Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer
File:                     E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer (raw, json)
Hash identifier:          U6H+/QZWmb7+1yQPy4fLQ9IF9zOpkpQyNGbooALxepU=
Subject key identifier:   E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75FEDA4D8A7249FAF878218AEA4C0E443021BE1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:06:40 +0000
Certificate not after:    Thu 03 Apr 2025 22:11:40 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, certificate revoked on Fri 10 May 2024 19:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fe:da:4d:8a:72:49:fa:f8:78:21:8a:ea:4c:0e:44:30:21:be:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:06:40 2024 GMT
            Not After : Apr  3 22:11:40 2025 GMT
        Subject: CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:8c:38:07:52:73:56:41:4d:51:b1:d6:f4:
                    9b:30:3c:44:b9:50:d8:21:ba:7e:ce:76:94:cc:c7:
                    41:0c:dc:9a:64:28:20:e3:cf:fb:2d:95:c4:ad:b1:
                    5d:87:d3:af:2e:77:88:9c:e4:18:b4:d4:e0:d0:11:
                    d6:e8:2c:1c:0b:53:44:1c:db:9b:ac:b4:80:e7:fb:
                    8e:1d:40:8c:cd:0e:08:c6:52:42:9a:9a:dc:86:d1:
                    17:bc:5e:49:3c:40:13:a1:9a:94:6a:b1:41:f5:a5:
                    2e:9a:89:87:9f:0e:64:33:fe:7f:09:a0:3d:c1:77:
                    6d:9d:19:a0:03:02:50:f5:81:55:8f:dd:99:cf:5f:
                    61:4a:70:4f:1e:c1:64:fc:89:f7:6b:23:f2:16:4d:
                    d4:5f:b4:99:db:49:72:0b:1f:f3:53:fa:ee:8d:2d:
                    f9:c3:ab:c1:c8:7d:a6:6e:77:a0:27:18:cf:f7:68:
                    a6:34:b5:a9:77:3b:22:1d:d8:25:ad:74:1c:10:d2:
                    fc:0e:52:11:af:7d:20:33:8c:49:6d:86:43:c5:b6:
                    01:13:f8:9b:be:31:cf:4e:01:9f:cf:60:87:7a:8a:
                    98:86:f7:64:f0:ca:54:4e:50:39:61:5f:fd:10:5d:
                    f2:e0:04:43:7d:8f:53:fc:e2:2d:64:d4:04:50:a6:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         d9:c0:1f:b6:d7:d5:e8:66:9f:2b:b9:c6:13:85:25:de:4b:e0:
         9d:e4:d4:93:19:65:0b:f0:11:a6:fb:c2:63:8b:11:98:8e:d1:
         f4:65:96:b5:0f:21:a8:9d:4c:fd:10:d9:2d:9e:cc:e8:72:e7:
         3d:c6:17:ff:16:12:bd:bc:f3:ea:ba:ce:12:54:6e:00:6e:6f:
         64:0e:38:9e:9f:32:16:65:40:6f:f6:f3:bd:88:b4:d9:8a:3b:
         a3:5f:10:e7:5c:08:f9:f7:e6:de:12:be:d7:2a:1d:67:a8:f0:
         f5:d3:3b:db:be:43:c7:0e:8a:df:12:39:a6:4c:ed:ff:12:6d:
         e4:c5:f6:a7:09:89:ba:62:9a:ae:36:4f:ef:ec:a1:83:ab:eb:
         da:47:e7:80:72:9c:5b:7b:bf:11:35:7d:9f:98:23:e6:68:8c:
         65:0f:27:aa:b5:5e:ad:d9:b7:6a:6b:80:55:3a:14:bc:a7:1f:
         d1:6a:9e:65:9b:7d:b0:b6:bd:fd:98:10:a8:3a:66:4b:16:88:
         37:9f:ba:64:88:35:23:b0:e9:a7:18:7d:99:a6:ca:cd:b8:e5:
         73:78:db:a2:fd:6e:23:7d:ae:c2:08:20:f8:4d:75:42:bd:2b:
         c0:12:7c:08:21:3c:31:18:0a:f7:89:0f:a0:ca:64:71:2d:38:
         90:57:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org