Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E9C638A61D43623956915FE3EBA074444C6A80B.cer
File:                     1E9C638A61D43623956915FE3EBA074444C6A80B.cer (raw, json)
Hash identifier:          xIU4G1axzE2pSPPxJ0CLEMJXtO2ZEZ7Z3/WLjllwUS4=
Subject key identifier:   1E:9C:63:8A:61:D4:36:23:95:69:15:FE:3E:BA:07:44:44:C6:A8:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68352C2E19AD89551A887D841ECA8216D0BAE3BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/1E9C638A61D43623956915FE3EBA074444C6A80B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:50:43 +0000
Certificate not after:    Thu 19 Jun 2025 17:55:43 +0000
Subordinate resources:    AS: 273744
                          IP: 191.7.2.0/23
                          IP: 2804:8b9c::/32

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 03:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:35:2c:2e:19:ad:89:55:1a:88:7d:84:1e:ca:82:16:d0:ba:e3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 17:50:43 2024 GMT
            Not After : Jun 19 17:55:43 2025 GMT
        Subject: CN=1E9C638A61D43623956915FE3EBA074444C6A80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:f3:49:0e:47:f9:81:71:31:54:d2:18:c4:
                    01:ee:4d:61:79:34:d0:79:f8:3f:4d:a6:ea:01:0c:
                    7b:55:29:1f:73:db:fc:eb:ce:7f:28:10:77:6a:3e:
                    7f:eb:ce:4b:6a:74:90:1a:46:20:8b:3b:64:d9:a1:
                    a5:d1:70:af:ab:06:20:34:0d:e9:97:25:79:98:5d:
                    3d:18:c8:55:89:7d:34:82:a7:0b:56:d4:47:b9:8c:
                    61:33:5b:59:66:97:08:db:39:21:8e:ac:1d:9a:65:
                    8d:4a:34:a7:09:38:5b:41:4e:a6:3c:e5:b6:ba:7d:
                    88:1b:aa:ec:b6:0d:32:55:a6:94:84:ca:e8:a9:a1:
                    62:e4:65:50:85:b7:ce:17:87:40:8b:f7:78:ef:0c:
                    23:32:96:5d:19:ec:b6:fb:02:f5:81:9c:a4:01:34:
                    bb:7b:08:4d:83:eb:f8:68:b7:2b:5b:c3:6b:c6:6c:
                    b7:90:ee:22:1f:43:19:2f:85:a9:f3:44:0c:01:4a:
                    ed:48:1e:1d:12:88:ac:73:0c:57:de:0f:50:d0:42:
                    1f:e5:55:15:b5:0b:a8:a2:c2:08:ac:87:41:9f:57:
                    21:d2:55:4c:bb:31:9f:72:32:70:65:f2:37:a1:20:
                    99:35:ea:66:45:8d:c3:66:62:ad:c3:c3:c7:35:7b:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:9C:63:8A:61:D4:36:23:95:69:15:FE:3E:BA:07:44:44:C6:A8:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/1E9C638A61D43623956915FE3EBA074444C6A80B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.2.0/23
                IPv6:
                  2804:8b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273744

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:29:ca:2d:0d:23:ea:2c:0d:40:6b:2a:5a:07:91:a0:1b:
         dc:23:20:d6:fd:3f:37:46:1f:91:12:83:6c:50:61:97:6e:5b:
         f7:52:75:62:61:04:c0:4a:b9:a3:4d:9b:c6:95:b0:c4:ac:76:
         82:fd:73:9c:d1:19:41:d4:3e:ad:67:d2:18:33:41:d7:05:6c:
         d2:78:9e:fb:c4:07:09:f6:f0:90:89:d7:71:3d:8f:37:4a:e8:
         f1:66:92:fa:7c:19:c7:d4:ed:3a:1e:b7:7e:d8:fe:ce:f4:80:
         d6:af:19:7c:c2:b5:b7:c1:40:f2:99:d3:f7:22:ad:5a:68:ee:
         b2:d4:b3:0f:46:16:3f:38:a2:10:9e:1f:8a:1b:89:c7:8d:18:
         48:c3:89:b2:70:3e:2b:9c:4c:24:9c:be:36:0b:ae:86:d1:fc:
         bd:b0:07:6d:c1:83:6a:2e:f2:d7:39:af:94:7f:92:81:bc:3a:
         39:cf:f7:b9:f4:94:69:be:3e:14:db:d5:7c:bf:07:e3:96:43:
         ca:95:f2:89:08:4a:12:d1:3f:e3:3a:c6:45:44:74:d4:78:2e:
         e1:05:af:81:19:fe:62:1c:93:52:ee:a4:69:b7:40:4d:57:23:
         40:a0:97:3c:9c:0b:40:c4:3c:8f:22:4c:8d:85:ce:78:bd:05:
         44:df:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 06:04:30 2024 by rpki-client on console-ams.rpki-client.org