Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer
File:                     0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer (raw, json)
Hash identifier:          wwDynJI239AvN8qAWaihmKo8tym815EB68ZvlR5AapI=
Subject key identifier:   0E:0B:70:3F:84:2C:38:CB:B5:AE:67:1A:E3:48:E1:B1:36:E9:AA:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19A2C8742B1E082F6A2198D7A552F0B833904CF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:18:24 +0000
Certificate not after:    Thu 03 Apr 2025 17:23:24 +0000
Subordinate resources:    AS: 52985
                          IP: 191.232.0.0/13
                          IP: 2801:80:1d0::/48

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 04:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a2:c8:74:2b:1e:08:2f:6a:21:98:d7:a5:52:f0:b8:33:90:4c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:18:24 2024 GMT
            Not After : Apr  3 17:23:24 2025 GMT
        Subject: CN=0E0B703F842C38CBB5AE671AE348E1B136E9AA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:a1:0c:73:f0:56:56:a5:8e:93:5e:5d:e0:
                    00:c4:4e:a6:d5:e2:64:18:11:e3:0a:cf:5e:60:9c:
                    c6:e2:b8:cf:bd:3c:0c:e1:90:8e:1a:9f:01:13:ff:
                    f9:5d:88:18:f8:c4:64:39:6f:ed:62:7e:5d:b0:3e:
                    7f:44:cd:a9:8c:f3:c4:62:ac:0a:0b:16:78:77:19:
                    02:cb:09:07:fd:0f:ab:11:85:99:d1:cc:40:b2:61:
                    99:19:62:83:80:96:06:6d:0a:37:88:e7:1b:74:46:
                    94:9f:ff:9e:cc:86:45:ce:b7:c8:83:a8:41:b3:f9:
                    0e:74:c5:d2:a3:b3:90:4a:44:a3:ad:d7:03:2b:c1:
                    03:66:da:ce:34:e9:e1:27:1d:af:13:f5:d6:13:62:
                    3e:83:00:51:db:76:82:6e:bc:b2:e6:33:82:52:06:
                    da:50:48:cd:a9:3e:91:0c:07:d8:9f:f3:3b:87:14:
                    52:93:64:8f:f1:25:8c:57:b6:00:3d:e7:b7:33:fb:
                    d2:da:71:e4:70:b1:43:db:3f:2b:45:f3:b8:e2:ab:
                    9c:56:14:47:5a:78:3d:68:a1:d7:95:4c:97:98:45:
                    95:e6:66:2f:6f:3d:15:98:0a:38:8a:3b:b7:c5:7d:
                    54:e0:af:a8:de:f3:69:f5:2d:d5:c2:3f:6e:4b:cb:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:0B:70:3F:84:2C:38:CB:B5:AE:67:1A:E3:48:E1:B1:36:E9:AA:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.232.0.0/13
                IPv6:
                  2801:80:1d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52985

    Signature Algorithm: sha256WithRSAEncryption
         af:f3:0f:30:18:44:42:a7:6b:a9:dc:a6:44:c5:40:87:4b:a3:
         5b:ca:70:bb:f4:6f:b3:46:7b:98:66:5b:a9:db:20:95:84:fc:
         e7:f4:99:3b:f4:5e:18:2d:af:03:91:5d:98:f3:4b:c3:88:61:
         af:81:51:2d:aa:99:f5:76:e2:8e:9d:61:2e:f0:80:56:1b:71:
         e4:af:48:a2:e2:44:94:d8:d4:6e:58:bd:2b:06:34:ac:79:a5:
         8d:cd:f9:1d:49:c6:43:0f:72:ce:6e:a8:17:f2:d1:7b:ae:40:
         d9:5c:30:90:0e:6b:67:c2:03:c4:1d:ea:db:10:e7:fc:0d:2a:
         99:44:ef:7a:86:f7:59:5e:f0:1d:b8:46:c9:56:cc:0b:1f:74:
         ff:2e:2a:f5:c2:1b:4b:2c:32:58:b9:3e:c4:22:f7:c7:df:ae:
         8f:41:60:66:6b:35:b8:6b:1d:a6:68:b5:5b:a5:ee:15:2c:39:
         4f:ba:02:c1:16:4e:b8:88:9a:88:a0:a1:23:05:b4:8c:b5:44:
         d4:dd:01:39:7f:85:49:37:49:09:59:d0:63:7b:0e:c2:12:ff:
         59:51:07:75:31:07:22:49:ef:2c:d9:45:6d:72:a5:a2:f9:05:
         c3:05:27:dc:30:16:3d:96:35:77:13:ca:dc:da:3f:8d:08:4c:
         e6:e9:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:08:31 2024 by rpki-client on console-ams.rpki-client.org