Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3B5C839C3F1E2D8A3AC2F04BA7360573AD0AF86.cer
File:                     E3B5C839C3F1E2D8A3AC2F04BA7360573AD0AF86.cer (raw, json)
Hash identifier:          95jNCuROGkj1RsYgjnSzfwaYKD+Ft5oRwE35o7zE8EU=
Subject key identifier:   E3:B5:C8:39:C3:F1:E2:D8:A3:AC:2F:04:BA:73:60:57:3A:D0:AF:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0227860E0C0A323D6ECAA91ECCDE75495DDCF065
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/E3B5C839C3F1E2D8A3AC2F04BA7360573AD0AF86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 00:48:18 +0000
Certificate not after:    Mon 05 May 2025 00:53:18 +0000
Subordinate resources:    AS: 271673
                          IP: 131.255.130.0/24
                          IP: 190.9.127.0/24
                          IP: 201.218.190.0/23
                          IP: 2804:7f34::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 01:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:27:86:0e:0c:0a:32:3d:6e:ca:a9:1e:cc:de:75:49:5d:dc:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 00:48:18 2024 GMT
            Not After : May  5 00:53:18 2025 GMT
        Subject: CN=E3B5C839C3F1E2D8A3AC2F04BA7360573AD0AF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:ce:44:f1:59:d0:1c:b2:10:2d:5f:90:6b:
                    d1:0a:63:5f:de:f3:bf:c2:61:13:87:40:c0:cf:60:
                    d9:93:91:80:60:b0:45:bf:61:cc:fa:96:6c:9b:a7:
                    54:30:65:8f:97:8f:63:ba:1a:65:95:41:be:ad:b6:
                    59:cc:cb:00:b0:52:0c:3e:07:0f:9e:4c:47:11:f8:
                    b0:f0:dd:53:65:86:d8:40:f6:ff:b1:b0:72:7b:aa:
                    59:a0:39:d8:42:c9:91:3f:89:2e:7b:38:a8:99:d9:
                    64:b8:9a:ae:3b:5f:2b:3b:86:99:e5:bd:f4:f8:5e:
                    f2:c7:ee:6f:49:39:d2:b8:40:13:f6:94:e1:5b:40:
                    0c:c4:b8:4a:81:22:95:10:b3:7b:a9:49:99:15:15:
                    f8:bd:9d:aa:b4:23:be:57:2e:ba:59:9f:29:3e:08:
                    b0:e0:98:19:d0:58:76:a8:1e:92:29:27:41:b6:6a:
                    e8:7c:67:4d:a3:e4:1d:25:41:a6:64:76:5d:57:a2:
                    86:68:58:cc:53:5f:65:4c:4f:8f:fc:24:4c:78:86:
                    24:8a:11:d1:9f:3f:9c:11:fb:9d:a3:e5:29:10:3f:
                    f9:4a:fe:05:29:b3:07:32:9c:1f:d9:da:d6:9c:bf:
                    6d:34:55:e2:6e:f1:54:32:5f:15:09:ad:85:2c:d6:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:B5:C8:39:C3:F1:E2:D8:A3:AC:2F:04:BA:73:60:57:3A:D0:AF:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/E3B5C839C3F1E2D8A3AC2F04BA7360573AD0AF86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.130.0/24
                  190.9.127.0/24
                  201.218.190.0/23
                IPv6:
                  2804:7f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271673

    Signature Algorithm: sha256WithRSAEncryption
         6a:70:76:a9:81:75:b4:95:6c:43:4d:db:cc:ed:f1:59:1b:b6:
         cc:38:45:1e:e0:78:89:4e:72:07:80:ea:54:a3:13:d0:8e:44:
         8c:8e:5c:9a:c9:29:43:e0:7a:62:40:b8:34:12:dd:3c:7c:58:
         e4:17:95:23:71:3f:ee:c4:8a:52:f0:78:46:d0:e6:e1:81:29:
         93:a1:41:bf:cf:b1:d3:2d:c5:73:1f:fb:86:41:f2:4d:45:22:
         6e:5a:8a:48:99:eb:5a:b9:c0:09:9b:07:92:e5:63:ea:29:0e:
         57:5c:f5:20:dc:e9:35:1b:2c:b9:30:9f:7e:90:20:37:1d:e8:
         0e:22:f0:4f:ab:84:65:67:19:e4:71:54:bc:42:65:58:a8:26:
         cb:7f:df:98:4f:77:4f:8e:42:59:b2:bd:b5:f7:ad:1c:17:8a:
         dc:20:21:61:0c:c2:91:69:da:16:74:b1:2f:e6:43:26:e6:c8:
         98:af:28:8c:8b:7d:d0:2d:90:44:cb:d5:2d:cf:85:10:56:2b:
         66:80:88:ad:5b:7e:b9:9d:86:29:da:f8:50:85:92:97:98:0e:
         d0:d0:4f:12:60:26:8a:77:8a:19:3d:aa:65:8e:d0:19:c6:58:
         5a:f0:3d:ea:f9:54:db:03:4a:16:31:6b:2b:a3:7b:46:f9:a7:
         68:00:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 03:37:55 2024 by rpki-client on console-fra.rpki-client.org