Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer
File:                     885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer (raw, json)
Hash identifier:          H/2pXhf9mUZWfzKMXJ6C0UFgfkXKBX1dHPPab2uW2x8=
Subject key identifier:   88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E994DC56848E9609B6C89DFB31F87AB58CC2FF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 21:38:59 +0000
Certificate not after:    Tue 24 Jun 2025 21:43:59 +0000
Subordinate resources:    AS: 263459
                          IP: 177.190.168.0/21
                          IP: 2804:1224::/32

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 21:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:99:4d:c5:68:48:e9:60:9b:6c:89:df:b3:1f:87:ab:58:cc:2f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 21:38:59 2024 GMT
            Not After : Jun 24 21:43:59 2025 GMT
        Subject: CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:91:96:26:e6:44:c7:33:be:85:be:2c:35:
                    32:37:71:5b:46:d2:40:2f:ab:de:bd:7b:ab:9b:ac:
                    89:e5:20:a7:4e:43:14:ad:80:14:ce:ad:84:56:2b:
                    63:ab:94:a9:4f:c9:0b:61:07:47:ad:84:32:ed:b2:
                    9d:ec:4a:77:64:0b:05:be:30:6f:a3:34:81:c3:72:
                    d5:bb:8c:47:88:9d:90:b5:16:31:58:9d:1f:a4:43:
                    af:21:48:57:31:87:43:eb:ae:e9:c8:2c:17:3e:ed:
                    7c:38:ec:30:3c:bb:46:b1:a9:8d:e9:c6:0b:b3:06:
                    e2:c3:7e:3e:1c:79:5b:cc:f1:01:7e:4a:39:48:7e:
                    fb:4a:75:fc:ac:df:a6:ae:8a:3e:3d:07:f1:80:26:
                    ef:1d:39:69:23:89:78:6c:74:eb:a9:cb:db:89:c1:
                    40:72:90:a4:fd:68:58:a1:18:14:b1:23:02:75:98:
                    0c:f6:c2:ea:72:20:99:ff:ee:f9:2c:99:5f:3a:58:
                    1d:36:b3:08:40:38:67:db:45:11:5d:66:a3:b9:11:
                    e7:85:fd:fb:3a:14:cf:f1:d1:41:86:f5:11:2c:78:
                    93:87:c7:94:21:86:fc:6f:b5:4f:f7:65:66:80:cf:
                    7a:7c:e4:9c:5d:ad:2e:2d:40:de:1a:1b:62:dc:e9:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/21
                IPv6:
                  2804:1224::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263459

    Signature Algorithm: sha256WithRSAEncryption
         53:08:1e:4b:26:c4:46:5f:2e:2c:c3:33:d6:a7:33:93:76:17:
         1c:af:4f:6b:c9:17:d1:06:30:4f:68:eb:11:56:1e:1f:a1:d9:
         f6:d0:df:f4:64:44:1b:ef:8b:33:89:b8:77:30:92:0b:a9:b5:
         e5:0e:52:c1:27:0a:39:24:9d:d4:70:d8:a9:f2:a0:cc:04:62:
         9b:f4:78:38:82:e0:70:8a:c6:d5:29:a8:61:35:7d:23:d8:4e:
         6c:24:a9:0e:c6:57:1d:02:21:e4:e9:5c:76:79:97:46:d0:b2:
         98:d0:a7:04:a6:d2:61:2d:94:71:9b:6e:7a:5b:28:e8:6f:9a:
         01:0d:ea:c3:aa:0b:4e:85:ca:be:1d:97:09:c4:28:e5:66:90:
         4b:e1:d7:16:30:d6:5c:ca:57:98:de:a4:5b:e0:58:e7:e8:da:
         c9:0a:5d:d3:fe:64:5e:85:23:13:62:39:c7:44:87:70:88:a3:
         43:4b:c2:a6:30:2e:2a:88:64:49:c1:a5:e2:ce:44:f8:67:58:
         02:db:13:88:48:9e:ec:6e:e4:fa:59:75:24:b6:81:6c:ec:f6:
         15:e5:b1:65:81:6d:48:d6:c8:5e:69:f0:e3:cf:c5:6a:46:0f:
         8c:88:f3:13:e0:b1:45:65:12:04:1f:87:ef:e0:66:86:3d:31:
         f2:ee:34:ef
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDplNxWhI6WCbbInfsx+Hq1jML/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjUyMTM4NTlaFw0yNTA2MjQyMTQzNTlaMDMxMTAvBgNV
BAMTKDg4NTkxM0VEQzlFRDUwMDVBNjQ2RTdEMzcyOTVDRjJCOUI5MDM3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUapGWJuZExzO+hb4sNTI3cVtG
0kAvq969e6ubrInlIKdOQxStgBTOrYRWK2OrlKlPyQthB0ethDLtsp3sSndkCwW+
MG+jNIHDctW7jEeInZC1FjFYnR+kQ68hSFcxh0PrrunILBc+7Xw47DA8u0axqY3p
xguzBuLDfj4ceVvM8QF+SjlIfvtKdfys36auij49B/GAJu8dOWkjiXhsdOupy9uJ
wUBykKT9aFihGBSxIwJ1mAz2wupyIJn/7vksmV86WB02swhAOGfbRRFdZqO5EeeF
/fs6FM/x0UGG9REseJOHx5QhhvxvtU/3ZWaAz3p85JxdrS4tQN4aG2Lc6bJXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIWRPtye1QBaZG
59Nylc8rm5A3+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRURy
bUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3S1QvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VE
cm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzEvODg1
OTEzRURDOUVENTAwNUE2NDZFN0QzNzI5NUNGMkI5QjkwMzdGOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsb6oMA0EAgACMAcDBQAoBBIkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFIzANBgkqhkiG9w0BAQsFAAOCAQEAUwgeSybERl8uLMMz
1qczk3YXHK9Pa8kX0QYwT2jrEVYeH6HZ9tDf9GREG++LM4m4dzCSC6m15Q5SwScK
OSSd1HDYqfKgzARim/R4OILgcIrG1SmoYTV9I9hObCSpDsZXHQIh5OlcdnmXRtCy
mNCnBKbSYS2UcZtuelso6G+aAQ3qw6oLToXKvh2XCcQo5WaQS+HXFjDWXMpXmN6k
W+BY5+jayQpd0/5kXoUjE2I5x0SHcIijQ0vCpjAuKohkScGl4s5E+GdYAtsTiEie
7G7k+ll1JLaBbOz2FeWxZYFtSNbIXmnw48/FakYPjIjzE+CxRWUSBB+H7+Bmhj0x
8u407w==
-----END CERTIFICATE-----
Generated at Thu Jun 27 00:14:22 2024 by rpki-client on console-fra.rpki-client.org