Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.cer
File:                     E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.cer (raw, json)
Hash identifier:          FOLZrHw5p1P+qArqsycM/W8msMBtLEs0BiipwKccGa8=
Subject key identifier:   E4:E6:B5:BE:E4:91:8D:4D:B2:19:AD:D5:46:36:27:D9:F7:1B:72:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2429A4A4A9853115784DCBBA0504AC019BDF7646
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 21:10:47 +0000
Certificate not after:    Mon 04 Aug 2025 21:15:47 +0000
Subordinate resources:    AS: 270430
                          IP: 190.111.156.0/22
                          IP: 2804:6bdc::/32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 18:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:29:a4:a4:a9:85:31:15:78:4d:cb:ba:05:04:ac:01:9b:df:76:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 21:10:47 2024 GMT
            Not After : Aug  4 21:15:47 2025 GMT
        Subject: CN=E4E6B5BEE4918D4DB219ADD5463627D9F71B7200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:6c:33:15:c3:a2:9f:6f:c0:e3:a8:67:e1:
                    ae:fd:e0:e5:05:73:be:9e:04:7b:f9:0a:f6:ce:7a:
                    85:10:7e:85:bb:9d:2a:03:e5:c1:f9:2d:f7:d2:86:
                    54:31:ca:7a:6e:1c:2f:e5:b8:32:dd:bc:ca:e6:8b:
                    17:f8:9b:ac:49:49:c1:c8:cd:e3:a6:8e:8b:6a:43:
                    03:a5:71:8c:65:40:c2:6e:24:dc:c3:bb:8d:d4:c8:
                    30:69:61:fb:77:1b:53:3e:0d:ac:bb:e4:f1:5e:1d:
                    b6:fc:26:98:19:b0:69:18:4a:41:c7:32:f1:7c:c2:
                    f4:a8:42:72:f2:68:ee:e4:00:ad:b7:1e:d4:28:97:
                    4b:81:9b:ff:29:5f:cb:ab:3e:f9:a8:3a:eb:fe:3e:
                    b2:ac:ef:09:d4:70:92:60:3d:c5:8d:92:9e:47:a8:
                    21:62:2e:73:94:8f:da:19:91:3e:35:a4:99:ed:af:
                    82:a9:84:97:12:2b:24:87:f4:b0:38:be:46:72:7c:
                    c1:3b:7d:00:65:84:bd:27:23:41:8d:66:3d:97:6d:
                    35:3d:67:44:45:14:e2:b1:33:f4:73:c6:80:01:98:
                    25:6f:38:1e:09:32:6f:aa:77:9c:97:9d:48:cc:52:
                    32:70:d8:12:0f:40:c5:ec:27:af:d0:33:af:e6:eb:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:E6:B5:BE:E4:91:8D:4D:B2:19:AD:D5:46:36:27:D9:F7:1B:72:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/22
                IPv6:
                  2804:6bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270430

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:e0:63:0a:29:ad:13:71:2f:c8:e5:5f:f1:a4:6b:24:e2:
         fa:b2:8f:74:1e:3d:50:5f:01:85:2f:34:72:68:64:58:ef:a5:
         22:14:e7:0e:3e:f4:cf:6b:e5:07:20:71:8c:35:61:42:31:2b:
         30:d4:4a:87:cf:33:d3:d0:99:13:19:ab:be:87:c5:6e:ea:de:
         6d:06:67:3e:bd:bf:5f:c6:f6:33:92:bd:01:26:55:cc:f8:12:
         db:04:62:6e:b3:2b:4c:6d:d3:16:83:9b:2c:87:95:c6:18:8b:
         09:6d:86:2a:aa:c0:fb:56:2a:36:b3:2d:5b:d6:5c:a0:06:8b:
         b2:c7:88:66:55:bf:ae:fe:7e:f4:aa:5a:00:f4:2c:00:11:14:
         d7:89:2b:1b:9a:41:92:6a:65:6f:aa:ee:9e:d1:b0:0d:d8:24:
         4a:45:9f:d9:6a:35:0f:29:bf:d3:06:4c:f0:1c:3f:e0:1e:6d:
         01:4d:03:65:da:e1:a4:86:87:f9:d8:12:5c:68:a2:89:a8:a8:
         75:1b:d2:41:29:74:c4:b5:32:fd:05:f6:83:de:1e:ef:26:cb:
         9a:63:03:95:a9:fe:17:32:9d:85:5d:ab:5a:ce:48:9f:fa:54:
         7a:b7:49:bf:77:00:8a:2e:99:f5:90:9b:fa:4e:1a:15:0c:8f:
         90:1a:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 23:54:31 2024 by rpki-client on console-ams.rpki-client.org