Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACBE08EA073D51A42B023C69A9F821BF74108655.cer
File:                     ACBE08EA073D51A42B023C69A9F821BF74108655.cer (raw, json)
Hash identifier:          oMyIPY5LGCe+IIlGWJx42UCrN1kSZHQtZ0HMsnOfmQc=
Subject key identifier:   AC:BE:08:EA:07:3D:51:A4:2B:02:3C:69:A9:F8:21:BF:74:10:86:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       696C30C0EEBE7E378ECB146E4C8FD9EC5E40FA31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/ACBE08EA073D51A42B023C69A9F821BF74108655.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 May 2024 23:18:52 +0000
Certificate not after:    Tue 06 May 2025 23:23:52 +0000
Subordinate resources:    AS: 271189
                          IP: 190.107.88.0/22
                          IP: 2804:779c::/32

Validation:               Failed, certificate revoked on Sat 18 May 2024 02:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6c:30:c0:ee:be:7e:37:8e:cb:14:6e:4c:8f:d9:ec:5e:40:fa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 23:18:52 2024 GMT
            Not After : May  6 23:23:52 2025 GMT
        Subject: CN=ACBE08EA073D51A42B023C69A9F821BF74108655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a3:b9:01:da:c6:9b:5f:e8:46:ee:53:d9:96:
                    50:09:96:ff:9d:27:ae:1c:d8:c8:de:b9:78:99:e8:
                    a0:0c:0f:b8:53:54:9c:7e:c0:2d:e4:1a:a0:60:35:
                    11:8d:db:81:5e:7e:83:ea:fc:10:13:dc:39:70:8a:
                    47:b2:4c:cb:2a:65:4d:b4:38:1c:a4:02:df:9c:cd:
                    db:e2:7e:84:45:d2:c0:81:5f:db:99:6a:af:f2:f7:
                    c8:18:15:d4:bf:a3:a8:70:da:e5:11:4f:3d:f7:0d:
                    68:3b:f5:11:53:04:2f:03:af:64:63:e2:6c:4f:6b:
                    10:b2:ad:e7:e3:2d:67:ea:b9:9a:45:f3:fb:4d:d0:
                    d2:c1:10:ef:7d:da:90:f6:e8:c8:0f:24:72:13:d7:
                    39:c3:ef:f1:13:d3:b4:e8:68:ec:df:f9:ca:a3:05:
                    61:43:ca:f2:9a:7e:e2:52:0d:53:50:d6:f6:83:bf:
                    2c:9a:1a:c0:7e:08:d1:a3:cb:ad:20:0b:72:00:cb:
                    7f:be:6b:08:0d:4f:59:13:68:2f:a5:54:e3:5d:1a:
                    3d:b0:b4:d8:5d:57:2b:5c:eb:10:0b:9d:07:43:ea:
                    78:7f:5e:71:b2:99:98:5d:2e:23:57:bd:07:23:e0:
                    78:de:ce:c0:3c:e8:91:c3:b5:23:37:4b:64:22:32:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:BE:08:EA:07:3D:51:A4:2B:02:3C:69:A9:F8:21:BF:74:10:86:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/ACBE08EA073D51A42B023C69A9F821BF74108655.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.88.0/22
                IPv6:
                  2804:779c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271189

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:db:c5:22:95:be:c8:50:4a:49:1f:3c:30:63:12:20:8f:
         94:d7:a7:3c:3e:cc:3c:84:f5:7b:9f:ac:2c:aa:77:23:25:a8:
         07:0f:d5:a8:dd:2b:19:3a:2b:76:7c:c8:03:c7:35:b2:cf:64:
         ae:a6:69:3b:e0:b3:4f:7d:9e:2e:f0:1c:75:f7:8a:73:3a:e4:
         5d:f6:32:d4:bc:8e:49:38:0b:e6:b3:7a:d5:4a:66:9d:34:65:
         39:a2:a3:1c:79:c4:1d:e1:3f:b4:0f:01:3e:a5:11:7d:53:03:
         85:f7:2a:bd:dd:2f:32:13:df:98:cc:33:fe:c5:58:98:c0:10:
         d6:de:8e:0c:9d:45:0e:a6:19:ac:4c:4d:76:32:26:31:47:4c:
         3b:01:f6:31:a5:ac:4f:c8:25:d8:e3:4c:54:b7:e7:de:02:82:
         05:bc:b8:30:cf:ad:e4:e5:33:47:ce:c9:5e:a7:8c:f1:ef:b0:
         3f:92:79:14:46:70:96:e6:c7:fe:83:d6:57:4d:89:0f:66:e8:
         1e:10:a9:6e:7e:14:47:19:f7:81:a0:32:bf:d7:da:12:23:43:
         a3:a4:0c:f1:58:f9:39:f5:1c:d0:ca:38:b0:44:bf:f9:0d:e2:
         2f:ee:8c:54:c0:92:40:4d:bb:04:1e:59:45:99:36:b1:22:9d:
         bf:c7:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org