Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
File:                     7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer (raw, json)
Hash identifier:          GggROMYDgZsMpY17Z8soKMhOfPG2sjOQrcrGIsH4qp8=
Subject key identifier:   7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F60564218E853D6D93EA045E816D292F0914461
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:49 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:49 +0000
Subordinate resources:    AS: 269579
                          IP: 45.189.96.0/22
                          IP: 2804:66bc::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 16:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:60:56:42:18:e8:53:d6:d9:3e:a0:45:e8:16:d2:92:f0:91:44:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:49 2024 GMT
            Not After : Apr  2 18:32:49 2025 GMT
        Subject: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a7:8b:4c:ac:18:bc:b0:c3:63:f4:ca:55:05:
                    ad:e0:d9:7f:63:36:ab:85:d1:96:fc:b4:44:e6:d3:
                    46:d8:df:0a:3d:73:4f:19:7d:61:92:9f:03:50:ef:
                    8e:09:1f:28:54:9d:1c:42:83:8d:ec:34:79:30:55:
                    19:3f:68:5c:dd:d7:eb:eb:2a:42:c5:b1:ff:f4:97:
                    dc:58:18:d1:87:4c:e1:06:d8:33:d9:ca:03:99:ef:
                    00:b3:0b:85:a7:07:9b:73:c0:e3:af:69:07:47:de:
                    ac:a8:e9:3f:19:89:a0:01:4d:8e:ce:a4:97:6f:57:
                    88:63:c9:f2:88:14:a6:0d:69:c4:94:31:2f:89:6d:
                    e3:5b:62:5b:be:39:e9:91:25:47:18:14:26:df:3a:
                    86:8b:8f:96:18:8f:c9:ed:e1:7a:46:65:fa:88:2b:
                    d5:9f:77:8d:02:30:16:ce:bf:ff:6d:eb:4f:c2:0f:
                    09:3c:81:07:8a:29:32:bf:b3:2f:68:25:14:b9:b3:
                    5a:19:14:31:fa:bf:f4:5a:c3:fd:3b:1b:60:72:9f:
                    b4:5b:e9:30:e0:2a:e2:54:2c:54:72:5c:21:9f:ce:
                    f4:ef:ac:30:6f:fb:bc:9f:88:c9:05:aa:01:30:b6:
                    53:a7:93:64:f2:88:b5:e9:a2:16:be:be:ca:85:52:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.96.0/22
                IPv6:
                  2804:66bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269579

    Signature Algorithm: sha256WithRSAEncryption
         32:48:1a:7b:ba:54:f8:b1:50:14:07:fd:b2:b1:ae:17:9d:d5:
         03:fe:84:a6:e6:ad:a5:dd:78:6a:78:db:68:01:0e:8d:b1:c7:
         86:2a:ac:b5:0f:8e:cd:9a:c7:c5:8c:72:7e:a0:13:74:ad:0c:
         f1:dd:64:fd:7f:c8:47:3b:ae:51:ea:02:2a:d6:13:6f:13:7d:
         ea:cd:b1:d0:ee:cd:78:79:61:88:b3:c2:13:0f:98:0a:16:43:
         8d:0c:a2:05:a2:a9:f1:f5:17:60:2a:0b:7b:7b:be:f8:e2:c9:
         44:e6:00:14:f8:e1:4a:8c:d0:df:53:7f:04:44:0d:a3:59:49:
         07:86:b3:90:4f:f4:89:83:d6:83:52:87:ff:9f:6f:a6:9e:44:
         a1:70:9a:42:ac:4c:c7:e2:f2:8c:36:f8:0f:72:8f:98:07:2e:
         86:08:b2:95:c6:ac:5d:0a:d1:15:c1:d2:0c:20:2e:46:85:eb:
         88:ff:64:c7:ae:07:b0:81:0b:56:37:da:6f:e5:81:d3:39:4c:
         63:f4:f9:60:51:6b:3a:55:6a:cb:a8:b2:26:9a:fc:a8:17:10:
         35:d2:27:7d:ee:56:24:e9:1d:fd:e2:5f:e6:7c:ae:09:28:b3:
         7e:92:ff:6a:2e:6c:84:91:07:14:2b:1d:95:a0:33:61:b9:c9:
         a6:23:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org