Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer
File:                     2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer (raw, json)
Hash identifier:          s98uh7v0qFtSqjhe2U0SnkOtPKGlxJmcqTRu4LJ+x4Q=
Subject key identifier:   2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53557CEE65540A5FF281233F82B62272D0B93A30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:20:27 +0000
Certificate not after:    Thu 03 Apr 2025 11:25:27 +0000
Subordinate resources:    AS: 267374
                          IP: 45.234.124.0/22
                          IP: 2804:4c80::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 03:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:7c:ee:65:54:0a:5f:f2:81:23:3f:82:b6:22:72:d0:b9:3a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:20:27 2024 GMT
            Not After : Apr  3 11:25:27 2025 GMT
        Subject: CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:8b:fe:ad:1c:80:14:40:e8:63:78:04:9d:
                    67:52:4b:88:8a:2d:2b:2b:9b:ac:05:03:bb:f6:a3:
                    4f:0a:66:35:60:61:9d:b1:68:59:46:ab:5f:60:39:
                    23:cd:68:b9:61:01:13:31:b2:eb:95:af:fc:f2:e6:
                    72:57:91:25:a5:43:38:6e:c4:5d:2e:f9:34:94:b5:
                    bf:3d:3c:48:1f:c6:99:40:f9:32:10:a2:03:d6:16:
                    ba:98:e7:6a:a1:64:9a:a9:d3:12:b2:7f:48:9e:f5:
                    4f:ca:9d:56:87:63:ae:cb:55:84:95:83:b3:e9:c8:
                    70:b5:03:74:c9:9b:84:76:12:9f:8f:60:71:df:a6:
                    b8:66:35:d8:7d:32:5c:1f:33:dd:3f:6e:e0:82:68:
                    9e:8b:d8:cf:a8:3e:24:52:85:ce:9c:c4:a2:87:c2:
                    70:87:ba:4d:3b:46:35:fd:72:0b:2f:6c:f2:d0:82:
                    2b:06:8c:63:24:b7:a6:bb:62:3c:72:ed:e2:27:7f:
                    25:35:e6:d9:e6:cc:a4:aa:bf:96:b2:d5:6e:cc:c1:
                    08:59:26:ff:49:b7:49:b3:56:9d:0c:da:9e:e7:47:
                    d0:ae:39:76:7f:a8:85:26:53:db:08:22:87:c9:04:
                    02:29:8d:fb:bf:58:f2:62:74:09:dc:26:c6:df:d6:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/22
                IPv6:
                  2804:4c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267374

    Signature Algorithm: sha256WithRSAEncryption
         7f:87:aa:c9:6a:b0:8b:ee:a9:c4:41:53:ea:2c:5b:21:02:b5:
         45:00:e3:c8:f9:5a:c8:8b:16:97:a8:77:52:84:04:ca:6a:0d:
         3e:ea:a6:bc:37:55:0d:9f:6a:20:33:fc:87:7a:7c:d4:ee:44:
         10:1f:ea:69:08:41:ca:71:cf:96:0f:8d:0d:51:0d:84:6e:1e:
         96:2a:e0:ff:f0:a9:97:72:e3:27:35:5e:95:0c:ab:29:21:67:
         32:fa:8f:9e:96:11:1c:7f:60:54:86:c3:c3:f9:65:fc:82:17:
         5f:2e:55:b3:6f:fa:ab:04:96:ef:ea:eb:13:a9:9d:7d:80:5a:
         09:07:b7:63:91:55:08:99:46:0b:83:7a:50:75:4e:fe:43:61:
         f3:19:cf:53:a6:12:5f:5d:60:dc:16:30:5a:c5:f9:62:7c:c0:
         9d:bd:69:eb:df:21:62:54:4c:be:f0:38:ec:dd:df:7b:ab:90:
         fa:84:7e:b6:2d:38:b8:77:44:cc:ee:ea:05:aa:fd:41:e9:83:
         f5:75:60:3c:8e:b2:dc:a9:36:1c:87:fa:cc:b9:1c:c5:ae:77:
         7d:50:e2:05:11:84:00:a5:e3:29:92:dc:01:33:b9:44:d5:10:
         d4:ef:8a:6c:4b:73:c4:40:63:f3:1d:72:e0:d8:87:f7:09:f6:
         49:02:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org