Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
File:                     87BB708DC32E9016081213188D40053E40CA51AB.cer (raw, json)
Hash identifier:          Lyhuqar/JT/4PtfXd0MN6usbyvm3A7SKSPPG9N65Vyw=
Subject key identifier:   87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1943FA2996B2CE3EFABE5E98FD784487F87000ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Sep 2024 14:03:28 +0000
Certificate not after:    Thu 18 Sep 2025 14:08:28 +0000
Subordinate resources:    AS: 262494
                          IP: 45.179.112.0/22
                          IP: 45.226.88.0/22
                          IP: 138.185.188.0/22
                          IP: 168.205.240.0/22
                          IP: 170.82.124.0/22
                          IP: 177.66.112.0/21
                          IP: 177.124.168.0/22
                          IP: 177.129.60.0/22
                          IP: 179.125.124.0/22
                          IP: 179.191.56.0/21
                          IP: 2804:ad8::/32
                          IP: 2804:1510::/32
                          IP: 2804:4678::/32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 19:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:fa:29:96:b2:ce:3e:fa:be:5e:98:fd:78:44:87:f8:70:00:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 14:03:28 2024 GMT
            Not After : Sep 18 14:08:28 2025 GMT
        Subject: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:2a:91:b9:ed:f3:b9:ac:7f:39:94:a0:f8:
                    dd:84:1b:48:5a:1a:5c:ed:51:fa:ca:9b:5e:8c:fc:
                    51:76:2c:8b:09:83:da:30:ab:37:93:14:d5:ad:3e:
                    b0:af:6c:21:4f:2a:bb:5c:43:8a:e7:e9:14:ef:19:
                    9a:73:46:6b:fd:9b:53:a3:43:1c:ad:8d:5d:dd:82:
                    41:5a:74:ad:09:28:05:37:a1:a9:6a:4a:15:0f:61:
                    8c:82:56:d3:bf:cd:2e:fc:13:7a:00:0d:e5:43:a4:
                    18:2d:9f:16:a8:ea:81:45:97:bb:7c:d4:05:bf:9f:
                    a1:d6:7a:0c:24:7e:f9:97:7f:85:36:c7:10:9d:b0:
                    33:df:53:3b:10:6e:48:28:78:50:94:5e:3d:c7:d0:
                    98:4f:13:9a:7b:d3:5d:f5:72:c7:79:4f:cd:20:37:
                    af:45:46:5e:f6:b3:70:72:ed:56:7d:32:3e:4c:9d:
                    c3:3e:b2:01:4e:f7:7a:f3:41:44:b0:26:9f:ba:08:
                    f4:d2:88:50:16:6e:f0:c5:79:52:e3:06:54:f1:00:
                    2f:17:b8:c1:b3:bb:34:03:8f:bc:1a:cc:cc:07:75:
                    f4:af:31:25:4b:05:54:3e:73:93:2b:e9:b7:64:74:
                    ef:d8:ae:c5:65:0c:8b:3b:4e:c7:14:d6:03:bd:ec:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22
                  45.226.88.0/22
                  138.185.188.0/22
                  168.205.240.0/22
                  170.82.124.0/22
                  177.66.112.0/21
                  177.124.168.0/22
                  177.129.60.0/22
                  179.125.124.0/22
                  179.191.56.0/21
