Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2ED4E1EF30AAA4569B17D7315E313E50CA8C89B3.cer
File:                     2ED4E1EF30AAA4569B17D7315E313E50CA8C89B3.cer (raw, json)
Hash identifier:          BCTZMoXbiINDT0zPz13B5s9vnW0dzhMERIbW+Xtddb4=
Subject key identifier:   2E:D4:E1:EF:30:AA:A4:56:9B:17:D7:31:5E:31:3E:50:CA:8C:89:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE3077C3B62789A29212741E994834CE5160160
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/2ED4E1EF30AAA4569B17D7315E313E50CA8C89B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2024 15:20:31 +0000
Certificate not after:    Tue 26 Aug 2025 15:25:31 +0000
Subordinate resources:    AS: 264070
                          IP: 143.202.180.0/22
                          IP: 2804:2a58::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 04:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e3:07:7c:3b:62:78:9a:29:21:27:41:e9:94:83:4c:e5:16:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 15:20:31 2024 GMT
            Not After : Aug 26 15:25:31 2025 GMT
        Subject: CN=2ED4E1EF30AAA4569B17D7315E313E50CA8C89B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:1f:65:ef:fe:05:69:50:69:f7:3f:54:c4:
                    86:0c:24:c0:71:f0:66:74:c5:70:a2:c2:61:ec:fa:
                    43:e1:dc:e2:53:df:12:4f:af:86:64:e8:8e:b8:55:
                    dc:ac:2f:22:80:e4:4e:99:92:c4:20:83:62:60:cd:
                    77:0f:39:45:2c:d4:e1:a6:c3:67:c9:d6:33:5d:f4:
                    d5:0a:13:62:a8:f8:15:28:ff:14:0d:c2:85:57:4e:
                    25:b1:f1:d5:4a:fb:db:3f:fd:00:09:63:d4:63:e8:
                    63:ec:57:be:85:fa:c8:cf:d5:ec:d5:10:c8:ed:70:
                    9b:c5:8a:d8:c7:76:fb:42:44:69:6e:46:5f:27:fa:
                    fd:20:44:fa:92:a2:e4:4c:37:19:2a:7b:86:d5:c6:
                    de:6d:5d:16:13:ac:f6:fa:45:23:9f:9e:dc:a5:ae:
                    68:a8:f1:d7:0b:78:36:dc:d5:0e:08:24:a1:99:46:
                    35:63:09:45:e9:f3:87:a1:be:90:32:fe:4e:cb:14:
                    89:e5:c1:aa:a7:36:0d:c8:75:41:61:2f:f0:9a:7a:
                    c4:36:49:bd:07:7f:27:19:6c:9f:93:1e:2c:9a:9d:
                    b3:e9:27:49:90:2f:4e:73:d6:7e:89:2d:0c:18:a8:
                    1a:c0:18:fa:ad:c9:b1:3b:b8:7c:06:86:b2:8e:c2:
                    d0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:D4:E1:EF:30:AA:A4:56:9B:17:D7:31:5E:31:3E:50:CA:8C:89:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/2ED4E1EF30AAA4569B17D7315E313E50CA8C89B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.180.0/22
                IPv6:
                  2804:2a58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264070

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:59:f5:7a:fb:da:15:cf:bc:d1:a1:00:71:22:ac:ad:e6:
         e8:e7:a3:18:e1:cd:e1:81:ef:1d:ec:b7:dc:e5:3c:c0:99:dc:
         7c:82:f0:e5:00:10:4e:4d:92:f3:6b:69:f3:db:93:b9:90:54:
         5a:f6:51:2e:d1:54:8b:e2:57:66:77:43:9d:f6:5e:56:4f:2d:
         11:e2:ca:35:ed:61:d9:1b:83:c5:30:bc:d4:c3:70:53:12:f6:
         e5:8e:3f:9f:bd:aa:96:0f:ff:4f:d6:c9:aa:96:62:4b:1b:c0:
         10:82:f8:96:5b:e3:13:37:76:4a:40:17:ac:d2:e0:d2:cb:f5:
         4e:17:80:7e:d5:d5:49:0c:c6:41:da:a8:09:42:63:ff:9e:f0:
         30:31:b6:3b:22:b6:6d:d5:32:2f:2c:3c:4f:2f:c7:56:f2:f6:
         ea:ae:99:40:c4:f0:42:fa:7d:23:e3:f9:4a:e3:d5:3a:eb:9a:
         f4:42:e5:76:f8:36:a8:6e:bd:b9:c0:9a:d2:53:3f:2f:0b:60:
         07:d9:23:8b:b1:b9:a0:2e:c6:c8:d4:3a:50:51:22:b4:e4:88:
         09:3e:ff:9b:4b:03:0d:1e:5a:f7:ba:b8:66:b8:b1:81:c4:a2:
         e0:66:62:74:78:90:cd:47:e5:ec:22:3b:7f:f7:86:05:dd:cd:
         21:bd:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 07:08:46 2024 by rpki-client on console-fra.rpki-client.org