Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E11CAC33594DA1068263F128EE53DD82767BBF40.cer
File:                     E11CAC33594DA1068263F128EE53DD82767BBF40.cer (raw, json)
Hash identifier:          LoEbeRQ46AN5LFTipVA61L9ppfP3joPFtiK7ztKx9Fk=
Subject key identifier:   E1:1C:AC:33:59:4D:A1:06:82:63:F1:28:EE:53:DD:82:76:7B:BF:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AE36C723F395308F2E3AA012EC752029CBF2B51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/2/E11CAC33594DA1068263F128EE53DD82767BBF40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2024 13:33:16 +0000
Certificate not after:    Mon 07 Jul 2025 13:38:16 +0000
Subordinate resources:    AS: 265440
                          IP: 45.225.180.0/22
                          IP: 168.194.200.0/22
                          IP: 179.191.8.0/21
                          IP: 2804:342c::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 15:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:6c:72:3f:39:53:08:f2:e3:aa:01:2e:c7:52:02:9c:bf:2b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 13:33:16 2024 GMT
            Not After : Jul  7 13:38:16 2025 GMT
        Subject: CN=E11CAC33594DA1068263F128EE53DD82767BBF40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:7b:21:0d:7d:c2:f4:37:a0:ca:bf:80:41:
                    37:41:2c:91:0f:f5:bd:e8:a6:6d:6c:03:ff:5d:a3:
                    68:09:62:2c:20:dc:d9:cf:3e:15:37:cb:0a:32:df:
                    6d:51:ef:a1:1a:4c:b2:fa:34:77:b4:c3:ae:17:92:
                    2b:1a:76:86:8a:2f:cc:f9:8f:e9:e0:81:ad:ad:72:
                    44:a1:d3:b8:d9:b7:70:01:80:c6:93:f6:fa:04:c8:
                    5a:85:a6:f4:cd:20:25:2d:a2:d4:fa:18:44:04:d6:
                    82:0d:34:84:d2:b9:63:9f:c9:88:fe:6a:63:d3:8a:
                    f0:b5:8b:8d:5d:89:f1:5e:17:34:4c:94:0d:36:f7:
                    f2:2b:d0:1f:61:8a:f6:c9:49:59:6c:43:a2:e0:b7:
                    09:93:72:3c:f1:53:77:bd:6e:86:23:fe:2b:45:38:
                    f4:91:32:50:8a:1f:07:18:25:78:46:5d:ad:2b:25:
                    67:30:48:a5:c3:bd:fb:71:8a:80:ad:0f:39:f8:49:
                    70:7f:7d:c7:8d:f0:0a:42:7c:36:58:28:20:ec:4a:
                    53:98:15:4f:97:b5:76:b5:14:dc:b4:8c:95:50:f7:
                    a6:75:a8:c0:ac:eb:bc:14:53:c6:d9:2e:fb:93:c3:
                    97:ce:dd:2d:77:8a:97:e4:b5:5e:bf:0a:dd:f8:5b:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:1C:AC:33:59:4D:A1:06:82:63:F1:28:EE:53:DD:82:76:7B:BF:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/2/E11CAC33594DA1068263F128EE53DD82767BBF40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.180.0/22
                  168.194.200.0/22
                  179.191.8.0/21
                IPv6:
                  2804:342c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265440

    Signature Algorithm: sha256WithRSAEncryption
         29:da:b1:c1:0e:f3:d5:31:d9:69:8e:91:37:05:7c:9c:71:b8:
         ae:f0:1f:ec:39:4f:3e:0f:98:c5:19:32:8e:ba:c8:13:0d:58:
         b1:3e:6d:69:9b:fb:3e:52:13:c1:74:5a:83:31:f2:90:3b:c0:
         0a:52:25:3d:ba:80:c3:48:23:d0:c8:95:66:e7:79:b0:a1:49:
         30:00:02:cf:d3:38:de:76:f8:0d:13:95:56:1d:1b:f5:8d:e7:
         cc:6e:24:3b:7d:1a:a8:eb:14:f9:e2:c5:ba:5e:57:e1:b8:ba:
         fd:cf:8f:0f:af:88:9b:25:2a:53:45:0a:6f:12:02:12:01:b0:
         38:30:7a:e5:05:86:8a:44:42:f3:e2:fd:85:07:51:a4:93:05:
         f1:65:ed:53:4a:ee:9a:d6:9f:08:5e:07:b1:44:be:6c:c4:8f:
         6a:74:ab:ca:ba:7e:cd:7f:70:e0:1f:af:b6:2a:19:16:96:e0:
         47:8e:1f:a6:6d:a1:60:5b:87:ac:f0:5b:ed:4f:e9:b2:48:7f:
         3b:ab:f9:aa:85:35:60:99:27:d8:e6:57:c9:15:0b:f7:e4:9a:
         23:0e:1a:11:d4:3b:db:42:19:c6:f1:b4:3e:c2:ae:16:f8:2b:
         2d:98:ea:de:89:f0:35:d8:ce:34:be:5d:b6:4e:08:dc:22:ad:
         bb:18:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:41:00 2024 by rpki-client on console-ams.rpki-client.org