Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D251493312F283AB5462B511E5D7075BFB1B2317.cer
File:                     D251493312F283AB5462B511E5D7075BFB1B2317.cer (raw, json)
Hash identifier:          c/YVOXCSF0mQBaVkTvACzji5nYCI8FmIydHWcwvsPZY=
Subject key identifier:   D2:51:49:33:12:F2:83:AB:54:62:B5:11:E5:D7:07:5B:FB:1B:23:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48CB8821DD58108DE3FF0D2335ED844310EA43FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 19:01:32 +0000
Certificate not after:    Fri 29 Nov 2024 19:06:32 +0000
Subordinate resources:    AS: 271678
                          IP: 45.225.152.0/23
                          IP: 45.225.250.0/23
                          IP: 2804:7f48::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cb:88:21:dd:58:10:8d:e3:ff:0d:23:35:ed:84:43:10:ea:43:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 19:01:32 2023 GMT
            Not After : Nov 29 19:06:32 2024 GMT
        Subject: CN=D251493312F283AB5462B511E5D7075BFB1B2317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:bb:62:cb:dd:eb:35:ae:b8:d4:5c:b7:e8:
                    f4:28:58:b9:51:17:c5:39:16:cf:ad:61:8d:34:b3:
                    72:38:b1:61:fd:cb:58:4f:af:53:e8:a1:58:a2:51:
                    0a:d6:25:7b:77:15:02:ee:06:8b:5c:21:7a:c2:2c:
                    b4:44:95:1b:d5:37:c8:a4:5c:49:04:a2:32:a1:49:
                    c4:67:4c:39:2c:82:b3:34:1e:db:a9:b1:06:37:0d:
                    b7:e1:cd:fc:5d:5c:05:7a:95:f2:0f:33:56:a1:21:
                    6d:50:8d:46:7e:77:c8:93:8c:e1:43:11:a9:80:eb:
                    ce:57:ad:81:a5:49:68:34:a0:b8:ea:7e:90:d7:49:
                    0f:68:a2:96:dd:1b:53:22:7f:d2:de:a3:22:6d:60:
                    0b:8a:8b:c6:1f:9f:f1:7e:39:cb:8d:01:92:8c:38:
                    0b:36:fb:8f:5a:a9:15:60:e4:53:f2:ce:c0:8e:e7:
                    1e:5b:fa:ab:8f:94:ee:00:dd:2c:06:2c:e0:88:cb:
                    c2:be:9d:34:71:ad:d3:33:64:26:ee:4f:20:43:1a:
                    77:d0:67:7c:aa:fd:ec:54:bf:af:58:25:b6:b6:72:
                    4c:a4:33:c3:81:f8:7b:5b:10:85:da:d2:bf:55:b5:
                    7e:d4:c5:f1:0b:9d:66:2e:4d:d3:07:97:0b:fb:f2:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:51:49:33:12:F2:83:AB:54:62:B5:11:E5:D7:07:5B:FB:1B:23:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.152.0/23
                  45.225.250.0/23
                IPv6:
                  2804:7f48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271678

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:a8:57:31:09:d0:8a:7b:6a:32:96:4a:67:52:50:32:3a:
         f0:c2:9c:f5:47:28:e6:43:ba:b4:37:ee:bb:c9:3d:7d:db:2a:
         82:51:57:c1:aa:37:e3:08:42:2b:51:dc:0e:0d:57:11:d0:a4:
         38:09:79:b4:75:0d:c2:61:19:8d:89:60:19:d1:e6:c7:b7:1c:
         9b:5b:02:08:1b:71:4c:be:53:4f:12:3d:fc:d3:b7:4f:23:55:
         ff:26:9a:4f:7f:e5:b6:a7:e8:e0:70:9b:61:38:3e:ca:48:47:
         38:ca:72:a8:c0:64:41:4c:bd:12:c2:be:2a:c9:c5:05:c3:7c:
         9b:dc:d4:66:34:2b:0a:35:97:9e:71:5a:22:0b:66:30:cf:16:
         d3:c0:8a:b7:4c:8e:5f:5c:99:0d:9f:34:ea:cf:61:27:56:11:
         3d:b3:46:20:b0:bd:d7:51:56:54:b4:3d:7f:e7:11:38:fa:17:
         1b:66:ec:e0:10:76:76:50:da:ee:be:49:a5:bc:7a:48:3b:21:
         76:3b:15:9e:17:35:be:27:9d:a7:94:22:8e:ea:66:31:d3:f2:
         6e:59:3b:a2:63:da:27:6a:41:f1:63:36:58:8c:d7:29:c1:5d:
         3a:ca:86:34:b3:26:e1:71:ac:b5:32:4d:0d:ab:39:9d:c0:97:
         f2:63:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 16:39:45 2023 by rpki-client on console-fra.rpki-client.org