Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer
File:                     E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer (raw, json)
Hash identifier:          FKsYBYWahPIsjgsAOKZoawsJ9PyR4CnaCLwbzDVImkY=
Subject key identifier:   E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       453CF83BDE33A0FAC681166E2483AFE96E777E38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:49:09 +0000
Certificate not after:    Thu 03 Apr 2025 09:54:09 +0000
Subordinate resources:    AS: 271267
                          IP: 168.197.180.0/22
                          IP: 2804:78d0::/32

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 09:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3c:f8:3b:de:33:a0:fa:c6:81:16:6e:24:83:af:e9:6e:77:7e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:49:09 2024 GMT
            Not After : Apr  3 09:54:09 2025 GMT
        Subject: CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:ce:d2:ba:1e:ef:4f:78:7a:f4:3d:fe:c3:
                    f0:b2:4e:fb:9c:3c:e0:db:76:a1:eb:62:6b:71:45:
                    c5:83:da:15:77:40:20:64:bb:16:80:96:27:4b:e6:
                    82:68:3a:8b:2d:94:a9:66:34:c1:61:29:0c:e5:84:
                    ac:b0:1e:e6:e6:fc:95:71:a0:93:51:d8:74:b4:0a:
                    e3:4b:e9:cf:a6:de:c0:10:38:5e:66:3a:39:36:98:
                    de:54:44:c2:f9:ce:09:9b:61:44:79:da:8e:2f:d5:
                    43:38:ae:c1:af:aa:09:c3:49:3e:ad:67:72:41:62:
                    35:06:98:f0:64:e3:1a:ab:6d:60:9f:15:d5:fe:62:
                    70:b1:73:0a:67:59:e6:b5:6a:54:23:9d:0e:a7:e5:
                    8a:ca:ec:ec:ec:14:37:8a:2f:10:78:da:b6:51:be:
                    f2:8b:f3:80:e6:a8:17:4a:97:0c:f8:a9:b7:29:94:
                    b5:08:59:91:c8:29:f2:9f:ea:b2:4f:6f:c6:c5:9d:
                    85:c7:6f:a8:5c:b6:22:f1:90:17:3d:f5:d7:0f:ad:
                    d1:86:69:34:01:42:6d:01:d4:cf:42:24:66:10:39:
                    b8:49:2d:32:b5:56:ad:48:0d:1e:77:4b:0f:8f:37:
                    14:22:97:65:c9:99:51:79:9b:35:ce:31:0b:f3:71:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/22
                IPv6:
                  2804:78d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271267

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:8f:07:1b:7c:98:22:70:e3:54:5e:54:80:fa:5a:3e:5c:
         14:0c:d8:f1:5e:98:3a:6c:9a:0b:35:59:7e:db:c8:a9:6c:3b:
         b6:28:46:ce:da:5e:92:2b:66:d2:06:e5:e8:c5:bd:c8:c1:b6:
         68:31:22:20:7e:70:de:93:95:cb:b3:b4:ca:aa:38:80:10:fb:
         e9:bc:fe:bc:28:bb:81:43:15:f9:8f:d3:af:de:c9:7d:97:bc:
         ff:ac:b9:c2:ec:ee:80:87:05:09:7e:5f:f2:a0:03:70:20:4b:
         93:4a:6a:4d:cf:ea:49:20:be:0f:29:63:0a:0f:f5:f3:a1:cb:
         12:cd:6a:03:75:0f:06:c4:97:f3:f2:20:ea:7a:82:b8:ba:6f:
         41:4c:80:22:e2:53:a4:dc:1b:70:60:57:cb:53:0d:f0:61:12:
         c2:ef:b1:61:24:79:f7:55:b6:6c:f4:af:c8:db:59:ae:fd:05:
         d3:25:76:f5:e8:d6:1f:3d:c0:97:02:f5:0d:dd:b0:2e:91:50:
         27:77:2d:11:dd:6b:56:3c:1a:d0:03:b0:6e:56:ad:86:44:79:
         c4:45:6b:19:89:93:6d:de:51:7f:b6:06:63:43:75:b5:be:fd:
         27:7b:af:f1:5d:51:f7:94:dc:a6:80:88:69:4f:a8:13:09:ea:
         9d:08:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 11:49:51 2024 by rpki-client on console-fra.rpki-client.org