Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87BE9690671D22465C437B3BE3D6736CF0768A73.cer
File:                     87BE9690671D22465C437B3BE3D6736CF0768A73.cer (raw, json)
Hash identifier:          LJT6mifuUS/O78MGM3g1CgY7qWE4W44esR2DRAh82Ac=
Subject key identifier:   87:BE:96:90:67:1D:22:46:5C:43:7B:3B:E3:D6:73:6C:F0:76:8A:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       040742223CE1A711AD0EE6890ADF1B5FF1CD004D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/87BE9690671D22465C437B3BE3D6736CF0768A73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Feb 2025 17:23:55 +0000
Certificate not after:    Thu 12 Feb 2026 17:28:55 +0000
Subordinate resources:    AS: 264591
                          IP: 138.36.200.0/22
                          IP: 2804:2218::/32
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:07:42:22:3c:e1:a7:11:ad:0e:e6:89:0a:df:1b:5f:f1:cd:00:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 13 17:23:55 2025 GMT
            Not After : Feb 12 17:28:55 2026 GMT
        Subject: CN=87BE9690671D22465C437B3BE3D6736CF0768A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:cc:b8:3f:12:56:a6:da:3b:89:6b:d5:f6:
                    cc:cd:85:5f:78:e6:dd:65:77:0e:1d:9e:8b:ac:da:
                    79:2c:8e:9d:78:73:42:0e:55:8b:d6:ad:00:5a:69:
                    99:1f:db:50:8b:d7:c9:87:c3:05:2a:b8:43:d6:77:
                    9c:11:69:70:8b:e0:15:c3:1f:ab:08:28:f9:e7:9f:
                    f5:5b:bc:04:62:72:51:6a:17:05:cb:d4:ed:15:5d:
                    d0:bf:46:b2:a7:b6:f6:f7:05:09:7d:dc:02:74:b5:
                    62:39:0a:25:35:4d:53:bb:2f:9e:99:44:ff:be:13:
                    b3:3b:30:84:b8:e9:06:50:ef:36:0a:d1:fc:0f:7f:
                    e4:e1:19:e1:df:a5:55:fb:ac:0a:aa:46:be:6a:34:
                    f3:f0:d9:87:8e:33:e0:9a:56:85:a9:45:09:8e:a9:
                    ec:3c:5b:7d:85:79:59:ce:ad:59:81:85:4f:63:c1:
                    10:9a:38:5e:40:32:93:5f:51:16:bf:be:7b:70:09:
                    f6:9c:c0:ef:cb:d8:c1:f9:58:2b:ea:a3:86:f8:75:
                    24:53:aa:96:bc:f3:ba:cf:9b:4c:32:65:14:77:e5:
                    50:cf:f2:cf:c1:da:9d:7f:86:73:21:2f:78:68:24:
                    96:25:4a:38:a2:16:16:68:0e:79:ae:f3:4e:d3:8c:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:BE:96:90:67:1D:22:46:5C:43:7B:3B:E3:D6:73:6C:F0:76:8A:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/87BE9690671D22465C437B3BE3D6736CF0768A73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.200.0/22
                IPv6:
                  2804:2218::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264591

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:ce:a7:b8:89:70:9a:3e:7c:5e:bb:dd:1d:64:e1:da:99:
         02:d9:63:2e:6f:f2:56:4c:f9:b6:71:5d:fd:21:28:f0:88:5e:
         ae:be:99:fa:26:8c:9b:db:73:b6:08:1d:8b:47:37:73:d8:1a:
         09:23:73:77:e5:53:51:c5:d8:d0:dd:a6:27:dc:22:52:75:4f:
         a0:56:71:17:67:4c:6a:b9:a4:5a:6b:4d:d4:83:3d:cc:61:e3:
         27:a3:87:0a:d7:74:5d:fb:6d:b9:20:1b:93:d8:26:15:d4:35:
         39:5e:21:9f:b2:97:02:c2:bb:b1:9f:91:4c:2f:f7:b8:40:38:
         37:e8:91:38:83:47:1e:bc:7e:03:ca:fc:ed:b7:d9:4f:b5:ee:
         6a:b0:ea:c0:c5:ca:c9:9c:15:3f:f4:60:85:36:a2:a1:99:3b:
         77:60:9e:00:6f:da:d2:0f:f4:4a:97:8d:b8:1f:5a:42:09:ee:
         be:3f:8e:01:78:04:6c:91:fe:6a:3f:78:6b:8d:18:40:3b:b2:
         8d:94:f1:98:00:7d:c2:60:2c:b2:e6:8e:4c:12:ca:a4:01:68:
         05:e8:3c:21:4f:4d:21:49:2a:c2:b9:60:94:21:10:9c:aa:1f:
         10:82:7a:ab:12:60:2d:fe:e9:d4:c9:5a:54:0c:93:de:4b:76:
         5d:95:33:89
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUBAdCIjzhpxGtDuaJCt8bX/HNAE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTMxNzIzNTVaFw0yNjAyMTIxNzI4NTVaMDMxMTAvBgNV
BAMTKDg3QkU5NjkwNjcxRDIyNDY1QzQzN0IzQkUzRDY3MzZDRjA3NjhBNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmMy4PxJWpto7iWvV9szNhV94
5t1ldw4dnous2nksjp14c0IOVYvWrQBaaZkf21CL18mHwwUquEPWd5wRaXCL4BXD
H6sIKPnnn/VbvARiclFqFwXL1O0VXdC/RrKntvb3BQl93AJ0tWI5CiU1TVO7L56Z
RP++E7M7MIS46QZQ7zYK0fwPf+ThGeHfpVX7rAqqRr5qNPPw2YeOM+CaVoWpRQmO
qew8W32FeVnOrVmBhU9jwRCaOF5AMpNfURa/vntwCfacwO/L2MH5WCvqo4b4dSRT
qpa887rPm0wyZRR35VDP8s/B2p1/hnMhL3hoJJYlSjiiFhZoDnmu807TjE4TAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHvpaQZx0iRlxD
ezvj1nNs8HaKczAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlRY
dVNKOXJ0TllKanVmbjY0RVI1NWh5cG5zekdWaUN5NmhCdmFDRWF1R0gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JU
WHVTSjlydE5ZSmp1Zm42NEVSNTVoeXBuc3pHVmlDeTZoQnZhQ0VhdUdILzAvODdC
RTk2OTA2NzFEMjI0NjVDNDM3QjNCRTNENjczNkNGMDc2OEE3My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCiiTIMA0EAgACMAcDBQAoBCIYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQJjzANBgkqhkiG9w0BAQsFAAOCAQEAQQzOp7iJcJo+fF67
3R1k4dqZAtljLm/yVkz5tnFd/SEo8Iherr6Z+iaMm9tztggdi0c3c9gaCSNzd+VT
UcXY0N2mJ9wiUnVPoFZxF2dMarmkWmtN1IM9zGHjJ6OHCtd0XfttuSAbk9gmFdQ1
OV4hn7KXAsK7sZ+RTC/3uEA4N+iROINHHrx+A8r87bfZT7XuarDqwMXKyZwVP/Rg
hTaioZk7d2CeAG/a0g/0SpeNuB9aQgnuvj+OAXgEbJH+aj94a40YQDuyjZTxmAB9
wmAssuaOTBLKpAFoBeg8IU9NIUkqwrlglCEQnKofEIJ6qxJgLf7p1MlaVAyT3kt2
XZUziQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:53 2025 by rpki-client