Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer
File:                     1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer (raw, json)
Hash identifier:          x9fxymlYHI6A2WOq0j/VraNCWxwZbVQ3NaNfXIfWiFU=
Subject key identifier:   1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43FE629A09C65DEE889CC3ED3BE2795B061BF48D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:50:28 +0000
Certificate not after:    Thu 03 Apr 2025 16:55:28 +0000
Subordinate resources:    AS: 265463
                          IP: 168.197.12.0/22
                          IP: 2804:3484::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 09:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fe:62:9a:09:c6:5d:ee:88:9c:c3:ed:3b:e2:79:5b:06:1b:f4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:50:28 2024 GMT
            Not After : Apr  3 16:55:28 2025 GMT
        Subject: CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:1f:e5:11:10:97:51:cc:59:f8:8d:e1:25:
                    69:1a:ae:18:29:04:6b:76:02:2d:a5:8c:d8:3c:40:
                    fc:ea:3a:2a:f5:26:ee:7d:a2:15:37:61:42:e5:98:
                    f0:cf:b2:fb:40:98:e0:ac:d4:eb:9e:35:12:23:65:
                    65:82:92:0a:2e:99:01:82:23:c4:7a:c6:00:f2:55:
                    98:b7:18:97:95:4f:61:41:ad:00:0d:b9:86:17:d0:
                    dd:db:e6:0f:55:f2:a7:f9:33:2f:dd:b6:96:6a:5f:
                    3c:d8:d9:74:16:bd:c8:f0:90:be:c7:70:1a:7a:5f:
                    c2:b1:c1:41:4b:7a:48:55:4e:c8:4f:9c:00:f1:26:
                    81:6c:77:38:66:8e:14:da:17:bb:64:03:eb:48:c9:
                    c4:0d:72:4a:8f:27:ce:6c:36:fa:14:1b:c8:36:c3:
                    ad:f8:c5:55:b9:c1:78:bd:1d:57:b2:2a:45:7c:58:
                    1c:25:97:4c:dd:d3:a3:1f:6f:31:03:53:83:23:37:
                    9e:5a:60:44:5f:b6:fa:98:cb:1c:b5:c0:64:92:24:
                    d3:c6:28:bc:ad:aa:64:11:17:70:df:cc:38:f1:a5:
                    6f:8e:75:b1:a4:27:a7:c7:68:54:4c:33:84:02:5a:
                    2c:08:23:c0:6f:87:1e:93:24:70:50:65:fa:4f:6f:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22
                IPv6:
                  2804:3484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265463

    Signature Algorithm: sha256WithRSAEncryption
         29:99:86:f4:f6:f6:14:c4:a7:21:6f:33:11:e2:7d:5d:a8:f1:
         42:db:74:80:71:5f:7f:81:5a:30:e5:ee:f2:93:d6:de:73:a5:
         95:2a:19:50:c3:95:1e:85:81:3f:2b:41:a5:17:2a:ad:ab:78:
         5f:c4:c6:50:a1:ac:bf:8f:cd:11:74:ac:0c:ce:de:cf:77:f9:
         09:ea:30:63:47:a7:12:6b:32:1f:6a:ec:f0:57:24:d4:c0:e9:
         29:b7:06:8b:21:9c:8e:a4:fb:49:45:24:a4:0b:82:70:f3:30:
         84:c8:ea:5e:a9:fe:75:82:8c:7a:ab:94:9a:b9:ae:8a:93:5b:
         92:03:b9:60:d7:24:b4:f2:50:ef:e5:99:fe:bb:f2:9b:e3:15:
         a7:7b:49:8b:6e:79:64:97:27:ec:c2:e2:f3:a0:82:49:82:0d:
         d0:41:e2:31:19:77:a6:73:30:f7:ff:a3:4c:5e:cd:ff:18:31:
         d3:4b:05:a4:cf:0f:fd:61:d9:8d:ba:17:90:c0:96:c6:e8:aa:
         0f:0d:d5:2f:b1:48:65:bc:af:0c:bc:e6:00:ba:f4:bf:8a:9e:
         9c:9f:80:32:7e:a0:52:9b:94:8d:4c:01:f1:71:3e:ae:c1:be:
         8f:b7:33:dc:8f:40:c4:b1:2c:42:00:32:9f:ae:9b:e8:d5:0c:
         f8:43:f9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org