Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E2EE3D0727F11F5B17A7E2DA994BA496F99BFCA2.cer
File:                     E2EE3D0727F11F5B17A7E2DA994BA496F99BFCA2.cer (raw, json)
Hash identifier:          VdbMPg3jiw9L5X53RBUcgAIS09rdylh3H3CUaqCM2J8=
Subject key identifier:   E2:EE:3D:07:27:F1:1F:5B:17:A7:E2:DA:99:4B:A4:96:F9:9B:FC:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CD4B4578F4AD9D90CA5808565B157DD888CA607
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/1/E2EE3D0727F11F5B17A7E2DA994BA496F99BFCA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2024 18:30:03 +0000
Certificate not after:    Wed 09 Jul 2025 18:35:03 +0000
Subordinate resources:    AS: 267348
                          IP: 45.233.188.0/22
                          IP: 2804:4c14::/32

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 13:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d4:b4:57:8f:4a:d9:d9:0c:a5:80:85:65:b1:57:dd:88:8c:a6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 18:30:03 2024 GMT
            Not After : Jul  9 18:35:03 2025 GMT
        Subject: CN=E2EE3D0727F11F5B17A7E2DA994BA496F99BFCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:84:1d:f1:d8:f0:23:3e:b2:ea:58:38:4f:
                    5a:64:fd:60:a7:1a:85:94:5d:e9:61:ef:b6:8d:ca:
                    70:22:03:2a:40:40:ef:b3:89:48:5c:db:86:af:79:
                    91:55:cb:e4:3c:7e:72:1e:59:20:d4:b9:9a:ef:c8:
                    6d:f6:ac:a1:2c:a2:fb:74:f0:c7:90:a8:04:ef:05:
                    e1:6e:a1:f8:32:87:ef:29:2a:44:e9:1a:8e:6f:7f:
                    82:30:a9:fc:08:97:b2:e1:c3:e9:d9:d3:55:a1:1e:
                    e7:95:ce:e2:72:e4:4f:ce:02:c7:12:ff:45:7e:da:
                    5e:e6:89:78:63:16:28:e8:98:ef:f1:41:c2:16:9a:
                    a6:24:a8:a3:08:6d:41:1b:8f:1a:d1:17:53:dc:a2:
                    fa:3a:1f:db:ff:b7:d0:b4:f3:86:1c:d7:4a:ad:c5:
                    b5:b1:f5:0c:43:9a:d4:82:2f:11:77:80:80:fb:c4:
                    b8:68:76:e5:13:84:7d:69:7c:16:83:6b:2b:2f:db:
                    81:43:3c:bf:05:1a:fa:7e:0f:34:5b:77:b3:a0:fc:
                    ba:59:30:5c:19:4c:d8:fa:fc:ba:5e:a6:a6:01:ca:
                    27:d2:4a:5f:10:85:e1:6d:80:a5:95:ba:b8:51:57:
                    c7:82:88:07:42:f6:f1:18:98:31:04:32:2a:85:6a:
                    dc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:EE:3D:07:27:F1:1F:5B:17:A7:E2:DA:99:4B:A4:96:F9:9B:FC:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/1/E2EE3D0727F11F5B17A7E2DA994BA496F99BFCA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.188.0/22
                IPv6:
                  2804:4c14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267348

    Signature Algorithm: sha256WithRSAEncryption
         b4:96:b3:fb:3b:89:39:32:73:34:01:8e:fc:63:e0:24:4c:a2:
         a5:17:1d:72:03:f7:c5:06:bd:ad:bd:51:fc:48:0e:cc:75:9f:
         ae:55:4c:0f:24:d4:14:46:11:a2:bc:99:28:ab:02:e5:7b:47:
         5c:9e:17:4e:bc:74:8b:e7:f5:13:13:f5:a5:f0:b0:85:6b:5b:
         59:a9:28:0b:cd:17:32:bb:db:7b:f3:2f:82:b4:6d:53:75:c2:
         a4:d3:d9:20:84:16:63:b5:11:43:ac:23:5f:e2:8d:cb:9a:d8:
         94:4f:bf:b6:62:28:0e:6e:8f:84:bb:8e:56:f0:53:5a:04:be:
         82:ca:f1:8c:33:4b:ff:1a:e2:e2:c6:0a:c1:ac:c2:d6:86:2f:
         62:48:0b:fa:52:5b:c2:b3:fb:56:f2:a3:3c:fb:f9:0c:51:80:
         c9:c9:64:34:7d:01:44:7c:f5:ed:73:fe:80:ca:17:44:a5:e4:
         22:35:a3:8c:66:34:30:a9:ab:32:1f:4c:e3:a9:03:14:aa:a8:
         c9:a2:bb:a8:53:90:77:f0:ba:11:99:53:64:df:e7:c0:d4:37:
         86:ac:16:68:b2:31:55:b8:aa:43:6e:d0:14:c6:7e:73:e0:7a:
         e0:b1:08:14:e8:23:96:96:a9:3d:67:d7:8c:7a:de:ac:3a:0a:
         4a:09:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org