Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
File:                     C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer (raw, json)
Hash identifier:          5F5GXNxjXOuzXA6Tsl3A+k6oM1tx3EB4fvVdMYCF+dM=
Subject key identifier:   C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AFB40FC8D455A8F47CC7D749B6B491089418325
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 19:27:46 +0000
Certificate not after:    Thu 08 May 2025 19:32:46 +0000
Subordinate resources:    AS: 265269
                          IP: 168.90.88.0/22
                          IP: 2804:2d40::/32

Validation:               Failed, certificate revoked on Thu 30 May 2024 08:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fb:40:fc:8d:45:5a:8f:47:cc:7d:74:9b:6b:49:10:89:41:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 19:27:46 2024 GMT
            Not After : May  8 19:32:46 2025 GMT
        Subject: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:fe:bc:96:72:52:ea:67:db:11:56:59:59:
                    bf:ea:cb:44:e0:5e:30:a7:55:70:d7:2e:1b:9f:1c:
                    61:d5:f6:bb:e0:c1:72:37:4b:2d:04:3d:5a:a1:d8:
                    8f:45:a2:7a:ee:36:1c:d8:58:e2:ad:a9:e6:4e:37:
                    57:ac:d1:e0:13:e4:ff:76:28:af:ca:a0:37:64:01:
                    c4:81:92:5b:7c:7e:da:68:ef:2d:e7:ef:b6:e0:45:
                    0e:18:63:6a:f9:86:04:d2:b5:ec:16:cb:a3:eb:f3:
                    74:22:0c:d2:43:55:1a:32:32:34:0a:63:80:73:35:
                    32:03:e9:8b:6a:e8:d9:b7:b0:c1:d8:fa:d9:bd:64:
                    94:cd:b5:e4:78:31:5d:d8:17:bb:54:6c:c6:57:d9:
                    e0:19:03:ad:66:23:58:e7:d3:33:7c:38:4f:d4:94:
                    77:ba:a7:b4:99:62:11:20:2a:70:6a:fb:31:b6:80:
                    53:ee:72:da:d0:44:7a:74:31:db:2c:4a:e2:1b:33:
                    3c:65:e0:de:ad:49:fb:ff:3e:7d:a5:32:68:ae:26:
                    72:62:65:f6:f7:54:ab:b8:e9:9f:9c:6f:9c:4e:52:
                    12:5b:25:4b:8f:13:0e:b8:6b:40:f4:93:67:db:d5:
                    31:d9:33:64:97:ce:13:7b:27:93:b3:dc:f4:cb:67:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22
                IPv6:
                  2804:2d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265269

    Signature Algorithm: sha256WithRSAEncryption
         c4:61:79:72:a8:43:73:03:18:dd:5e:11:94:e1:08:f8:c4:e1:
         2e:df:09:a9:b4:cc:03:2c:65:02:9e:4c:85:4e:d6:12:06:3c:
         95:4b:89:b7:7c:e4:98:71:60:79:2e:0f:e2:79:4c:36:30:9a:
         87:9e:56:a7:a5:c1:10:ba:fd:79:94:9f:f7:98:f8:0f:ab:3c:
         f1:fb:fc:c3:1f:93:53:35:bb:66:e5:3b:31:b1:48:02:c0:66:
         06:b8:b3:59:aa:25:ef:fb:be:dc:57:a0:6c:6e:9d:af:f9:1c:
         62:63:07:a5:e0:73:18:d9:8b:dc:2b:94:11:f2:db:58:94:dc:
         42:25:d4:3e:99:51:0c:95:13:53:92:d8:5b:a4:50:ce:89:b2:
         39:e9:98:47:ef:e1:bf:65:e7:b4:70:95:bb:f0:7a:9e:ac:00:
         e8:1d:43:8b:84:ab:70:29:70:1c:9a:80:0d:56:07:30:a8:45:
         72:f9:3e:4b:49:02:3b:6c:48:04:d3:e3:21:d8:0b:8e:90:ae:
         2d:f2:a9:82:75:39:cf:57:e9:31:3b:f6:2b:9a:fd:e5:86:6c:
         68:20:bf:a8:ea:63:45:e2:b8:83:28:06:0f:76:41:5b:27:06:
         78:47:98:2a:1f:74:de:b4:06:b3:e7:ac:35:ba:09:c2:7b:5b:
         8e:5c:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 14:07:50 2024 by rpki-client on console-ams.rpki-client.org