Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/90E23EEF06B5602BB8EC3604C356562C80D17F5F.cer
File:                     90E23EEF06B5602BB8EC3604C356562C80D17F5F.cer (raw, json)
Hash identifier:          Bl/aBu3O/YhFMqrt+YJcq//qAuhAz7m/dy8IHxyWCzg=
Subject key identifier:   90:E2:3E:EF:06:B5:60:2B:B8:EC:36:04:C3:56:56:2C:80:D1:7F:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48F6F5DB8BDF01F19F74D93D523FB156A5AE1507
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/90E23EEF06B5602BB8EC3604C356562C80D17F5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Sep 2024 16:25:22 +0000
Certificate not after:    Fri 19 Sep 2025 16:30:22 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 07:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f6:f5:db:8b:df:01:f1:9f:74:d9:3d:52:3f:b1:56:a5:ae:15:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 20 16:25:22 2024 GMT
            Not After : Sep 19 16:30:22 2025 GMT
        Subject: CN=90E23EEF06B5602BB8EC3604C356562C80D17F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:ca:66:25:d5:ad:4c:f4:af:04:8a:04:f0:
                    50:65:da:11:b2:09:e9:8e:1b:2a:cf:9b:0c:05:de:
                    e2:65:3b:bd:35:e3:9d:b9:d2:fb:90:d9:6d:ec:23:
                    7e:c0:0d:30:80:73:ab:d5:1a:a1:cc:da:aa:e0:3c:
                    24:e3:1f:f6:77:f3:9a:7a:a8:65:0e:44:3a:15:b4:
                    8a:6a:04:b9:a0:19:9e:70:6d:8d:e4:c9:16:83:cd:
                    9a:62:ee:9a:c9:e5:8d:db:59:4c:df:05:77:a8:b3:
                    2f:cb:3b:fd:66:84:67:dc:62:c0:1a:9b:b6:15:36:
                    8a:c5:7d:ca:0c:8e:cd:44:a3:55:32:e8:15:2a:e7:
                    f7:c2:cb:b9:ca:4d:12:63:7d:6b:96:26:1f:3e:5c:
                    74:be:01:87:75:29:f0:49:73:1d:e2:c3:28:26:94:
                    5f:20:e9:e8:75:e7:a1:8f:9d:3f:83:ab:97:8a:e0:
                    b1:25:e7:cd:7d:7d:26:77:e6:ef:3c:66:72:1d:a9:
                    ab:7b:e5:a4:3a:4c:b2:5b:0d:1d:17:bf:2c:26:b8:
                    11:21:02:d5:8a:5c:97:4b:5f:86:38:85:59:9a:fe:
                    b6:ff:06:b3:42:ae:fe:31:65:75:5d:c9:56:ed:dd:
                    9d:5f:27:eb:81:82:69:19:5a:44:3c:e4:ae:6a:e0:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:E2:3E:EF:06:B5:60:2B:B8:EC:36:04:C3:56:56:2C:80:D1:7F:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/90E23EEF06B5602BB8EC3604C356562C80D17F5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:00:a4:72:9a:1b:5b:d0:3c:2b:4f:d8:57:b2:b2:63:e4:
         5c:e4:32:fc:8a:87:b1:1f:78:68:02:2a:da:58:ac:70:8a:8c:
         95:a1:5f:4d:fe:4d:f6:82:a3:72:ca:1f:8d:ab:af:93:fc:b1:
         a7:86:18:62:3e:0e:56:b3:26:8d:fd:da:b4:e0:b7:58:71:18:
         51:6a:54:5e:96:f7:fd:92:68:68:43:b3:6c:df:4a:66:a1:d9:
         d4:ce:45:55:8c:06:69:40:33:02:70:22:ac:16:fa:83:9a:3a:
         6f:43:c9:1b:cf:d8:95:3f:51:a6:69:f2:70:5c:65:6d:29:50:
         26:85:9a:6c:95:c4:3f:44:a3:8e:d3:b4:ff:a2:52:60:6f:ec:
         88:a1:91:0b:02:bd:81:c3:dd:51:f4:6c:2a:a2:0b:46:83:2c:
         67:91:e2:0c:99:e0:e2:fd:f0:4d:f8:ed:d8:cf:f0:f1:a4:36:
         35:70:f8:72:c7:bd:26:74:55:f4:19:f1:bb:d6:06:9e:c2:8c:
         0b:13:86:f4:10:a2:85:d1:f1:ec:e5:da:df:b8:b0:2d:a4:97:
         86:23:c7:c3:18:ad:99:f7:9f:dd:3b:da:0f:af:e2:38:3c:c3:
         11:26:83:88:bf:b2:a3:f2:ca:de:30:1d:68:b0:63:77:a2:cb:
         09:d2:45:8f
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUSPb124vfAfGfdNk9Uj+xVqWuFQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MjAxNjI1MjJaFw0yNTA5MTkxNjMwMjJaMDMxMTAvBgNV
BAMTKDkwRTIzRUVGMDZCNTYwMkJCOEVDMzYwNEMzNTY1NjJDODBEMTdGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAspmJdWtTPSvBIoE8FBl2hGy
CemOGyrPmwwF3uJlO70145250vuQ2W3sI37ADTCAc6vVGqHM2qrgPCTjH/Z385p6
qGUORDoVtIpqBLmgGZ5wbY3kyRaDzZpi7prJ5Y3bWUzfBXeosy/LO/1mhGfcYsAa
m7YVNorFfcoMjs1Eo1Uy6BUq5/fCy7nKTRJjfWuWJh8+XHS+AYd1KfBJcx3iwygm
lF8g6eh156GPnT+Dq5eK4LEl5819fSZ35u88ZnIdqat75aQ6TLJbDR0XvywmuBEh
AtWKXJdLX4Y4hVma/rb/BrNCrv4xZXVdyVbt3Z1fJ+uBgmkZWkQ85K5q4HeNAgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQ4j7vBrVgK7js
NgTDVlYsgNF/XzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDgx
YWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNnYnkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q4
MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAvOTBF
MjNFRUYwNkI1NjAyQkI4RUMzNjA0QzM1NjU2MkM4MEQxN0Y1Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQEsYIAAwQEusHwAwQEuxDwAwQEu18gMA0EAgACMAcD
BQAoBCjkMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm5kMA0GCSqGSIb3DQEBCwUA
A4IBAQCMhwCkcpobW9A8K0/YV7KyY+Rc5DL8ioexH3hoAiraWKxwioyVoV9N/k32
gqNyyh+Nq6+T/LGnhhhiPg5WsyaN/dq04LdYcRhRalRelvf9kmhoQ7Ns30pmodnU
zkVVjAZpQDMCcCKsFvqDmjpvQ8kbz9iVP1GmafJwXGVtKVAmhZpslcQ/RKOO07T/
olJgb+yIoZELAr2Bw91R9GwqogtGgyxnkeIMmeDi/fBN+O3Yz/DxpDY1cPhyx70m
dFX0GfG71gaewowLE4b0EKKF0fHs5drfuLAtpJeGI8fDGK2Z95/dO9oPr+I4PMMR
JoOIv7Kj8sreMB1osGN3ossJ0kWP
-----END CERTIFICATE-----
Generated at Mon Oct 21 09:40:14 2024 by rpki-client on console-fra.rpki-client.org