Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer
File:                     07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer (raw, json)
Hash identifier:          /vdrZyVc1S/2O0TUbKlV9sj2uIVj2GEMEQDPLTzjss0=
Subject key identifier:   07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4415252FE44478B43E9484953B3547E936EF2D1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 16:54:11 +0000
Certificate not after:    Fri 18 Apr 2025 16:59:11 +0000
Subordinate resources:    AS: 267575
                          IP: 45.70.160.0/22
                          IP: 167.249.160.0/22
                          IP: 177.74.104.0/22
                          IP: 2804:4384::/32

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 01:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:25:2f:e4:44:78:b4:3e:94:84:95:3b:35:47:e9:36:ef:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 19 16:54:11 2024 GMT
            Not After : Apr 18 16:59:11 2025 GMT
        Subject: CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:fe:f8:e3:2b:11:67:77:90:d5:46:95:66:
                    14:84:f9:78:51:72:8b:a3:35:42:5e:e3:6e:7b:61:
                    41:8d:64:f1:41:93:3b:87:bc:40:0f:69:f0:2b:a7:
                    21:96:af:0c:16:b2:65:e1:14:5c:25:d4:53:d2:7e:
                    4a:ee:e7:52:e2:57:cf:3d:58:5e:93:a2:4a:4c:2c:
                    dc:99:b8:05:55:f8:c0:c4:ef:d2:ec:b2:33:ec:74:
                    ee:fc:bc:f2:ec:a8:7c:15:fc:bd:b1:10:7c:90:20:
                    5a:c5:d5:0c:23:7d:8c:b5:58:68:93:8f:2c:ff:b5:
                    79:f3:a1:3e:86:48:84:90:35:7d:aa:fc:de:8b:d2:
                    9e:95:2d:ac:01:0f:47:6d:02:94:69:dd:00:97:cf:
                    93:72:ef:11:ca:1d:3d:a6:d5:a3:5c:f0:79:62:93:
                    fe:f5:17:76:f8:d3:4d:25:c7:af:a1:79:de:b7:99:
                    39:41:84:09:49:ad:f5:67:09:1d:85:80:1a:d5:c0:
                    a6:92:c7:99:b2:6a:60:8b:b7:19:c8:0a:dc:9f:6c:
                    3c:49:ed:13:91:53:3c:db:50:45:be:d1:e9:eb:88:
                    62:8a:9d:e8:fe:4a:6c:81:f3:e6:d8:33:dd:51:15:
                    13:c1:9f:5b:79:91:d1:d8:7c:77:de:48:64:6e:f4:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.160.0/22
                  167.249.160.0/22
                  177.74.104.0/22
                IPv6:
                  2804:4384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267575

    Signature Algorithm: sha256WithRSAEncryption
         96:bb:ee:da:03:e6:64:59:e2:d6:ff:3f:bd:3c:a6:6f:b0:f5:
         c8:c0:93:3f:58:15:60:2d:ee:ad:24:76:27:a5:24:49:29:3d:
         9d:18:c7:f8:2e:c8:9f:7b:d6:22:0f:08:88:86:70:9a:7b:da:
         97:9a:96:e4:68:26:4f:ea:0c:3a:ad:f6:97:1d:a6:6b:38:e9:
         e6:67:3d:d6:a6:16:77:55:91:4e:2f:2b:e1:0a:89:f1:86:75:
         27:dd:25:01:62:48:32:62:59:5f:23:86:d4:8d:78:c5:36:00:
         7e:45:b6:e6:c4:fc:04:07:2c:e7:c7:cf:82:38:22:9c:d8:16:
         7a:c6:48:68:d4:53:a9:c8:08:2a:d5:34:1b:c6:df:fc:40:dc:
         e6:ac:88:a8:7d:3b:f0:e2:1f:c8:07:ed:5c:ab:d6:aa:ce:68:
         0f:13:3d:4f:c2:83:75:02:87:f4:e7:0c:9b:36:c0:b8:60:43:
         a4:b5:81:26:f7:84:51:27:a9:08:ae:2c:6e:75:35:01:7c:d3:
         09:0a:45:99:df:12:cf:a5:f3:44:48:52:95:64:63:eb:63:66:
         10:3e:7d:e3:2e:65:27:1a:83:84:3e:a7:12:ab:f4:ac:79:b2:
         61:c8:a2:6f:f5:49:f6:e2:8d:cc:90:8d:bd:ce:09:ac:f9:aa:
         94:73:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org