Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E203687834946F995C6BC335F9DA7BCF0DE9407.cer
File:                     0E203687834946F995C6BC335F9DA7BCF0DE9407.cer (raw, json)
Hash identifier:          ugpk4Bu/vMnwQQKqMOz1G+oA/zgQpNbvw5rn7WCPJzQ=
Subject key identifier:   0E:20:36:87:83:49:46:F9:95:C6:BC:33:5F:9D:A7:BC:F0:DE:94:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AC2C34B4E6925E101BBF97BC4DC26564CDA0C54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/0E203687834946F995C6BC335F9DA7BCF0DE9407.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Aug 2024 19:52:45 +0000
Certificate not after:    Tue 19 Aug 2025 19:57:45 +0000
Subordinate resources:    AS: 52930
                          IP: 177.185.48.0/20
                          IP: 190.180.128.0/20
                          IP: 2804:af4::/32

Validation:               Failed, certificate revoked on Sun 15 Sep 2024 07:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:c3:4b:4e:69:25:e1:01:bb:f9:7b:c4:dc:26:56:4c:da:0c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 20 19:52:45 2024 GMT
            Not After : Aug 19 19:57:45 2025 GMT
        Subject: CN=0E203687834946F995C6BC335F9DA7BCF0DE9407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:44:eb:ea:7f:ca:2e:91:6a:49:39:22:18:
                    38:7f:0e:a7:86:18:71:f6:f9:38:b8:59:51:05:22:
                    2d:6b:41:a9:c5:ce:14:c6:ff:73:1f:f1:db:c6:c8:
                    53:9d:36:d0:e5:f6:08:45:ce:6d:05:67:ad:eb:43:
                    2d:92:17:2c:6f:65:7b:4e:fe:2a:20:a6:32:27:8d:
                    8f:4d:24:f4:54:94:13:f4:c0:71:e5:fa:ef:9d:61:
                    e8:07:e6:64:5a:77:3c:5c:8c:55:7a:02:91:39:50:
                    8c:ee:73:1e:34:ca:d7:a0:dd:0f:b6:f4:69:7e:f1:
                    1d:d5:22:18:99:e1:90:6a:9f:0d:15:85:06:f9:64:
                    58:d5:6a:b1:3d:ff:14:1a:a3:49:59:a5:08:96:a4:
                    38:c6:f3:d6:62:43:74:8e:9f:31:51:d5:0e:21:b4:
                    7a:52:ac:ad:99:ce:ab:a9:ad:3b:13:fa:23:bc:94:
                    70:31:24:02:a4:53:e0:67:73:01:40:6d:2c:d1:c1:
                    51:6b:7d:ca:c3:51:bb:c4:70:ab:1b:c5:4f:84:1e:
                    14:4c:2b:83:77:06:28:a4:6c:59:4a:71:4c:1c:ef:
                    ba:86:a5:04:32:63:e0:2e:68:b3:23:a9:91:65:17:
                    6d:0e:8c:f3:2d:7e:f5:79:81:43:1b:17:e6:6a:25:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:20:36:87:83:49:46:F9:95:C6:BC:33:5F:9D:A7:BC:F0:DE:94:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/0E203687834946F995C6BC335F9DA7BCF0DE9407.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/20
                  190.180.128.0/20
                IPv6:
                  2804:af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52930

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:aa:18:d5:1f:5b:27:84:d6:61:22:1e:bb:5c:50:0e:27:
         85:b8:7a:aa:ca:f1:ef:13:e1:07:d4:08:89:0c:b5:c9:31:bf:
         f5:e4:e2:49:e3:e8:e7:b7:e7:b0:21:1f:ee:18:d2:cd:59:62:
         58:23:9a:71:1a:04:e8:d5:9e:83:b8:f0:34:8a:c8:3d:cb:d2:
         5f:27:64:b9:0e:72:c9:65:81:d2:e2:a8:8d:e1:73:27:56:c7:
         16:f6:9d:4a:04:03:9a:3c:95:cf:ec:21:bb:18:d0:19:17:c3:
         8e:a2:e5:55:d0:32:9c:73:ff:f2:48:61:77:c3:9a:37:98:80:
         34:eb:6d:96:9e:b7:49:e8:a9:4c:8a:5d:ee:03:2a:93:9f:c0:
         32:e1:47:ad:d2:a6:db:e2:86:8c:36:aa:30:d8:ae:87:3f:31:
         0a:d8:69:c6:07:f7:ca:77:51:8b:28:ed:6d:42:49:38:33:30:
         d3:89:d4:57:52:20:eb:03:8c:d9:93:9b:85:f8:bc:69:37:04:
         8b:8c:9f:3c:cf:95:58:6f:60:6c:d1:9b:9d:75:93:9f:57:17:
         92:47:fa:3b:c0:40:93:e6:ba:ec:a9:02:eb:f4:52:c8:02:1e:
         83:e3:68:27:da:22:fd:fc:2d:ec:d0:45:30:95:e2:8b:3b:4c:
         a0:e7:ae:e3
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUCsLDS05pJeEBu/l7xNwmVkzaDFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MjAxOTUyNDVaFw0yNTA4MTkxOTU3NDVaMDMxMTAvBgNV
BAMTKDBFMjAzNjg3ODM0OTQ2Rjk5NUM2QkMzMzVGOURBN0JDRjBERTk0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmkTr6n/KLpFqSTkiGDh/DqeG
GHH2+Ti4WVEFIi1rQanFzhTG/3Mf8dvGyFOdNtDl9ghFzm0FZ63rQy2SFyxvZXtO
/iogpjInjY9NJPRUlBP0wHHl+u+dYegH5mRadzxcjFV6ApE5UIzucx40yteg3Q+2
9Gl+8R3VIhiZ4ZBqnw0VhQb5ZFjVarE9/xQao0lZpQiWpDjG89ZiQ3SOnzFR1Q4h
tHpSrK2ZzquprTsT+iO8lHAxJAKkU+BncwFAbSzRwVFrfcrDUbvEcKsbxU+EHhRM
K4N3BiikbFlKcUwc77qGpQQyY+AuaLMjqZFlF20OjPMtfvV5gUMbF+ZqJc0lAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOIDaHg0lG+ZXG
vDNfnae88N6UBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjdE
YkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6anIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o3
RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAvMEUy
MDM2ODc4MzQ5NDZGOTk1QzZCQzMzNUY5REE3QkNGMERFOTQwNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQEsbkwAwQEvrSAMA0EAgACMAcDBQAoBAr0MBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDOwjANBgkqhkiG9w0BAQsFAAOCAQEAQwqqGNUf
WyeE1mEiHrtcUA4nhbh6qsrx7xPhB9QIiQy1yTG/9eTiSePo57fnsCEf7hjSzVli
WCOacRoE6NWeg7jwNIrIPcvSXydkuQ5yyWWB0uKojeFzJ1bHFvadSgQDmjyVz+wh
uxjQGRfDjqLlVdAynHP/8khhd8OaN5iANOttlp63SeipTIpd7gMqk5/AMuFHrdKm
2+KGjDaqMNiuhz8xCthpxgf3yndRiyjtbUJJODMw04nUV1Ig6wOM2ZObhfi8aTcE
i4yfPM+VWG9gbNGbnXWTn1cXkkf6O8BAk+a67KkC6/RSyAIeg+NoJ9oi/fwt7NBF
MJXiiztMoOeu4w==
-----END CERTIFICATE-----
Generated at Sun Sep 15 09:19:46 2024 by rpki-client on console-ams.rpki-client.org