Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89779B612297E1DE946D089F2F7393990AB5CA8C.cer
File:                     89779B612297E1DE946D089F2F7393990AB5CA8C.cer (raw, json)
Hash identifier:          Fe+OCD0ufTQlj6mckYsLPJPmRaSo3NsHtB+RS1Nz2Mc=
Subject key identifier:   89:77:9B:61:22:97:E1:DE:94:6D:08:9F:2F:73:93:99:0A:B5:CA:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F8B89C517B46DB04E7C6F095FB0EF00EE787172
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/89779B612297E1DE946D089F2F7393990AB5CA8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 12:30:57 +0000
Certificate not after:    Tue 06 Jan 2026 12:35:57 +0000
Subordinate resources:    AS: 53127
                          IP: 187.110.128.0/20
                          IP: 2804:1ec::/32
Validation:               Failed, certificate revoked on Wed 15 Jan 2025 19:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8b:89:c5:17:b4:6d:b0:4e:7c:6f:09:5f:b0:ef:00:ee:78:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  7 12:30:57 2025 GMT
            Not After : Jan  6 12:35:57 2026 GMT
        Subject: CN=89779B612297E1DE946D089F2F7393990AB5CA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:98:1e:a5:a8:80:20:70:6a:37:3e:9f:64:
                    0f:9e:32:71:89:fa:dd:0e:8c:d3:23:ef:c3:a0:cb:
                    cd:52:9f:be:d9:e8:44:4b:ae:a6:d2:f0:1c:1f:b0:
                    32:f2:b2:a3:6f:fd:b5:f7:02:ad:5d:f7:af:71:43:
                    52:6d:36:2a:f7:d4:aa:cd:22:9e:7e:7b:35:9e:d7:
                    37:a9:f8:fe:f0:b6:26:42:d4:24:03:ad:74:68:1e:
                    60:ca:75:5a:44:31:4d:35:bb:c6:e4:46:3a:b0:38:
                    cc:7c:1d:07:26:28:e0:60:d7:44:88:0d:e6:d2:a2:
                    65:9a:30:55:69:5d:24:75:f6:36:6c:6a:46:70:98:
                    7b:b8:5a:b1:75:eb:f3:bd:ca:25:36:8c:65:bb:a0:
                    9a:b2:58:65:1f:b9:08:f9:cc:4e:5e:28:89:35:5e:
                    12:43:1e:b8:85:a7:db:92:64:8b:ed:7a:46:1d:f1:
                    54:24:a1:6e:02:14:0c:b6:74:2a:d0:da:66:19:52:
                    ed:2d:dd:8f:ee:bc:17:ed:93:b5:7c:16:83:25:88:
                    b1:5a:36:7f:fc:78:24:9d:99:a8:c3:19:6e:94:1f:
                    21:ec:a0:0a:d2:0d:20:72:bf:f0:a6:37:f0:f3:1d:
                    19:fb:32:68:04:0a:b6:d6:0f:b3:06:cd:1d:45:00:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:77:9B:61:22:97:E1:DE:94:6D:08:9F:2F:73:93:99:0A:B5:CA:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/89779B612297E1DE946D089F2F7393990AB5CA8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.128.0/20
                IPv6:
                  2804:1ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53127

    Signature Algorithm: sha256WithRSAEncryption
         be:b8:41:e1:7c:f3:d2:56:99:41:66:1a:be:b4:a5:84:06:84:
         a2:68:99:10:1d:fc:f0:ea:19:7e:11:d3:6b:41:6b:06:9a:28:
         88:90:4e:b5:04:42:e3:af:23:75:32:08:e9:9f:5b:20:ea:80:
         9b:16:d3:c0:b3:b9:6a:86:be:53:da:83:95:b5:a6:b4:ab:45:
         d7:cd:fd:94:e3:4f:0c:76:7d:82:e8:ec:fd:4d:99:be:6c:d0:
         d8:f0:62:4c:69:aa:a2:fa:8d:a1:ed:00:01:95:f2:9c:bf:91:
         5e:11:d1:ec:88:5c:97:d7:44:4d:a8:e7:7f:d7:14:38:27:13:
         ba:12:c6:79:6c:93:0e:8f:d2:ca:ed:03:8e:38:f4:f6:34:9c:
         db:0b:21:a8:bf:72:a1:a5:32:a0:7a:1e:02:91:54:c9:c0:4f:
         42:b3:cc:dd:8c:3f:43:45:32:01:58:d2:84:f2:e2:12:78:ca:
         bc:56:f6:cf:28:b8:c6:90:f5:c9:fb:6f:ab:9c:9a:47:3a:fe:
         7c:94:40:15:a0:35:1f:d0:68:31:6c:67:71:fc:06:56:ae:63:
         5a:e4:c9:63:20:51:fa:77:6d:be:ea:04:cc:60:f4:67:53:7c:
         c6:5f:31:a1:44:54:07:fe:fc:f0:4f:b5:45:42:6e:b4:ad:cd:
         d6:de:e5:02
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUD4uJxRe0bbBOfG8JX7DvAO54cXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDcxMjMwNTdaFw0yNjAxMDYxMjM1NTdaMDMxMTAvBgNV
BAMTKDg5Nzc5QjYxMjI5N0UxREU5NDZEMDg5RjJGNzM5Mzk5MEFCNUNBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRpgepaiAIHBqNz6fZA+eMnGJ
+t0OjNMj78Ogy81Sn77Z6ERLrqbS8BwfsDLysqNv/bX3Aq1d969xQ1JtNir31KrN
Ip5+ezWe1zep+P7wtiZC1CQDrXRoHmDKdVpEMU01u8bkRjqwOMx8HQcmKOBg10SI
DebSomWaMFVpXSR19jZsakZwmHu4WrF16/O9yiU2jGW7oJqyWGUfuQj5zE5eKIk1
XhJDHriFp9uSZIvtekYd8VQkoW4CFAy2dCrQ2mYZUu0t3Y/uvBftk7V8FoMliLFa
Nn/8eCSdmajDGW6UHyHsoArSDSByv/CmN/DzHRn7MmgECrbWD7MGzR1FADHnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJd5thIpfh3pRt
CJ8vc5OZCrXKjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNW1E
ZjhmTkxUQ2pRN2FHdjNyUVNkMlhlSE5nQ0RLVE1ISFlwek4yU1EyV0YvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVt
RGY4Zk5MVENqUTdhR3YzclFTZDJYZUhOZ0NES1RNSEhZcHpOMlNRMldGLzAvODk3
NzlCNjEyMjk3RTFERTk0NkQwODlGMkY3MzkzOTkwQUI1Q0E4Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEu26AMA0EAgACMAcDBQAoBAHsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDPhzANBgkqhkiG9w0BAQsFAAOCAQEAvrhB4Xzz0laZQWYa
vrSlhAaEomiZEB388OoZfhHTa0FrBpooiJBOtQRC468jdTII6Z9bIOqAmxbTwLO5
aoa+U9qDlbWmtKtF1839lONPDHZ9gujs/U2ZvmzQ2PBiTGmqovqNoe0AAZXynL+R
XhHR7Ihcl9dETajnf9cUOCcTuhLGeWyTDo/Syu0Djjj09jSc2wshqL9yoaUyoHoe
ApFUycBPQrPM3Yw/Q0UyAVjShPLiEnjKvFb2zyi4xpD1yftvq5yaRzr+fJRAFaA1
H9BoMWxncfwGVq5jWuTJYyBR+ndtvuoEzGD0Z1N8xl8xoURUB/788E+1RUJutK3N
1t7lAg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:44:36 2025 by rpki-client