Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1EA0D980270808AA32B818D306F4E3663A9700DB.cer
File:                     1EA0D980270808AA32B818D306F4E3663A9700DB.cer (raw, json)
Hash identifier:          tI5Cikm0bN0OQcvNcmaJs6QQVQlFyTn7CnG8FLbMaI8=
Subject key identifier:   1E:A0:D9:80:27:08:08:AA:32:B8:18:D3:06:F4:E3:66:3A:97:00:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       730D2647B37458F8B0D3E6D5069A0A60B9D9F7A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/1EA0D980270808AA32B818D306F4E3663A9700DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Sep 2024 13:50:47 +0000
Certificate not after:    Fri 12 Sep 2025 13:55:47 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 15:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0d:26:47:b3:74:58:f8:b0:d3:e6:d5:06:9a:0a:60:b9:d9:f7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 13 13:50:47 2024 GMT
            Not After : Sep 12 13:55:47 2025 GMT
        Subject: CN=1EA0D980270808AA32B818D306F4E3663A9700DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:25:23:9f:d5:33:1d:20:cf:71:bf:90:6b:
                    ae:56:1e:4f:b7:cb:b5:af:1b:d5:c8:6b:eb:50:8d:
                    ac:31:67:10:94:85:e4:c6:29:74:5f:e6:34:79:2b:
                    5f:98:05:49:dc:50:b6:c7:d4:98:f3:f3:ef:52:b9:
                    73:8c:f1:42:b5:fc:17:d2:75:37:85:50:08:fa:b8:
                    dd:d5:e6:bc:7a:f2:0f:dc:a0:17:b7:59:12:2e:85:
                    b2:56:db:a2:c7:d7:2b:a0:d0:5c:43:a8:8c:21:9a:
                    fd:4c:07:95:7c:35:e5:f3:bd:3e:1a:a5:9e:aa:3a:
                    d5:08:1a:64:2b:02:30:7f:21:d2:a4:14:04:a7:94:
                    b5:15:6f:90:40:19:18:05:20:36:ab:72:6d:01:83:
                    83:ab:a9:43:3f:59:e6:0e:b0:85:66:5c:77:3f:f6:
                    6a:d3:5d:53:fe:b9:78:24:3c:5b:b2:af:7d:29:64:
                    9a:2c:ee:19:74:6d:da:b4:df:6b:1d:ac:be:bb:7d:
                    f1:de:cb:61:16:14:67:3e:6e:c3:d2:c9:2f:33:38:
                    e5:e3:97:8b:49:9e:be:cf:0b:2f:2b:bb:ca:de:dd:
                    27:e3:5a:b0:ae:56:91:12:95:2b:22:29:7b:be:67:
                    21:27:a5:cf:15:80:ae:86:0b:3c:8c:1c:62:b0:e4:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:A0:D9:80:27:08:08:AA:32:B8:18:D3:06:F4:E3:66:3A:97:00:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/1EA0D980270808AA32B818D306F4E3663A9700DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         1b:c9:0e:fe:d7:09:e3:25:32:5b:a5:bf:4a:8f:92:99:46:81:
         3a:77:07:88:dc:08:8d:1f:ae:7b:ec:51:44:c0:d2:27:03:67:
         cd:44:c1:e4:83:ed:fb:ec:cd:51:09:8a:1f:f0:75:9a:93:54:
         9c:64:f7:6a:3d:af:5c:39:c3:54:0f:48:1f:c9:48:9d:41:68:
         ff:2c:83:18:fd:88:68:14:e3:62:5f:93:b2:d3:32:f1:f3:90:
         df:8e:fa:41:3e:6c:54:0e:de:6b:98:47:16:04:69:ec:cd:23:
         f7:74:6b:5d:23:e6:99:f7:d4:ba:a1:e2:de:ea:b2:92:e7:49:
         37:7f:c2:83:4f:38:59:d3:63:0a:02:52:cb:e8:b4:82:be:27:
         e1:78:93:fe:e0:d3:1a:e7:9b:0f:5e:c2:15:20:02:9b:a8:61:
         0b:d6:23:e1:de:4a:ad:61:18:13:e5:c4:6f:ba:9d:16:43:f9:
         07:04:69:f4:d6:3e:f2:84:7b:67:0f:52:c2:cf:35:e8:a0:76:
         09:45:33:12:63:ad:9c:6e:1e:4d:64:df:e1:0f:1f:e7:b5:43:
         f8:7b:31:ae:a2:b3:cd:bb:5e:13:9b:17:ef:c0:ef:60:85:1a:
         5c:de:49:e3:f8:31:76:30:57:82:76:7e:30:f7:5d:63:bb:b6:
         06:8a:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:21:34 2024 by rpki-client on console-ams.rpki-client.org