Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
File:                     E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer (raw, json)
Hash identifier:          zxFBM3NKF7yxtjDY6YWdm6TrYOa7fDrsyWUMeUmWg3Y=
Subject key identifier:   E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D110A7C0EE936DF58568B8759D8A91BD6BE53A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 22:51:44 +0000
Certificate not after:    Wed 19 Jun 2024 22:56:44 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:0a:7c:0e:e9:36:df:58:56:8b:87:59:d8:a9:1b:d6:be:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 21 22:51:44 2023 GMT
            Not After : Jun 19 22:56:44 2024 GMT
        Subject: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:3c:40:24:d7:ac:d1:ba:d6:13:2b:c3:6b:
                    f6:f6:bf:19:f9:e8:02:fb:d3:84:9a:49:ef:ea:8d:
                    17:d6:f5:8e:62:aa:08:72:18:37:67:41:30:e0:07:
                    ee:46:8d:1c:55:ba:06:1a:17:db:7a:a4:52:53:3e:
                    5e:a7:25:f8:d8:57:f0:2b:a5:18:b6:1c:6d:5d:5b:
                    48:03:14:bd:4a:2d:04:c1:97:5e:1b:fa:af:d3:ef:
                    8d:ec:d2:86:6f:8b:ca:84:c8:29:13:df:a4:27:ad:
                    cf:49:ff:4f:87:10:85:ad:71:37:a7:5d:4c:1a:93:
                    95:2b:ab:97:f3:08:e8:8d:79:38:34:32:46:77:51:
                    d9:23:d7:92:1f:78:60:af:3b:9c:4a:2a:49:e5:a9:
                    1a:8d:0a:97:6d:c4:33:46:b0:22:59:82:fb:d9:1e:
                    a2:d5:29:2a:a3:43:55:cc:13:fd:c7:ff:48:ae:82:
                    72:6c:43:e1:93:61:92:c2:f2:28:34:cf:21:73:62:
                    c2:5d:58:2f:81:9e:14:a8:cd:72:de:ee:01:b1:33:
                    fb:56:4a:a0:88:0a:b0:66:da:04:dd:29:ab:1c:b2:
                    4d:54:4d:f2:f8:b4:df:06:53:a3:8d:4b:02:c9:98:
                    9f:49:ac:55:e5:f0:ef:bd:29:53:b6:5d:b9:ce:30:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         5d:34:a1:49:03:dc:e9:4a:c9:47:1c:ec:64:8a:59:93:d9:8c:
         29:f5:30:87:f6:72:0b:90:93:8a:d9:35:55:b6:09:9a:f3:68:
         ba:fe:ad:e3:a4:35:a2:6f:6a:98:8c:34:7f:bc:30:e3:ce:a7:
         3c:49:84:d8:fe:eb:78:fd:ff:23:cb:d1:4b:cd:42:dd:55:d6:
         f2:d1:26:cb:de:e7:5d:94:87:52:8a:12:9a:8f:96:94:df:9b:
         12:a7:52:41:85:e9:7b:93:8e:c9:84:e1:c4:19:f4:38:44:b4:
         dd:02:2d:af:3c:16:71:d4:fe:d7:91:ea:3c:04:7b:08:e3:15:
         37:67:12:3d:82:4d:0f:6b:f6:9b:22:3f:1e:6a:ad:b0:24:5a:
         aa:d7:aa:04:e1:93:8f:1d:b9:d4:20:7b:be:8a:0d:4e:87:c4:
         c7:dc:02:36:08:86:bc:21:2d:77:f4:b4:84:8f:a5:98:aa:b7:
         9e:26:09:6b:ca:ad:a6:93:42:71:29:98:b8:90:ee:c8:4b:c9:
         e7:c1:f2:b6:fe:de:69:a5:3e:47:58:ff:81:7d:fe:6d:8b:d6:
         60:b4:fb:ac:46:cf:f5:73:b9:13:6b:2f:9d:a0:89:ff:9e:c9:
         90:3b:be:14:a4:05:86:af:5a:55:04:eb:98:42:74:f4:e9:35:
         f0:76:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:10 2023 by rpki-client on console.sobornost.net