                IPv6:
                  2804:ad8::/32
                  2804:1510::/32
                  2804:4678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262494

    Signature Algorithm: sha256WithRSAEncryption
         96:07:eb:40:7b:e8:91:c0:09:58:97:49:63:f2:0d:a0:94:b5:
         25:75:3e:18:ad:4d:21:7e:9e:99:2c:ac:7f:69:84:7c:72:ab:
         59:c3:1d:7e:5f:01:36:1e:52:fa:b0:e4:21:d7:23:fe:ed:ee:
         10:66:5e:47:81:a8:6e:c3:15:6a:32:82:31:fb:92:4a:53:f6:
         be:4c:b3:7e:e1:24:b7:9a:c3:92:fa:e2:08:dc:55:8c:e9:67:
         98:58:d4:58:2b:63:18:ac:a6:2d:57:8e:cb:30:09:e0:da:f7:
         71:b6:d5:e7:f9:bd:3d:20:fd:cd:f2:f6:86:7e:99:44:42:3f:
         7e:38:36:a6:9f:46:2d:ff:00:0b:95:dd:51:74:ef:7b:9c:14:
         d5:8d:86:a1:45:d0:ff:ad:4f:74:1c:81:58:20:79:7d:3a:a1:
         28:ba:93:2e:40:6a:aa:63:7e:ff:51:05:80:a5:2f:79:ad:03:
         df:95:86:91:33:6c:bf:a8:68:aa:70:b7:f0:03:b3:49:f5:0e:
         57:0f:87:88:54:b2:fb:d5:0f:9c:29:72:79:20:38:b9:03:a4:
         f9:60:06:cb:ea:f4:5c:71:58:b5:e6:31:85:c9:7f:64:97:83:
         af:f2:bc:48:38:cb:6d:77:9a:cf:86:7a:6e:86:2c:7e:fc:6b:
         13:80:52:6c
-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgIUGUP6KZayzj76vl6Y/XhEh/hwAO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTkxNDAzMjhaFw0yNTA5MTgxNDA4MjhaMDMxMTAvBgNV
BAMTKDg3QkI3MDhEQzMyRTkwMTYwODEyMTMxODhENDAwNTNFNDBDQTUxQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfCqRue3zuax/OZSg+N2EG0ha
GlztUfrKm16M/FF2LIsJg9owqzeTFNWtPrCvbCFPKrtcQ4rn6RTvGZpzRmv9m1Oj
QxytjV3dgkFadK0JKAU3oalqShUPYYyCVtO/zS78E3oADeVDpBgtnxao6oFFl7t8
1AW/n6HWegwkfvmXf4U2xxCdsDPfUzsQbkgoeFCUXj3H0JhPE5p70131csd5T80g
N69FRl72s3By7VZ9Mj5MncM+sgFO93rzQUSwJp+6CPTSiFAWbvDFeVLjBlTxAC8X
uMGzuzQDj7wazMwHdfSvMSVLBVQ+c5Mr6bdkdO/YrsVlDIs7TscU1gO97NS1AgMB
AAGjggN+MIIDejAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHu3CNwy6QFggS
ExiNQAU+QMpRqzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDdX
ZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNFSkMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3
V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvODdC
QjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0MENBNTFBQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEH
AQH/BGMwYTBCBAIAATA8AwQCLbNwAwQCLeJYAwQCirm8AwQCqM3wAwQCqlJ8AwQD
sUJwAwQCsXyoAwQCsYE8AwQCs318AwQDs784MBsEAgACMBUDBQAoBArYAwUAKAQV
EAMFACgERngwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAFeMA0GCSqGSIb3DQEB
CwUAA4IBAQCWB+tAe+iRwAlYl0lj8g2glLUldT4YrU0hfp6ZLKx/aYR8cqtZwx1+
XwE2HlL6sOQh1yP+7e4QZl5HgahuwxVqMoIx+5JKU/a+TLN+4SS3msOS+uII3FWM
6WeYWNRYK2MYrKYtV47LMAng2vdxttXn+b09IP3N8vaGfplEQj9+ODamn0Yt/wAL
ld1RdO97nBTVjYahRdD/rU90HIFYIHl9OqEoupMuQGqqY37/UQWApS95rQPflYaR
M2y/qGiqcLfwA7NJ9Q5XD4eIVLL71Q+cKXJ5IDi5A6T5YAbL6vRccVi15jGFyX9k
l4Ov8rxIOMttd5rPhnpuhix+/GsTgFJs
-----END CERTIFICATE-----
Generated at Fri Sep 20 20:36:39 2024 by rpki-client on console-fra.rpki-client.org