB:43:96:5A:6A:88:64:FD:6A:4E:45:81:BB:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22
                  201.140.248.0/22
                IPv6:
                  2804:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61696

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:40:b7:f1:aa:28:64:19:e6:38:d1:31:84:6a:34:62:ae:
         ae:25:48:b8:2c:74:0f:8e:32:7f:a0:b1:11:b1:65:54:79:17:
         90:50:30:bf:87:27:04:9e:d4:d5:00:e8:41:29:65:fb:b1:e5:
         18:60:02:a8:f8:20:7f:74:f4:f7:23:ad:44:fe:d7:67:cc:b7:
         8e:f4:53:e2:ee:68:62:58:cd:50:5b:7b:ef:18:43:a4:61:4e:
         af:b6:f2:ef:4b:4e:11:36:3c:64:f0:5f:29:bf:84:4e:c1:2c:
         74:ef:66:f8:8d:1c:bd:fe:20:34:0d:1d:5a:d1:ee:e6:a0:a3:
         8f:c5:bd:41:bb:9b:60:f3:4a:9f:ef:4a:66:4d:2d:ed:57:00:
         f1:0a:a3:7b:e0:46:f3:f4:56:db:fa:fd:31:61:87:ea:5e:96:
         d3:55:98:c4:74:e4:ed:15:54:dc:fe:fd:c0:8b:6f:ab:53:4a:
         2f:4f:a3:46:a0:e6:60:e4:23:e4:af:78:d2:8b:6a:48:36:b3:
         86:76:b5:bc:19:7d:7b:7a:49:60:24:21:75:01:5c:13:d2:7c:
         01:08:77:7b:46:24:af:19:04:1d:34:83:5e:a1:b5:02:c6:cb:
         32:bd:b5:b0:58:31:5e:0c:0d:d2:4f:02:55:1c:14:d5:a6:d5:
         41:76:c1:c8
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIURIailHCSijqxbs2mYPi8VHd6k2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTYwOTM4NTJaFw0yNjA0MTUwOTQzNTJaMDMxMTAvBgNV
BAMTKEUwOTlFMUU1NTI3MEJCNDM5NjVBNkE4ODY0RkQ2QTRFNDU4MUJCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JQ/pHoF/7ohlPbpwIdPrB+Ph
QlRRexTgSxQb1htlCeeS6RoMYKd2SwHNfxDZkfK2vixMZdbOad5HBErMdUgzVQgs
V4CxNEij5jQIIwpKNLRNMl/NYK57F//hWszOESzUIzLpPuuuiHBA58FUIjvZzq/2
yM5UDI3sxIU0KpqSSh5lKvilUj35ZI1Bfk2hC3OUU94rA622aB2zqxp8Yql0eOVR
/QKy74zgWFc1NNSqxOQdVuIg+6BXsBuz4cFrLagMUegDJyHFqO5vMkZdyQ1Vgdte
c7r5BAP3Fbi8UsuQlSRQ0jS63kFNXtzEcea7SWnGKjWxSRZu7MqJucPvY4bPAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgmeHlUnC7Q5Za
aohk/WpORYG7HjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlhF
aVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJY
RWlSSk5VZVV3dmVjWGI2TWh6TURpTUpVb1lhZXI4N2ozcXljalRjV3N4LzEvRTA5
OUUxRTU1MjcwQkI0Mzk2NUE2QTg4NjRGRDZBNEU0NTgxQkIxRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCiiToAwQCyYz4MA0EAgACMAcDBQAoBBrgMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDxADANBgkqhkiG9w0BAQsFAAOCAQEAge1At/Gq
KGQZ5jjRMYRqNGKuriVIuCx0D44yf6CxEbFlVHkXkFAwv4cnBJ7U1QDoQSll+7Hl
GGACqPggf3T09yOtRP7XZ8y3jvRT4u5oYljNUFt77xhDpGFOr7by70tOETY8ZPBf
Kb+ETsEsdO9m+I0cvf4gNA0dWtHu5qCjj8W9QbubYPNKn+9KZk0t7VcA8Qqje+BG
8/RW2/r9MWGH6l6W01WYxHTk7RVU3P79wItvq1NKL0+jRqDmYOQj5K940otqSDaz
hna1vBl9e3pJYCQhdQFcE9J8AQh3e0YkrxkEHTSDXqG1AsbLMr21sFgxXgwN0k8C
VRwU1abVQXbByA==
-----END CERTIFICATE-----
Generated at Fri May 16 00:50:48 2025 by rpki-client