Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E87ADB465FEBE8F62B311DB2306EE3DA328EB73.cer
File:                     1E87ADB465FEBE8F62B311DB2306EE3DA328EB73.cer (raw, json)
Hash identifier:          SZ+vrOaMN2A1a/0fizZnWc90/p3kBxLYi58qL3bja4E=
Subject key identifier:   1E:87:AD:B4:65:FE:BE:8F:62:B3:11:DB:23:06:EE:3D:A3:28:EB:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A32335F480D3317D1CDA6D7C1C309A409D0A506
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/1E87ADB465FEBE8F62B311DB2306EE3DA328EB73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 18:12:54 +0000
Certificate not after:    Thu 08 May 2025 18:17:54 +0000
Subordinate resources:    AS: 265102
                          IP: 170.254.96.0/22
                          IP: 2804:32e0::/32

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 15:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:32:33:5f:48:0d:33:17:d1:cd:a6:d7:c1:c3:09:a4:09:d0:a5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 18:12:54 2024 GMT
            Not After : May  8 18:17:54 2025 GMT
        Subject: CN=1E87ADB465FEBE8F62B311DB2306EE3DA328EB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:2d:9a:ea:e4:f0:f6:b5:69:9e:eb:00:ab:
                    fc:40:ef:f3:de:d4:05:cd:5c:0b:79:82:e2:4f:1a:
                    d9:c0:ac:b9:b0:c2:e9:78:9a:c1:71:fc:c1:a8:dd:
                    35:70:bf:b1:b2:2b:58:3c:de:2b:4b:b6:06:c3:57:
                    d0:33:c6:cb:13:a1:35:70:fd:64:6d:36:ab:5e:9d:
                    2a:7d:42:6a:76:29:1a:2c:17:65:53:e5:41:1d:a8:
                    e5:db:d7:7f:bf:c2:35:04:05:f7:74:ed:c9:f0:91:
                    08:fd:ea:90:e5:7d:27:a4:c8:3e:6d:b3:ef:26:bb:
                    06:3b:3a:f8:3c:16:f9:70:0a:a0:3a:4b:f2:04:d8:
                    9a:2b:f4:50:ed:9a:b6:86:fd:7c:4e:72:b5:60:92:
                    91:8a:e6:65:e1:04:bb:6a:f4:f7:92:23:da:00:11:
                    da:aa:1d:8e:9f:47:10:35:04:1a:57:f4:07:38:ca:
                    cb:e2:8d:4e:7d:d2:bf:89:1e:34:5c:0e:00:bd:e9:
                    55:e2:57:41:0e:97:8f:89:9d:4d:98:da:f7:7f:0c:
                    01:04:eb:85:3b:83:4c:46:4e:15:44:8d:42:3e:04:
                    ba:45:b9:20:16:af:75:f0:5d:97:aa:d7:6b:da:18:
                    36:e6:0c:2c:7d:57:57:af:8e:2a:82:02:2e:bf:57:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:87:AD:B4:65:FE:BE:8F:62:B3:11:DB:23:06:EE:3D:A3:28:EB:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/1E87ADB465FEBE8F62B311DB2306EE3DA328EB73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
                IPv6:
                  2804:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265102

    Signature Algorithm: sha256WithRSAEncryption
         c4:0a:f1:5b:dc:34:c9:f5:ce:87:e6:0f:16:87:50:35:13:37:
         8d:53:fd:4c:75:6b:11:e1:93:d0:b9:54:27:83:cf:17:22:b2:
         86:4a:bb:18:62:e7:c9:5d:53:11:d9:41:45:51:7e:ad:bf:61:
         ee:b9:5c:d3:a4:bf:17:c0:c5:c8:0d:0f:ab:d1:10:3c:b4:3c:
         3a:9a:7b:0d:26:0b:28:32:f1:31:4f:2d:d7:6c:9e:59:7f:e8:
         1d:1c:49:51:72:7f:06:37:63:63:66:f2:5c:7d:86:b1:cd:df:
         eb:ae:d7:f3:e1:be:97:9d:58:b8:7b:54:08:13:cb:5f:3e:ba:
         1b:10:7e:89:bc:a1:e8:d8:53:61:f6:a7:69:c9:28:18:51:00:
         58:40:4f:e3:e8:0d:44:bf:8e:55:26:32:2b:f3:25:0e:2f:ff:
         d3:69:16:da:be:02:9e:c0:9d:b6:24:6a:49:48:b5:17:62:d3:
         b8:99:de:89:a1:bc:23:f7:3b:02:8a:80:0c:2f:e6:43:d6:28:
         30:d4:b6:23:c4:cc:1d:90:86:03:3d:a6:d3:e4:ca:25:e2:41:
         e9:e0:ba:cf:be:30:0f:a0:15:88:5a:e1:d0:84:33:f4:98:19:
         0b:a5:6c:b0:df:0c:1f:8e:8a:37:91:ba:96:08:c5:a5:d0:ff:
         f2:c3:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org