Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
File:                     0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer (raw, json)
Hash identifier:          mxkuFWXmDk7vhr9L5G9nvFEMNc7QtO3l74bRM2DHtN4=
Subject key identifier:   0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       451E38D08CAA42FE4D3CF932BEEEF4261D80705F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 14:08:00 +0000
Certificate not after:    Thu 15 May 2025 14:13:00 +0000
Subordinate resources:    AS: 268815
                          IP: 45.173.152.0/22
                          IP: 2804:5b0c::/32

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 03:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1e:38:d0:8c:aa:42:fe:4d:3c:f9:32:be:ee:f4:26:1d:80:70:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 14:08:00 2024 GMT
            Not After : May 15 14:13:00 2025 GMT
        Subject: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:31:aa:f4:4f:f4:2b:7c:d2:4f:fd:46:c7:
                    32:46:64:d7:8f:29:78:53:d4:b6:4b:cc:5e:ce:12:
                    f3:88:ca:12:7f:be:56:d5:9a:d4:97:68:f3:f3:ee:
                    09:06:0a:ce:ef:4e:f8:be:9c:83:a7:a5:b5:c8:15:
                    22:dc:0d:06:fd:f4:2c:9b:d3:50:ef:8b:7c:31:dc:
                    e7:74:4d:1c:d9:9c:5a:f8:4a:63:b7:2a:cb:64:4f:
                    ce:f9:22:4c:ae:fb:10:6e:b9:61:4f:7f:8d:9e:db:
                    b1:35:65:3d:80:14:23:22:55:5e:92:4d:84:2c:29:
                    74:c2:f4:58:ec:b6:f8:17:aa:35:30:32:9e:b3:a9:
                    97:dd:4f:a8:67:ef:4c:bb:55:f6:80:d5:4b:94:a0:
                    81:dd:a8:53:52:3c:ca:29:63:5c:6d:d2:d8:5f:17:
                    cc:f9:bb:22:58:d2:6f:88:41:fd:49:5d:c4:41:b5:
                    a8:86:7b:41:de:c9:d2:25:41:80:27:54:c6:27:bb:
                    d7:85:f1:23:4c:40:03:c2:2c:ab:ff:eb:a0:f3:a5:
                    d4:5a:60:49:66:eb:3d:39:b3:23:76:64:d0:88:09:
                    f0:d8:ef:16:8f:53:cd:08:6b:81:85:cc:c6:ea:77:
                    35:0f:3d:a1:10:5d:63:44:1b:2f:5b:c8:ce:e9:53:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.152.0/22
                IPv6:
                  2804:5b0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268815

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:e6:41:84:3d:80:c6:eb:2f:1e:ca:8d:be:d6:2d:a2:cf:
         c8:5e:94:5f:a9:ae:af:fe:05:67:ca:1b:23:d2:7b:d6:64:c6:
         87:f2:59:6c:cc:e9:df:3a:34:9a:6e:93:8a:c0:ae:21:0b:ea:
         0f:2c:a7:d1:cd:47:a9:58:14:fe:c4:81:d0:78:9c:8e:2d:8b:
         7c:1c:a4:5d:d4:67:46:55:7d:e1:9b:db:86:a7:b2:85:c4:98:
         6f:44:c0:ff:b1:c3:18:b2:c4:34:d8:20:a8:ee:17:05:17:31:
         17:72:e2:c0:f7:75:09:bf:d9:65:21:98:fb:84:c5:22:91:99:
         0e:19:a5:69:15:b0:49:37:6f:7b:d6:2f:c8:b8:11:78:70:0a:
         ab:68:03:c1:e9:ac:24:19:34:32:fd:1b:c8:dd:1b:63:50:2c:
         67:17:6c:f0:2a:45:d8:f3:63:c3:29:ad:4d:c3:e1:c8:90:7e:
         23:db:a5:28:40:d4:d4:7c:3b:59:92:2c:b3:eb:b0:2c:55:28:
         e8:a6:48:59:b1:7c:33:ff:64:5e:31:71:2e:10:df:cd:14:8d:
         30:53:13:ff:e8:50:aa:dd:32:76:7c:e9:a9:7c:bf:86:64:ff:
         cb:bc:f2:e8:01:3e:64:fa:64:af:91:6b:c9:26:95:67:2e:19:
         ae:7f:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 06:22:37 2024 by rpki-client on console-ams.rpki-client.org