Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E458A4DD2C01B63E47F15C471467E630D2E131C.cer
File:                     1E458A4DD2C01B63E47F15C471467E630D2E131C.cer (raw, json)
Hash identifier:          RrwH40jpytGLYAFbSK+xyYM/IQFU3Xecn0uGQvuXq48=
Subject key identifier:   1E:45:8A:4D:D2:C0:1B:63:E4:7F:15:C4:71:46:7E:63:0D:2E:13:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       684515EC014580E7D9091B5188AE27AE7A05DCBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/1E458A4DD2C01B63E47F15C471467E630D2E131C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 17:44:54 +0000
Certificate not after:    Tue 29 Jul 2025 17:49:54 +0000
Subordinate resources:    AS: 263390
                          IP: 177.222.176.0/20
                          IP: 2804:157c::/32
Validation:               Failed, certificate revoked on Thu 05 Dec 2024 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:45:15:ec:01:45:80:e7:d9:09:1b:51:88:ae:27:ae:7a:05:dc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 17:44:54 2024 GMT
            Not After : Jul 29 17:49:54 2025 GMT
        Subject: CN=1E458A4DD2C01B63E47F15C471467E630D2E131C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:4f:1a:1d:79:8f:aa:7d:34:b2:69:ee:14:
                    8a:87:c2:e7:d0:84:74:3a:4a:87:b9:b5:7f:47:56:
                    c9:13:d2:51:41:33:ed:c2:31:19:64:00:6d:61:fd:
                    31:a7:90:38:99:95:28:48:70:33:c4:8a:52:7b:23:
                    c5:65:6d:b8:e5:a0:da:c7:e4:96:20:c3:7a:b4:92:
                    38:a0:01:b2:e5:78:e9:c8:d4:1a:00:fa:70:a3:72:
                    8f:fb:01:31:5d:23:eb:b7:6d:7a:b2:36:89:05:c9:
                    f1:af:e3:8e:c9:37:0a:ec:ca:9c:cc:dd:9b:f2:13:
                    a3:4e:82:7a:a8:57:1a:ac:10:85:5b:16:e4:37:d4:
                    e3:a3:aa:31:ae:94:6b:d8:de:39:d7:d1:41:ca:46:
                    a7:a4:fa:40:f5:86:34:76:87:63:69:7b:54:1d:16:
                    4f:3b:30:34:8c:90:1a:57:5f:e8:f1:e3:70:9b:e5:
                    9f:83:f1:96:68:a6:c9:49:34:c0:c2:4a:cd:ab:4e:
                    a3:d2:d4:3a:dd:ba:d7:44:91:9a:23:cd:a3:5e:89:
                    7d:85:de:7d:d3:b6:7b:6b:fb:a7:45:ee:a1:01:5b:
                    14:39:32:84:92:a0:11:f3:bf:ed:f0:06:79:aa:dd:
                    a0:29:6e:03:4f:c8:66:ad:95:83:93:01:54:e7:1c:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:45:8A:4D:D2:C0:1B:63:E4:7F:15:C4:71:46:7E:63:0D:2E:13:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/1E458A4DD2C01B63E47F15C471467E630D2E131C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20
                IPv6:
                  2804:157c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263390

    Signature Algorithm: sha256WithRSAEncryption
         ce:28:85:ab:fd:9c:2e:4c:ad:25:23:70:0d:7e:2d:5a:aa:60:
         47:15:df:83:8b:18:2f:2d:2d:8a:19:1b:53:45:5c:bc:20:69:
         7e:cb:a2:aa:08:11:0b:15:36:ab:12:be:0b:51:7a:d5:70:a1:
         0c:2b:66:6c:d5:97:4c:4b:ba:18:7d:10:e0:a4:c6:5f:0c:a1:
         69:7a:72:4a:8d:cf:30:b9:54:30:70:1f:7f:f0:84:89:4f:51:
         c9:91:cf:33:9a:da:c1:9d:51:14:24:83:1d:9a:c4:b1:bc:c5:
         74:c4:3b:fd:41:6e:71:a3:8d:d0:51:f7:d1:2e:49:32:a8:af:
         0e:d9:3b:ef:00:42:43:8a:5a:92:97:c8:23:ff:ec:e5:37:a3:
         89:6f:3d:ae:9f:a9:e3:29:12:56:ec:3a:f5:05:fc:13:c8:61:
         c4:97:e4:23:fe:82:e5:f7:ad:74:d9:e3:82:cd:a0:d4:99:41:
         49:b9:0e:a1:a5:54:2b:89:da:eb:f0:79:4f:3e:7a:cf:f3:1b:
         81:0b:33:aa:cc:b9:c1:c4:ad:d1:0e:83:61:33:85:37:24:8f:
         b4:ad:30:2d:54:50:5c:ab:32:92:c1:a5:73:dd:11:75:92:bd:
         15:e2:9f:a3:a2:68:ee:88:b0:d3:65:22:ce:f9:ad:ed:59:56:
         21:82:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:19 2025 by rpki-client