Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
File:                     E1C3821086E172D7404AE335C21C2D33F448F991.cer (raw, json)
Hash identifier:          IjAHYW9HtmFWFxvyPrs4Si+3QMzuB6IsT4q9r2au9To=
Subject key identifier:   E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       620FE21BD3411B466E52F55EA3C0B1B45EB3D376
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:28:46 +0000
Certificate not after:    Thu 03 Apr 2025 14:33:46 +0000
Subordinate resources:    AS: 272677
                          IP: 179.63.84.0/22
                          IP: 2804:86f4::/32

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 12:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0f:e2:1b:d3:41:1b:46:6e:52:f5:5e:a3:c0:b1:b4:5e:b3:d3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:28:46 2024 GMT
            Not After : Apr  3 14:33:46 2025 GMT
        Subject: CN=E1C3821086E172D7404AE335C21C2D33F448F991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:5f:6d:72:0e:1d:20:d9:37:4b:fe:9b:19:
                    75:2b:f5:42:f2:49:1f:24:af:d9:cd:09:6f:2d:0f:
                    87:48:bd:51:42:d9:d5:e8:6b:4a:65:83:0f:1f:dd:
                    97:28:b5:f5:09:df:ea:b1:56:3c:46:b6:1b:05:bc:
                    29:70:87:43:60:3a:62:0b:c4:2e:b5:83:71:9d:e1:
                    1f:28:45:07:29:51:1f:90:cc:be:03:7f:b1:86:c9:
                    58:17:e1:13:b7:4e:53:5b:23:45:57:dc:c1:1f:dd:
                    b1:3e:d2:2e:49:e5:eb:f9:4d:c6:1f:6c:c4:83:48:
                    65:a9:b4:94:15:35:f1:24:32:04:e9:0e:d9:4b:f5:
                    ff:ad:00:3f:ba:13:27:bd:2f:fb:3f:39:cf:31:b4:
                    93:f4:3b:b5:8b:d4:40:09:5f:b6:d9:7d:ac:30:6c:
                    82:97:e0:d6:5e:fb:22:46:b0:48:20:ef:bc:f2:4c:
                    3f:ac:63:d2:17:15:5e:91:07:65:56:14:0b:ae:1c:
                    2a:1f:ea:7a:69:99:f7:72:48:c6:41:6d:c8:9d:f2:
                    33:cb:ae:af:03:31:55:51:70:c5:8f:a1:e3:fc:26:
                    c4:be:86:a2:64:92:5f:6f:26:dc:96:03:be:e6:5d:
                    9f:3a:a5:b0:2a:4c:bb:47:45:fd:f7:d1:dd:12:6b:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/22
                IPv6:
                  2804:86f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272677

    Signature Algorithm: sha256WithRSAEncryption
         ba:c3:b1:44:1a:41:53:b8:d9:49:e4:fb:81:64:ed:25:07:e8:
         4c:d0:ac:88:71:cf:ff:68:47:61:4e:b2:ce:ed:00:86:02:c0:
         c7:1b:83:ab:4c:71:a0:5b:0b:f0:5a:5e:a9:e6:77:40:ba:b8:
         81:6e:da:2b:7d:62:19:25:52:9f:37:aa:f0:74:03:df:cc:61:
         b9:03:ca:03:00:71:6a:6b:35:f7:cf:52:a0:62:6c:4f:16:0c:
         c5:04:68:b3:c4:ed:f9:2a:2d:74:f6:3b:da:2d:27:a7:e3:b1:
         17:91:a4:0e:78:0b:06:54:cb:77:00:da:30:90:84:09:87:05:
         83:1e:ae:17:8d:a7:5d:1b:18:d1:7a:b1:e8:9b:77:3e:34:3c:
         ef:92:e3:67:22:23:d6:78:c6:f9:87:93:4f:7c:7d:4b:45:ff:
         ae:26:d5:1c:eb:0b:de:94:73:6a:89:97:f9:b5:30:5c:7d:34:
         4d:ab:c5:5a:61:2c:ef:e5:7a:e4:03:96:eb:fc:59:34:67:6c:
         4a:8f:3b:6c:53:ff:28:89:7f:e5:ef:81:3f:3c:3d:41:8e:0f:
         1d:4d:06:12:a2:78:00:0b:b2:04:ce:7f:56:79:bd:3e:66:a5:
         0e:09:1b:d0:ab:c9:2c:03:dd:56:7e:16:22:c5:40:f7:35:d7:
         f6:f6:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:46:33 2024 by rpki-client on console-ams.rpki-client.org