Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/05AEB0BCD230080D126E63FE723A02C56389B127.cer
File:                     05AEB0BCD230080D126E63FE723A02C56389B127.cer (raw, json)
Hash identifier:          P6yvtHFvu+wCgQNG1/k8+NowUvbUWMSzMZk8iJJy6B8=
Subject key identifier:   05:AE:B0:BC:D2:30:08:0D:12:6E:63:FE:72:3A:02:C5:63:89:B1:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F652E920A5A4BB357EE9661A7BC0139E723F39E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/05AEB0BCD230080D126E63FE723A02C56389B127.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 16:05:32 +0000
Certificate not after:    Mon 16 Sep 2024 16:10:32 +0000
Subordinate resources:    AS: 263411
                          IP: 179.97.24.0/21
                          IP: 2804:15cc::/32

Validation:               Failed, certificate revoked on Sun 21 Jan 2024 09:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:2e:92:0a:5a:4b:b3:57:ee:96:61:a7:bc:01:39:e7:23:f3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 16:05:32 2023 GMT
            Not After : Sep 16 16:10:32 2024 GMT
        Subject: CN=05AEB0BCD230080D126E63FE723A02C56389B127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:5b:89:4d:94:b9:a7:58:0e:fe:8d:e7:6f:
                    38:42:f2:ac:7c:47:3e:8d:14:55:bb:1f:66:04:b8:
                    fc:70:32:47:8b:9d:17:c7:83:5c:38:92:b6:b6:36:
                    27:f8:61:9d:f2:aa:8f:4b:4c:88:76:2a:db:b8:2c:
                    b5:04:d6:00:c4:75:f3:51:92:02:69:b2:89:cf:8a:
                    7b:92:ff:d1:dd:27:f6:32:a4:5b:16:ca:0e:9e:63:
                    e7:04:6f:77:5b:4a:f7:a5:b5:64:c7:3c:ff:d3:30:
                    58:d1:c3:ad:36:1e:71:bf:65:90:ce:4b:c5:2f:e9:
                    85:e8:46:61:41:f7:a1:e9:54:3a:6b:c4:7c:c4:8c:
                    e2:05:5e:d7:bd:ca:30:d3:5d:53:0a:cd:ee:d7:b5:
                    20:16:8a:49:0a:91:7b:3d:66:ac:a0:74:b2:10:66:
                    06:49:af:08:3b:34:36:d4:c8:37:ae:a4:62:c5:ee:
                    01:da:a6:56:81:7f:b6:6f:77:ba:2c:f6:65:de:25:
                    93:90:dc:24:1b:0b:56:90:fd:5b:35:c2:ec:66:85:
                    6a:20:bc:40:b4:88:52:b3:17:d8:98:5a:9e:b7:da:
                    14:13:69:df:dc:1f:d3:7f:b3:fa:3b:ab:9f:52:1b:
                    04:b0:af:5c:fa:5d:7c:db:8b:93:da:cc:c1:45:a3:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:AE:B0:BC:D2:30:08:0D:12:6E:63:FE:72:3A:02:C5:63:89:B1:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/05AEB0BCD230080D126E63FE723A02C56389B127.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21
                IPv6:
                  2804:15cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263411

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:e4:74:1e:31:8e:fd:9d:a6:6f:df:92:e1:dd:94:26:0e:
         99:fd:ce:b8:e3:76:66:b9:75:83:52:3c:be:66:db:f8:7b:00:
         bc:8e:71:3f:30:7c:13:79:39:40:e0:01:29:52:f4:96:f0:cd:
         81:23:eb:2b:36:66:42:2b:b0:da:f7:34:8a:e4:f8:b5:fa:a0:
         4c:1c:27:13:92:eb:7e:1b:e5:3b:53:81:47:a8:3a:9a:70:33:
         97:b4:93:22:60:53:fb:44:ce:e6:2a:21:33:42:88:10:b4:6b:
         a8:6e:44:b3:48:63:61:0c:88:4b:c5:37:7a:65:d6:25:9c:90:
         93:25:3e:86:bd:8c:23:46:f6:4c:ac:45:96:9d:25:92:4f:28:
         05:98:66:bf:f0:f9:c9:70:c9:49:49:fe:6b:b5:79:ff:d8:66:
         8f:81:43:0a:7f:48:14:3c:24:b0:03:4d:f5:f0:00:95:d1:70:
         0a:2a:e5:16:29:2f:19:cd:2d:39:e9:1b:dd:8a:c0:61:39:d2:
         da:2b:ac:8e:29:9e:ab:fb:a0:c1:7d:c2:53:73:05:c7:7a:18:
         d2:fd:0f:3b:3d:e9:89:e0:c7:48:fc:de:d0:6d:86:65:1a:ef:
         1b:b2:36:a6:7f:dc:93:fd:77:e8:b7:64:2a:db:32:88:ff:3d:
         f0:63:43:a8
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUD2UukgpaS7NX7pZhp7wBOecj854wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTgxNjA1MzJaFw0yNDA5MTYxNjEwMzJaMDMxMTAvBgNV
BAMTKDA1QUVCMEJDRDIzMDA4MEQxMjZFNjNGRTcyM0EwMkM1NjM4OUIxMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqe1uJTZS5p1gO/o3nbzhC8qx8
Rz6NFFW7H2YEuPxwMkeLnRfHg1w4kra2Nif4YZ3yqo9LTIh2Ktu4LLUE1gDEdfNR
kgJpsonPinuS/9HdJ/YypFsWyg6eY+cEb3dbSveltWTHPP/TMFjRw602HnG/ZZDO
S8Uv6YXoRmFB96HpVDprxHzEjOIFXte9yjDTXVMKze7XtSAWikkKkXs9ZqygdLIQ
ZgZJrwg7NDbUyDeupGLF7gHaplaBf7Zvd7os9mXeJZOQ3CQbC1aQ/Vs1wuxmhWog
vEC0iFKzF9iYWp632hQTad/cH9N/s/o7q59SGwSwr1z6XXzbi5PazMFFow09AgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQFrrC80jAIDRJu
Y/5yOgLFY4mxJzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9XcWcydENyTk1TQlB5N2RvRnQxQm5KNlUya0N0d0RLTWV5
ek01S0JMSHdrLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9XcWcydENyTk1TQlB5N2RvRnQxQm5KNlUya0N0d0RLTWV5
ek01S0JMSHdrLzAvMDVBRUIwQkNEMjMwMDgwRDEyNkU2M0ZFNzIzQTAyQzU2Mzg5
QjEyNy5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDs2EYMA0EAgACMAcDBQAo
BBXMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQE8zANBgkqhkiG9w0BAQsFAAOC
AQEAfYTkdB4xjv2dpm/fkuHdlCYOmf3OuON2Zrl1g1I8vmbb+HsAvI5xPzB8E3k5
QOABKVL0lvDNgSPrKzZmQiuw2vc0iuT4tfqgTBwnE5LrfhvlO1OBR6g6mnAzl7ST
ImBT+0TO5iohM0KIELRrqG5Es0hjYQyIS8U3emXWJZyQkyU+hr2MI0b2TKxFlp0l
kk8oBZhmv/D5yXDJSUn+a7V5/9hmj4FDCn9IFDwksANN9fAAldFwCirlFikvGc0t
Oekb3YrAYTnS2iusjimeq/ugwX3CU3MFx3oY0v0POz3pieDHSPze0G2GZRrvG7I2
pn/ck/136LdkKtsyiP898GNDqA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:01 2024 by rpki-client on console.sobornost.net