Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.cer
File:                     0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.cer (raw, json)
Hash identifier:          dRfmwWGH5uc35eISEyEip+Vd1KtQxfSb8cIIREKFQAI=
Subject key identifier:   0E:4B:51:59:7E:CD:FB:EB:0B:09:15:C3:6C:3B:B0:9A:1B:20:A7:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1427985CA93C16DF8718585B54602F624C98CDBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 22:08:02 +0000
Certificate not after:    Mon 02 Jun 2025 22:13:02 +0000
Subordinate resources:    AS: 52700
                          IP: 177.73.84.0/22
                          IP: 191.240.160.0/22
                          IP: 2804:110c::/32

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 06:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:98:5c:a9:3c:16:df:87:18:58:5b:54:60:2f:62:4c:98:cd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 22:08:02 2024 GMT
            Not After : Jun  2 22:13:02 2025 GMT
        Subject: CN=0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:ce:de:0b:46:c0:f9:8a:d2:75:40:a8:d7:
                    b0:13:df:b5:41:e7:c1:cf:35:1b:81:ed:29:4d:80:
                    2f:9c:e6:b4:12:c2:5d:46:7b:08:18:33:de:e0:91:
                    ae:53:d1:fd:80:fb:02:9a:c8:13:52:2b:af:d9:2b:
                    94:bd:06:a4:f9:65:71:37:f3:fd:b4:bf:49:15:05:
                    99:42:1c:12:2f:bd:9f:1b:3c:7d:c6:9e:b1:24:84:
                    4c:1e:be:b1:91:97:0a:9b:dc:80:02:b5:e9:d5:1d:
                    95:91:9e:05:25:1d:a2:1b:83:b3:6a:c5:c1:45:63:
                    38:13:71:16:7a:e6:59:34:5a:8a:52:18:19:b9:d9:
                    3e:3e:9f:b2:dd:af:0b:c8:8e:52:23:c0:4a:36:c0:
                    a6:b9:ac:1f:3e:59:6d:a3:f2:15:10:b4:a9:26:c8:
                    91:98:81:07:ac:b8:f2:51:a1:3b:28:22:93:df:17:
                    cd:c7:e1:3b:75:e4:fb:4f:8d:74:01:ed:99:65:61:
                    a9:8d:4b:37:d6:10:7d:ef:f3:81:10:32:7c:8a:67:
                    4a:b6:f9:9c:58:69:6a:8f:0d:a2:07:ff:95:77:2e:
                    7d:56:56:af:75:08:c7:f0:be:1d:d7:6a:20:9f:e7:
                    ac:94:ae:bc:c7:06:28:4c:86:71:d6:48:18:08:ce:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:4B:51:59:7E:CD:FB:EB:0B:09:15:C3:6C:3B:B0:9A:1B:20:A7:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/22
                  191.240.160.0/22
                IPv6:
                  2804:110c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52700

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:42:a7:56:12:2e:83:cb:33:99:08:e9:4b:12:ad:41:1b:
         02:c5:c8:d9:58:2a:c9:41:e4:f3:bd:86:75:1e:cb:76:f2:49:
         ae:73:b8:6f:7d:1e:49:19:6b:7f:92:2c:1a:17:ce:f4:00:8f:
         33:f1:cf:65:d4:7c:ef:f7:84:72:2c:9f:c4:14:4e:15:2f:3b:
         f1:48:ff:fa:97:5c:d2:6f:dd:7f:48:4f:fa:a9:88:91:b7:87:
         75:6e:50:c3:96:2b:4f:c6:ef:73:9f:f8:30:39:4e:71:b8:16:
         aa:7c:00:57:00:f0:ce:b0:c3:33:89:3c:8b:51:2c:9d:93:f1:
         91:51:90:57:ce:62:bf:e7:ba:a9:0c:8a:c2:67:ec:73:75:bb:
         b4:ec:52:dd:3f:bb:65:21:00:24:d4:51:5a:c3:6c:a4:16:e0:
         55:b2:31:a5:6f:6c:b7:9d:c5:1c:48:c9:23:6b:23:d1:66:62:
         78:4e:33:a8:77:df:93:76:6e:2a:40:47:82:2f:4f:b6:44:93:
         55:c7:d7:5a:6d:b1:f7:7d:fb:b2:c3:12:1b:27:1b:6f:28:81:
         bf:a1:46:45:0e:bc:5c:07:0f:70:b8:86:b4:be:b6:30:4c:de:
         9e:5a:ed:ff:21:e4:a1:bf:2c:a5:96:8c:2b:d0:90:f8:dc:5f:
         5c:c5:52:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 07:45:01 2024 by rpki-client on console-ams.rpki-client.org