Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
File:                     E19214E5CCA9EB0ED78183894DBE463913F7272A.cer (raw, json)
Hash identifier:          Slji6d/fSARm93JQWlzGko1tW5JW5dE75XDEgzI8KuM=
Subject key identifier:   E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CD13BA78FD75196EC0EC37F1645CB3EA601A220
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:37:50 +0000
Certificate not after:    Thu 03 Apr 2025 08:42:50 +0000
Subordinate resources:    AS: 271134
                          IP: 167.249.88.0/22
                          IP: 2804:76c8::/32

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 11:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d1:3b:a7:8f:d7:51:96:ec:0e:c3:7f:16:45:cb:3e:a6:01:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:37:50 2024 GMT
            Not After : Apr  3 08:42:50 2025 GMT
        Subject: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:3f:8a:0c:06:bc:0c:29:26:d2:ae:5e:d3:
                    44:88:bf:a9:ec:b8:d0:f9:ea:7f:94:87:60:34:c6:
                    ed:ce:05:87:18:d7:65:0a:e9:b6:7e:87:13:14:20:
                    58:03:63:dd:91:f3:b7:3d:01:62:b0:10:cd:e7:53:
                    6c:75:c7:45:b4:4b:d3:f0:6c:f2:23:ab:3c:ec:32:
                    ad:b2:40:18:1e:d4:25:8a:b6:22:3c:c9:7a:94:39:
                    c9:9c:f2:62:12:94:f9:d2:6a:b9:3a:1d:ab:63:54:
                    50:0e:5a:43:95:82:1e:7a:53:22:dc:13:1d:b3:80:
                    c0:9b:cb:2c:38:99:c1:d2:6b:2d:29:10:28:1c:35:
                    97:50:28:e8:86:7a:59:1d:a9:2c:a0:2f:63:9c:8f:
                    18:a7:55:e4:91:e3:e4:9d:61:3f:e5:d3:cb:2f:e3:
                    bb:b8:2d:f5:9d:19:e2:11:3e:27:e2:73:a8:9a:44:
                    bc:b4:59:6a:16:52:68:17:6a:31:42:f3:3e:a3:bd:
                    37:ce:5e:61:98:8e:b8:2e:41:40:8f:2e:6f:18:4c:
                    88:bf:80:e5:a7:8b:d9:52:10:5f:74:3d:e1:5d:61:
                    ba:2c:61:24:f9:c3:19:00:c6:cf:1a:49:01:3f:04:
                    9a:a7:f4:cc:f0:79:fd:e7:0f:3d:4d:ea:3d:5a:4c:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/22
                IPv6:
                  2804:76c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271134

    Signature Algorithm: sha256WithRSAEncryption
         00:36:c6:c4:6e:f2:89:6e:bf:f2:f1:e5:cf:8f:ac:76:c8:e6:
         40:48:4c:f5:82:d4:0f:89:eb:a2:7d:84:1a:db:b7:30:50:b5:
         d0:10:0c:c5:1d:cb:9d:99:6f:78:56:f9:b0:27:b3:97:8a:e8:
         3b:34:68:97:fc:94:34:d8:f1:95:10:77:90:00:4e:6c:ae:b4:
         75:3e:58:2e:09:4a:81:89:6b:f7:cb:52:d9:08:78:f9:c9:06:
         1c:dd:5a:0d:77:66:b1:32:d0:33:5f:cd:d6:4e:63:bb:27:33:
         2b:f9:2b:ad:c0:13:15:ec:e9:b1:16:45:dd:db:30:89:43:2d:
         7a:89:e8:6c:f9:be:a3:48:7f:3e:19:e0:cf:89:b6:95:f2:98:
         32:7b:2f:94:47:13:b7:76:d8:fe:7d:97:2a:c1:6d:0b:42:eb:
         fe:e0:74:c4:bd:40:9c:6f:be:3b:b5:70:cd:6d:f2:64:b4:b6:
         1f:2c:e5:2a:65:f0:4d:1f:92:97:49:85:20:5c:7f:a0:96:fb:
         92:31:12:38:a5:af:a1:cd:2e:ce:c0:de:71:4e:c9:5d:1e:dd:
         49:86:12:b2:1c:c4:27:90:b6:16:32:58:ac:b4:2b:53:64:cf:
         cf:8d:20:2b:ff:92:40:d8:12:3a:19:c2:c8:8a:1c:d7:fb:3c:
         05:bf:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 15:47:17 2024 by rpki-client on console-ams.rpki-client.org