Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.cer
File:                     2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.cer (raw, json)
Hash identifier:          lTHKzlfxXRu53iHOJVMBD4W/DVRjZTi0+Qe3cujdHEQ=
Subject key identifier:   2E:70:30:E7:11:0B:6C:E0:E1:E7:30:9E:FD:AF:24:27:3F:80:CF:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1625CE753B768ED2902AAA92CA34C4AFA69AE34E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jul 2024 15:41:07 +0000
Certificate not after:    Fri 04 Jul 2025 15:46:07 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 11:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:25:ce:75:3b:76:8e:d2:90:2a:aa:92:ca:34:c4:af:a6:9a:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  5 15:41:07 2024 GMT
            Not After : Jul  4 15:46:07 2025 GMT
        Subject: CN=2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:a5:0e:3b:b3:3f:d5:a7:36:f0:6a:f8:3a:
                    22:e6:06:1a:b1:17:a0:b0:ce:66:82:ed:76:11:02:
                    8c:59:52:54:27:e5:f3:a3:e1:07:77:39:43:c0:ac:
                    42:88:d6:08:f8:06:cb:e0:b8:b5:78:bc:8c:b3:53:
                    d7:fb:d1:17:eb:ec:a1:98:c6:ac:be:23:ca:f5:63:
                    c5:62:55:a7:97:8b:4a:e1:ec:13:f9:0c:aa:a8:56:
                    33:d4:e7:28:50:4d:f7:fb:84:17:14:5f:4b:5a:d6:
                    8c:3b:d5:20:df:7b:a9:ae:56:02:a6:1d:26:27:5b:
                    95:87:65:e3:b7:e7:c2:fd:5a:a8:b5:3f:e2:17:95:
                    12:53:fb:e9:b5:56:8d:59:2b:bc:db:51:95:ef:2b:
                    7f:b9:d8:2d:74:b6:a1:27:45:32:4b:24:7c:85:df:
                    f2:12:a5:de:47:22:30:b2:6c:af:3e:c5:23:2c:0a:
                    83:89:b2:bf:5e:9e:65:5f:2a:49:29:f7:1e:b5:4f:
                    1c:bb:5b:84:f5:1f:61:93:5c:b6:ec:d3:9f:ed:bd:
                    91:21:4e:2f:3f:ff:f5:f7:9f:78:0b:45:a8:15:eb:
                    0b:4a:01:61:28:ce:81:11:46:d2:81:56:6a:fb:dd:
                    c9:f6:5c:5a:1e:8e:fd:e9:5e:e6:72:0a:4f:7f:05:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:70:30:E7:11:0B:6C:E0:E1:E7:30:9E:FD:AF:24:27:3F:80:CF:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         d5:93:8e:7b:fe:e4:ca:fa:72:2e:b3:f6:f7:f1:ae:c6:0e:8f:
         7a:e8:e0:ac:b9:7c:55:e0:9e:4f:52:25:7c:57:dd:38:e7:49:
         5e:5a:5e:78:0c:99:eb:b6:4f:9c:4d:8f:d8:0d:73:0a:cf:4b:
         f9:57:e8:fa:12:dc:46:37:dc:ad:51:02:82:8e:12:ee:0f:83:
         2e:70:1f:b4:b3:aa:0f:ac:48:09:32:78:c3:91:ea:af:b0:f9:
         c4:a7:69:56:24:10:3f:5e:1d:5a:31:9a:85:c4:c2:19:4c:cd:
         89:bb:6c:1f:f3:e5:11:53:f0:65:39:8c:cf:5e:87:8d:c6:b9:
         7c:88:9e:20:8a:7c:e9:ff:e7:61:13:fe:df:80:be:ed:ab:bc:
         ae:af:8e:6f:a6:d2:ff:e9:cc:ac:63:33:03:94:3a:42:52:b2:
         e3:b5:d9:87:06:ba:40:bb:09:9f:a9:23:82:6b:0f:78:62:bf:
         ed:1f:7a:a1:3b:fd:d3:d9:f5:de:63:57:cd:28:cd:9a:29:ee:
         56:d1:ff:4e:4c:43:ae:18:79:dd:1e:c7:c3:8d:80:6b:b1:e3:
         e7:b9:58:04:27:43:69:8d:ea:c8:11:0e:7c:b5:cf:da:65:45:
         e4:63:a2:5f:8e:53:ca:25:24:13:2a:34:3c:7a:8b:e3:09:70:
         1a:db:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 16:02:55 2024 by rpki-client on console-ams.rpki-client.org