Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.cer
File:                     E098788220DC9B9F9EB517AEFC6B76A6FD019F77.cer (raw, json)
Hash identifier:          LfQ8r+NKT5itr1vRwpWOtw8uwzWTrkAdzPPltnDaFPo=
Subject key identifier:   E0:98:78:82:20:DC:9B:9F:9E:B5:17:AE:FC:6B:76:A6:FD:01:9F:77
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       355B61A3565242C2DBC59984B2A4A347448474B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:12:57 +0000
Certificate not after:    Wed 02 Apr 2025 20:17:57 +0000
Subordinate resources:    AS: 267448
                          IP: 192.141.60.0/22
                          IP: 2804:41a8::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 05:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:61:a3:56:52:42:c2:db:c5:99:84:b2:a4:a3:47:44:84:74:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:12:57 2024 GMT
            Not After : Apr  2 20:17:57 2025 GMT
        Subject: CN=E098788220DC9B9F9EB517AEFC6B76A6FD019F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:48:55:44:1c:5a:1e:27:8d:69:4e:ee:83:
                    8c:06:d4:64:40:90:22:be:74:ba:0c:e3:50:9b:a4:
                    8e:e9:4f:18:1f:12:27:e1:8a:b7:f8:af:b7:42:e0:
                    c5:5c:a1:79:87:81:34:14:53:79:4c:b7:54:ce:26:
                    a6:b5:27:b8:fc:aa:12:68:ac:bd:c4:89:0c:fc:fe:
                    08:9a:ea:e9:43:bc:7a:e0:eb:51:2b:ae:b1:5a:46:
                    3a:c4:68:6a:6e:3c:fc:1f:00:17:42:f8:e2:bf:5d:
                    44:5a:39:71:0e:f7:ca:10:8e:2d:19:52:d6:55:d0:
                    59:a0:cb:d2:02:c0:c2:82:17:79:0d:cd:40:87:4e:
                    15:99:2a:a1:96:91:dd:ac:f1:d8:1d:2d:02:3b:76:
                    6e:8e:26:63:60:47:c0:22:69:18:ef:a7:da:65:c2:
                    d6:c9:a5:13:95:2c:67:3a:78:ef:0c:cb:f1:72:bd:
                    08:6f:eb:f9:5c:d1:ac:fd:f3:9c:77:62:c4:25:61:
                    89:8c:86:76:29:b2:13:a3:fe:09:df:6a:58:7e:3e:
                    f6:3b:ec:2d:55:e6:7d:b0:44:da:f2:05:66:c5:65:
                    b4:83:50:b4:01:5b:e1:cc:42:f7:a0:7a:07:b1:2f:
                    dc:ab:a0:f7:06:31:84:a0:74:d7:84:0c:58:3b:8d:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:98:78:82:20:DC:9B:9F:9E:B5:17:AE:FC:6B:76:A6:FD:01:9F:77
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/22
                IPv6:
                  2804:41a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267448

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:a8:a0:bb:d4:a0:5e:0d:f4:60:fa:2d:b3:69:02:e5:f7:
         48:0a:53:e1:9b:68:ba:51:84:76:b8:f4:c1:b3:1c:02:a7:d7:
         7a:60:2c:c3:8a:55:df:de:2a:3f:16:2e:ac:1c:aa:9c:43:be:
         99:82:3b:81:35:da:12:41:1b:ca:b0:72:9d:44:06:c1:d3:f1:
         7e:05:df:34:f4:c0:30:d2:08:68:05:ef:91:3a:62:35:b3:7c:
         e2:f4:76:1b:51:67:d3:e8:fe:8b:3c:5b:8d:d8:dc:2f:dd:4b:
         78:21:9d:05:8a:33:44:0e:f5:5b:2e:69:84:68:55:ba:30:b7:
         0e:04:67:3f:17:55:b3:dc:70:ad:08:72:93:03:d9:b3:76:c5:
         bd:0c:e6:0a:e7:b6:71:51:39:0f:af:0f:7a:a1:af:40:fc:24:
         86:78:2b:1c:8f:9d:f3:d4:a1:d1:d5:86:08:41:bc:ea:63:97:
         48:10:57:a3:e4:68:ac:a5:83:6d:db:47:04:1b:97:1e:c6:9d:
         48:d9:69:a1:f1:c0:2c:01:11:a0:5f:5e:2f:9f:22:b7:25:92:
         fb:82:60:73:db:6a:89:b6:88:d8:fc:b0:2d:ce:c9:aa:3d:62:
         24:25:57:7c:ea:4a:fa:1a:13:fa:80:4e:d0:85:94:70:62:4f:
         1b:92:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:18:24 2024 by rpki-client on console-fra.rpki-client.org