Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.cer
File:                     93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.cer (raw, json)
Hash identifier:          +MHLUCVzD7gu+gcmwKmciTaTroI3UVySQyt97VqFrNo=
Subject key identifier:   93:F3:F8:57:B1:F9:E1:EC:7A:FE:49:B4:99:53:E6:E2:7B:D4:B3:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0598AE6FEA16019249094A3AC66608AB497B8E5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Sep 2023 01:48:17 +0000
Certificate not after:    Fri 30 Aug 2024 01:53:17 +0000
Subordinate resources:    AS: 269439
                          IP: 45.186.228.0/22
                          IP: 2804:64a0::/32

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 05:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:98:ae:6f:ea:16:01:92:49:09:4a:3a:c6:66:08:ab:49:7b:8e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  1 01:48:17 2023 GMT
            Not After : Aug 30 01:53:17 2024 GMT
        Subject: CN=93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:ae:0f:f6:bc:e0:ac:55:62:c4:40:b5:12:
                    52:36:40:ae:64:a0:3c:32:3b:d8:ce:1e:47:ef:e3:
                    01:52:63:af:3a:e5:70:19:5a:1a:2f:25:58:cc:7b:
                    58:fb:ca:7f:e2:73:47:41:23:ca:c1:32:96:3a:4d:
                    1f:e2:19:65:4f:87:5f:a5:d3:2c:25:0d:24:3b:e1:
                    6c:6a:5a:36:0c:66:6f:43:9a:8a:5a:39:5c:89:49:
                    df:70:ad:c5:78:44:44:0a:0f:13:fd:ee:f4:0d:be:
                    22:a8:9f:ef:0a:6a:f9:1b:6d:43:a9:69:a2:bc:fd:
                    8f:7a:93:79:77:e5:15:6b:85:9f:54:d2:05:4f:96:
                    0c:72:2b:7d:78:e9:3d:1f:df:6b:90:75:28:96:5c:
                    36:b2:f4:f3:fe:d5:13:bc:48:29:bc:ee:7f:5f:e4:
                    ab:4c:9b:71:d9:e6:66:49:c4:00:57:63:21:3f:41:
                    fb:c5:1c:4f:2c:1a:67:d9:03:9c:07:b1:e4:a9:43:
                    d2:38:07:a9:fb:55:e7:16:1a:4c:c9:63:ca:a9:bf:
                    8e:8e:25:5a:df:43:4f:24:a9:44:fb:49:5e:ba:ca:
                    11:a3:94:ce:20:e6:76:5f:28:ee:3f:0d:26:49:f0:
                    67:10:bc:35:43:34:5d:09:5e:e5:08:c4:91:97:0a:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:F3:F8:57:B1:F9:E1:EC:7A:FE:49:B4:99:53:E6:E2:7B:D4:B3:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.228.0/22
                IPv6:
                  2804:64a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269439

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:f3:a0:0e:48:56:48:cd:42:79:ff:8c:2f:80:75:27:bf:
         a1:2b:e1:3a:92:73:c9:b6:2c:74:f1:93:ac:02:99:d5:c8:24:
         50:cc:7b:ab:82:4f:f9:bd:c9:99:41:05:e8:f5:4e:03:0d:46:
         17:0f:12:87:ca:7d:d4:5c:7b:13:0e:12:46:5f:fa:69:f0:59:
         c3:07:66:1e:a2:47:7d:e9:cb:a9:eb:65:2b:eb:c6:4b:94:b3:
         45:48:4a:a7:f9:8a:3a:8f:a3:59:00:94:8e:a4:ce:d4:3c:c9:
         47:02:0d:cc:b4:24:b2:57:97:ba:e7:c5:47:8f:7d:24:df:98:
         1a:d0:f1:0d:51:22:df:9b:ac:cc:6a:db:83:0c:17:af:1f:8e:
         1b:cf:7b:b8:e7:16:34:ef:7b:54:86:6e:da:34:09:be:8e:35:
         84:b4:5a:f3:76:9c:60:87:80:d9:73:f7:0f:95:2e:11:c0:c8:
         2d:8f:3e:e4:a6:79:14:86:9d:87:0e:68:e5:9e:39:79:6d:f3:
         eb:e9:35:7a:3b:43:ad:a6:8b:ea:58:73:5d:23:aa:25:24:e4:
         3a:0a:0d:b6:58:5b:fb:a5:0a:75:a0:4b:c2:87:8e:8c:72:a5:
         ea:9f:f4:62:12:2c:b1:04:1f:a7:a6:40:61:6c:8e:c3:4a:90:
         63:b1:84:b7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBZiub+oWAZJJCUo6xmYIq0l7jl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDEwMTQ4MTdaFw0yNDA4MzAwMTUzMTdaMDMxMTAvBgNV
BAMTKDkzRjNGODU3QjFGOUUxRUM3QUZFNDlCNDk5NTNFNkUyN0JENEIzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Cq4P9rzgrFVixEC1ElI2QK5k
oDwyO9jOHkfv4wFSY6865XAZWhovJVjMe1j7yn/ic0dBI8rBMpY6TR/iGWVPh1+l
0ywlDSQ74WxqWjYMZm9DmopaOVyJSd9wrcV4REQKDxP97vQNviKon+8KavkbbUOp
aaK8/Y96k3l35RVrhZ9U0gVPlgxyK3146T0f32uQdSiWXDay9PP+1RO8SCm87n9f
5KtMm3HZ5mZJxABXYyE/QfvFHE8sGmfZA5wHseSpQ9I4B6n7VecWGkzJY8qpv46O
JVrfQ08kqUT7SV66yhGjlM4g5nZfKO4/DSZJ8GcQvDVDNF0JXuUIxJGXCmItAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBST8/hXsfnh7Hr+
SbSZU+bie9Sz1zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IWUJVRkNOYUFZbjRFVUY0QnFSNzg1UEZpWUpkeVZqWlFM
UmRCajVXUXhVWi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSFlCVUZDTmFBWW40RVVGNEJxUjc4NVBGaVlKZHlWalpR
TFJkQmo1V1F4VVovMC85M0YzRjg1N0IxRjlFMUVDN0FGRTQ5QjQ5OTUzRTZFMjdC
RDRCM0Q3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItuuQwDQQCAAIwBwMF
ACgEZKAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBx/MA0GCSqGSIb3DQEBCwUA
A4IBAQBU4POgDkhWSM1Cef+ML4B1J7+hK+E6knPJtix08ZOsApnVyCRQzHurgk/5
vcmZQQXo9U4DDUYXDxKHyn3UXHsTDhJGX/pp8FnDB2Yeokd96cup62Ur68ZLlLNF
SEqn+Yo6j6NZAJSOpM7UPMlHAg3MtCSyV5e658VHj30k35ga0PENUSLfm6zMatuD
DBevH44bz3u45xY073tUhm7aNAm+jjWEtFrzdpxgh4DZc/cPlS4RwMgtjz7kpnkU
hp2HDmjlnjl5bfPr6TV6O0OtpovqWHNdI6olJOQ6Cg22WFv7pQp1oEvCh46McqXq
n/RiEiyxBB+npkBhbI7DSpBjsYS3
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:20 2024 by rpki-client on console.sobornost.net