Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E8BE6EBF62FAD03607150D29EF80FE55A866209.cer
File:                     2E8BE6EBF62FAD03607150D29EF80FE55A866209.cer (raw, json)
Hash identifier:          1cVqbkv6Yt0kWJPZYKW4WJ7NCvqwuGpPpt2AG2Xiy4Q=
Subject key identifier:   2E:8B:E6:EB:F6:2F:AD:03:60:71:50:D2:9E:F8:0F:E5:5A:86:62:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       471CA383CD75B37F5D4705B89BE9CC362A2FDC44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/2E8BE6EBF62FAD03607150D29EF80FE55A866209.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 12:37:47 +0000
Certificate not after:    Thu 08 May 2025 12:42:47 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 15:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1c:a3:83:cd:75:b3:7f:5d:47:05:b8:9b:e9:cc:36:2a:2f:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 12:37:47 2024 GMT
            Not After : May  8 12:42:47 2025 GMT
        Subject: CN=2E8BE6EBF62FAD03607150D29EF80FE55A866209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:4b:1d:7f:da:91:fc:d8:57:a5:d4:20:12:
                    da:2e:02:80:9a:58:ac:a2:cd:43:17:15:82:4f:41:
                    3e:3d:77:8b:29:9c:9b:27:0c:b2:72:e1:6c:24:79:
                    01:ae:a0:f3:cc:4e:52:96:b9:52:61:91:ed:00:c8:
                    62:77:65:2b:d0:6e:44:d4:24:5f:69:8e:16:3e:3d:
                    a5:3e:22:cb:11:f1:0d:c3:e9:67:c8:3f:5c:e5:44:
                    dd:52:b0:e0:64:c6:09:9b:1e:2f:b2:fc:93:12:89:
                    55:20:e9:b3:ed:a3:30:a4:82:ae:df:84:e8:cf:a1:
                    56:db:ce:07:29:ef:35:f4:7a:fa:4a:e4:3b:f4:ff:
                    1f:1a:2b:b5:02:8b:de:e3:25:7c:91:eb:42:7a:7c:
                    6a:5d:6e:ca:45:0d:15:d9:7a:68:c5:d4:d2:18:67:
                    15:9b:5c:76:a1:7e:a6:77:b9:8a:24:cb:77:ba:db:
                    40:96:42:43:32:14:ac:25:cd:c8:a2:19:ce:da:c0:
                    87:5d:8c:b2:2c:03:dc:3c:7f:d4:68:0a:99:a8:78:
                    40:21:a7:ca:e0:b9:2c:da:9e:a4:20:b6:f6:71:cc:
                    99:bb:bf:ca:64:14:ef:53:c8:78:3b:b2:69:d9:6e:
                    51:00:a7:24:70:59:ae:2f:e4:7a:0c:c9:82:14:3f:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:8B:E6:EB:F6:2F:AD:03:60:71:50:D2:9E:F8:0F:E5:5A:86:62:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/2E8BE6EBF62FAD03607150D29EF80FE55A866209.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         a8:97:19:a6:92:f0:60:35:5a:a7:9f:1b:1a:5e:89:fc:d9:8a:
         27:b8:6c:ad:25:0a:60:24:91:e2:53:1a:75:bf:fd:c0:c7:89:
         b2:34:d7:c7:17:11:7e:09:58:fc:13:6f:4c:0b:7d:1d:74:a8:
         a0:9f:b2:a1:88:b6:d0:25:db:22:78:44:2e:32:54:06:ce:30:
         b5:7b:35:e5:b3:e7:d0:40:4c:8d:91:cf:e1:df:0b:6d:b5:86:
         49:c8:fb:4a:73:ce:99:e0:8d:c0:c3:d4:8f:1b:ca:98:1d:d4:
         56:b5:e4:71:61:12:cf:99:23:fe:95:4f:7f:fb:99:36:85:37:
         5a:8a:db:1a:5d:8d:14:73:db:57:db:9a:4c:04:ba:11:7a:26:
         db:70:c4:fa:b0:6c:a8:8a:0c:50:b2:92:ce:8a:e1:8b:c5:22:
         6d:28:c6:26:86:98:e0:09:49:e3:a6:c0:05:3a:af:c2:a6:e0:
         42:3e:f0:e6:bd:fc:12:d1:e9:aa:e1:d0:60:67:78:3d:5e:ab:
         32:86:90:8b:4d:2b:63:47:65:29:ef:6d:06:3a:61:2b:8a:04:
         30:44:f1:a9:74:24:22:c5:77:4b:8a:fa:a3:d1:e9:02:71:4a:
         ea:de:1f:21:0f:b6:bc:17:4c:e4:6e:1d:2d:36:4a:05:a7:00:
         a7:e0:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 17:40:58 2024 by rpki-client on console-fra.rpki-client.org