Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
File:                     7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer (raw, json)
Hash identifier:          YF/IinRx/ghLVvFUPAb6B99UVCnMwRfpB1ZRd8le3Ys=
Subject key identifier:   7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3424893DFF880AD84E41833751AEB8051AE60A1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 12:28:15 +0000
Certificate not after:    Thu 14 Aug 2025 12:33:15 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 12:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:24:89:3d:ff:88:0a:d8:4e:41:83:37:51:ae:b8:05:1a:e6:0a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 12:28:15 2024 GMT
            Not After : Aug 14 12:33:15 2025 GMT
        Subject: CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:f8:10:8a:ec:38:98:f3:37:7d:5f:dd:d1:
                    29:f5:08:38:fe:c5:22:1a:86:07:f1:3d:07:88:bf:
                    de:27:d9:ec:6f:35:a4:7e:9d:9c:0c:32:23:7b:26:
                    9c:66:84:79:38:cd:7b:76:b1:c2:82:ed:f9:bf:76:
                    a5:b6:d2:04:a7:0a:27:f6:05:d0:85:8a:70:64:60:
                    3d:eb:12:d3:ea:d7:e1:82:83:24:f8:86:c7:98:91:
                    31:1b:ac:1d:88:12:9a:d8:89:e1:64:ad:87:59:bd:
                    60:91:40:23:3d:7e:2c:ab:9c:7b:d1:48:92:ac:94:
                    d8:fa:90:07:cc:20:3e:91:f6:38:31:cc:eb:7e:30:
                    99:da:ce:dd:cf:4f:af:2b:a3:46:55:9d:cc:a5:da:
                    9d:69:02:10:54:8f:13:34:08:55:81:52:cd:6d:09:
                    a0:77:8b:cd:f5:af:12:e7:6c:2b:e3:e6:cf:57:ef:
                    60:5f:8b:5f:cb:e8:e9:31:4c:81:55:d6:ef:5e:11:
                    04:1b:b8:a0:50:1e:6d:f4:e2:28:2d:c9:97:90:ea:
                    1e:04:ee:7d:c0:a9:a6:e2:57:2f:a7:c7:fb:08:ef:
                    21:bf:56:57:7d:9a:30:d7:ae:a1:2f:57:c5:74:bd:
                    27:bd:9a:8f:73:fe:f2:b8:ee:98:bb:bd:d3:85:4b:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         84:8e:7b:3e:d8:59:72:96:29:48:55:34:69:84:ec:27:ca:e5:
         a3:72:55:6e:13:d2:18:d9:78:38:d8:65:a1:23:61:aa:ef:8b:
         35:18:6d:b5:2e:d3:38:7f:21:dd:14:81:b6:d8:09:c8:0f:57:
         74:70:10:2b:a3:88:cf:f4:d0:03:b3:13:f9:16:eb:86:af:29:
         58:9d:0b:1d:2a:30:b0:63:50:c7:69:fa:6a:4f:b8:67:1e:ec:
         02:b1:40:64:25:e9:32:2a:0d:82:c2:b7:82:e8:e3:17:0c:66:
         9e:fd:29:cb:1f:d8:34:6c:00:36:95:4b:8c:a5:a4:9f:63:e7:
         11:59:3e:e9:6c:e6:b4:2d:c8:45:6a:2f:82:05:29:e3:be:8f:
         9f:4f:06:43:ad:30:56:12:ef:a1:66:a8:c8:96:00:7c:2c:eb:
         68:d1:7f:16:38:52:e8:41:cf:eb:02:9c:ea:a6:f1:c8:d2:e5:
         a2:5b:0e:49:72:82:08:af:6b:02:52:e1:50:37:c9:c7:ca:b5:
         65:f9:fc:bf:1e:60:42:53:05:6d:84:0b:2a:df:a7:93:80:fa:
         1a:ed:16:15:af:99:36:bf:b6:e3:c7:b6:f1:11:99:62:2b:f0:
         7c:98:b3:08:90:cf:74:f1:83:f5:ff:4c:8f:65:26:6b:92:c7:
         d0:a9:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org