Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
File:                     89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer (raw, json)
Hash identifier:          GL3V2UPaf/vn0iybrjlF1qn3hY4b8XT5U+UiT9XKYm4=
Subject key identifier:   89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B07AFED6C6F751A113D659C8CA69BEE66FF6933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 18:38:46 +0000
Certificate not after:    Mon 30 Jun 2025 18:43:46 +0000
Subordinate resources:    AS: 28165
                          IP: 131.255.100.0/22
                          IP: 138.59.148.0/22
                          IP: 138.204.92.0/22
                          IP: 170.81.168.0/22
                          IP: 177.184.192.0/20
                          IP: 177.222.16.0/20
                          IP: 187.62.208.0/20
                          IP: 191.240.144.0/20
                          IP: 200.229.224.0/20
                          IP: 2804:340::/32

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 13:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:07:af:ed:6c:6f:75:1a:11:3d:65:9c:8c:a6:9b:ee:66:ff:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 18:38:46 2024 GMT
            Not After : Jun 30 18:43:46 2025 GMT
        Subject: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:e9:a9:15:c8:c4:16:0d:96:37:60:c6:74:
                    b9:dd:33:71:64:eb:1f:25:3c:a1:75:a4:95:32:51:
                    6e:ed:a0:41:a6:fb:f7:cd:8e:7d:61:9e:8f:c2:d2:
                    80:c2:3f:60:ab:9b:8e:d8:7d:f5:3b:df:f5:26:81:
                    41:30:ca:a7:3f:c2:65:36:36:b3:60:89:9c:33:b3:
                    58:b3:58:3b:ce:1b:c2:ef:c5:0c:dc:d4:ab:54:98:
                    c5:40:a9:a5:bd:34:d4:8b:b9:ee:fa:b1:45:0d:8b:
                    5f:60:ba:eb:17:ee:88:fe:8b:b8:f8:4f:6b:d9:17:
                    3d:dc:cf:c6:53:44:3d:86:d0:dd:dd:39:ae:96:f9:
                    73:22:65:88:52:dc:e3:aa:1a:74:0c:e1:0d:d9:12:
                    e9:46:25:9d:a0:7a:2b:be:0f:13:7b:20:6f:7b:a3:
                    9b:a4:37:1c:03:21:7b:6a:14:18:ac:c5:0a:5a:fd:
                    f1:5d:c3:c5:09:1e:72:6a:53:72:2b:f3:49:53:79:
                    d1:1f:db:f8:10:1d:4e:a2:0f:60:50:cd:b7:77:37:
                    ae:9c:c5:3a:da:dd:87:74:e2:ab:a5:ba:5c:1e:11:
                    fc:a9:ed:c7:6d:05:a3:4c:23:27:25:b0:9e:4a:26:
                    4e:65:48:cc:cf:cb:40:ee:de:65:7b:19:b2:ac:aa:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22
                  138.59.148.0/22
                  138.204.92.0/22
                  170.81.168.0/22
                  177.184.192.0/20
                  177.222.16.0/20
                  187.62.208.0/20
                  191.240.144.0/20
                  200.229.224.0/20
                IPv6:
                  2804:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28165

    Signature Algorithm: sha256WithRSAEncryption
         02:54:f8:55:7c:86:b8:15:24:f6:2b:2b:f0:b1:c5:87:c5:f6:
         68:52:22:a1:0a:40:65:d1:dc:30:3a:48:1b:f2:55:51:e8:55:
         6d:94:b1:59:f9:c8:e9:84:54:c4:38:1c:4c:a8:a6:d4:fa:05:
         7e:f7:18:6e:40:d6:00:c5:63:95:60:4c:73:e4:26:d7:2c:2d:
         bd:d7:d9:20:a4:47:f6:fa:c2:74:88:4a:5d:1e:95:20:53:92:
         50:29:4e:5f:0e:43:8a:47:4f:6e:4b:99:1d:6d:2a:46:8c:30:
         58:39:d6:0b:11:d8:55:9c:bf:07:c2:10:1b:1e:0b:0c:3e:95:
         82:6e:07:70:88:6a:2a:51:1d:47:f6:23:13:c5:56:1f:91:1a:
         1f:56:aa:f2:bb:fd:1c:47:1d:eb:94:f8:06:e0:e4:2e:cd:90:
         c8:fd:ab:12:c4:74:73:d2:88:5c:5e:5f:c0:b3:8b:22:10:ec:
         2c:2e:96:ab:e3:a8:33:5b:75:2e:b3:2b:60:01:ef:7e:34:a3:
         91:8b:1a:6f:99:dc:ca:69:30:a5:f9:da:79:0a:f2:b7:b7:d3:
         a5:54:a6:3d:43:3b:65:c9:aa:ad:99:6e:28:69:d7:80:01:8f:
         24:f4:53:e6:a9:e7:d4:87:dc:af:e0:6b:6c:7b:31:93:68:dc:
         f3:af:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 16:29:27 2024 by rpki-client on console-fra.rpki-client.org