Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.cer
File:                     AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.cer (raw, json)
Hash identifier:          iDrN/EVY3ZWCpeuNI95V0YfAFht658UNPi6JRNk53jY=
Subject key identifier:   AF:C7:A0:EB:D8:83:A8:EF:97:4E:E4:8C:3E:07:49:F4:AC:81:1A:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C66A366ADDC95CD962096017A6E9C2B8859CB7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Dec 2023 12:03:57 +0000
Certificate not after:    Sat 28 Dec 2024 12:08:57 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 17:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:66:a3:66:ad:dc:95:cd:96:20:96:01:7a:6e:9c:2b:88:59:cb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 12:03:57 2023 GMT
            Not After : Dec 28 12:08:57 2024 GMT
        Subject: CN=AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:bb:f3:6d:1f:37:0a:54:80:58:11:29:50:
                    d1:af:ca:e9:ff:43:71:26:48:08:72:51:85:bb:41:
                    d9:52:90:89:9f:20:d9:31:4b:7d:b4:ba:73:f3:a6:
                    51:65:5c:97:fa:d5:3d:06:23:d9:4c:57:45:b0:1e:
                    0d:62:52:c0:d4:08:50:0a:2e:e5:89:ed:c2:ca:61:
                    34:52:f4:9a:13:02:b6:ee:f6:05:a2:9f:55:4d:0d:
                    2b:f0:82:5f:58:c1:6b:a7:46:2a:83:a0:b8:02:96:
                    23:98:72:e2:8e:fe:1d:b3:0c:ac:cc:dc:43:24:f8:
                    83:7c:10:44:ed:e6:c1:ac:f2:e6:4d:58:ec:92:c7:
                    73:74:f4:9f:9f:ed:1a:45:8c:90:98:33:51:d3:1c:
                    ee:5f:fc:78:60:d6:ea:b2:af:cc:d7:f3:7c:19:a5:
                    64:4d:0a:39:39:49:29:f3:d9:07:86:c8:2a:2a:58:
                    e0:52:64:4a:c9:de:ab:42:14:26:36:99:69:60:f4:
                    85:fe:b5:1c:22:f5:87:87:b6:0f:c9:39:c4:01:3d:
                    46:75:87:62:01:ff:b0:13:f7:db:59:f6:e0:d7:a4:
                    3b:63:55:99:79:bc:e3:56:72:9f:14:d0:2f:db:d7:
                    5d:c2:ce:4f:a9:81:35:d8:2e:a7:ab:f6:3d:3f:3a:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:C7:A0:EB:D8:83:A8:EF:97:4E:E4:8C:3E:07:49:F4:AC:81:1A:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/AFC7A0EBD883A8EF974EE48C3E0749F4AC811AA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:fc:2e:b3:e6:13:f5:3f:68:7b:4f:89:96:94:77:75:bc:
         24:ab:d1:10:49:73:2d:a8:81:f3:ef:68:9b:5b:92:a4:4e:86:
         6c:e8:77:9e:cf:74:70:3f:82:64:4d:ca:57:30:02:18:36:be:
         ff:68:fc:ba:b6:07:8e:60:ed:a5:1d:20:87:1a:c2:fa:6c:db:
         df:76:3f:80:5c:90:71:ba:b4:d6:25:c5:06:28:a2:3d:9b:ed:
         2a:ad:ca:07:76:46:c3:44:a1:fa:1d:a6:c3:78:7c:a6:34:c3:
         c9:3a:38:eb:71:88:fd:c1:91:fc:91:6e:f7:12:ce:43:c7:ca:
         88:6c:bb:45:4c:07:4a:18:59:86:3f:4f:c2:8a:21:a2:0f:7a:
         02:dc:75:4f:4d:b3:78:b2:8d:db:7a:8f:ad:12:82:ab:17:e4:
         02:df:f8:83:e2:81:31:d3:1c:68:46:96:0a:9b:e7:59:b0:89:
         79:62:c6:e1:de:6b:9a:c3:d2:69:f3:a1:72:5c:71:cc:2a:35:
         53:24:39:c4:bb:a0:e3:fb:c4:ca:29:61:93:71:34:8d:7e:2d:
         9e:d9:2c:82:c8:95:cb:45:4c:9f:b7:f1:c7:5b:b5:8e:2b:43:
         20:78:be:7e:38:22:41:97:ad:7f:24:46:64:93:43:3f:99:47:
         01:de:d9:38
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXGajZq3clc2WIJYBem6cK4hZy38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMzAxMjAzNTdaFw0yNDEyMjgxMjA4NTdaMDMxMTAvBgNV
BAMTKEFGQzdBMEVCRDg4M0E4RUY5NzRFRTQ4QzNFMDc0OUY0QUM4MTFBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRErvzbR83ClSAWBEpUNGvyun/
Q3EmSAhyUYW7QdlSkImfINkxS320unPzplFlXJf61T0GI9lMV0WwHg1iUsDUCFAK
LuWJ7cLKYTRS9JoTArbu9gWin1VNDSvwgl9YwWunRiqDoLgCliOYcuKO/h2zDKzM
3EMk+IN8EETt5sGs8uZNWOySx3N09J+f7RpFjJCYM1HTHO5f/Hhg1uqyr8zX83wZ
pWRNCjk5SSnz2QeGyCoqWOBSZErJ3qtCFCY2mWlg9IX+tRwi9YeHtg/JOcQBPUZ1
h2IB/7AT99tZ9uDXpDtjVZl5vONWcp8U0C/b113Czk+pgTXYLqer9j0/OiQ7AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvx6Dr2IOo75dO
5Iw+B0n0rIEaozAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FR05mM1M0ajdZdDhwVk5tekdESzNSY1dlOVZjblRRcFNH
ejNxajFZS25UVy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRUdOZjNTNGo3WXQ4cFZObXpHREszUmNXZTlWY25UUXBT
R3ozcWoxWUtuVFcvMC9BRkM3QTBFQkQ4ODNBOEVGOTc0RUU0OEMzRTA3NDlGNEFD
ODExQUEzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1v1wwDQQCAAIwBwMF
ACgEQRQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA8SMA0GCSqGSIb3DQEBCwUA
A4IBAQB2W/wus+YT9T9oe0+JlpR3dbwkq9EQSXMtqIHz72ibW5KkToZs6Heez3Rw
P4JkTcpXMAIYNr7/aPy6tgeOYO2lHSCHGsL6bNvfdj+AXJBxurTWJcUGKKI9m+0q
rcoHdkbDRKH6HabDeHymNMPJOjjrcYj9wZH8kW73Es5Dx8qIbLtFTAdKGFmGP0/C
iiGiD3oC3HVPTbN4so3beo+tEoKrF+QC3/iD4oEx0xxoRpYKm+dZsIl5Ysbh3mua
w9Jp86FyXHHMKjVTJDnEu6Dj+8TKKWGTcTSNfi2e2SyCyJXLRUyft/HHW7WOK0Mg
eL5+OCJBl61/JEZkk0M/mUcB3tk4
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:24 2024 by rpki-client on console.sobornost.net