Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.cer
File:                     E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.cer (raw, json)
Hash identifier:          uRgpGARv+R+Fr8sOIfDGglQWyVj6dfgVlVMrUrMaBXM=
Subject key identifier:   E5:BB:76:1C:09:F5:2E:D9:79:46:33:C2:A5:CE:74:C6:28:0F:E5:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       211F4A8090D57B9F5915E8357A6606838874370F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:53:02 +0000
Certificate not after:    Wed 02 Apr 2025 20:58:02 +0000
Subordinate resources:    AS: 265427
                          IP: 168.195.192.0/22
                          IP: 2804:33f4::/32

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 12:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1f:4a:80:90:d5:7b:9f:59:15:e8:35:7a:66:06:83:88:74:37:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:53:02 2024 GMT
            Not After : Apr  2 20:58:02 2025 GMT
        Subject: CN=E5BB761C09F52ED9794633C2A5CE74C6280FE5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:38:10:61:94:9c:2d:bf:3c:c2:90:91:dc:
                    60:e2:b7:5c:ce:93:03:5e:57:2e:d7:8f:cb:c0:b9:
                    b0:f4:10:28:5b:f9:ef:7b:5a:ad:cb:59:bd:7f:fe:
                    75:e6:f7:ac:b6:77:8d:e2:5d:e2:e4:85:f7:2c:7b:
                    50:fa:a8:6b:d5:f5:61:08:54:ae:d8:fa:bc:04:58:
                    1b:26:af:c5:c9:b3:73:76:2d:24:36:6e:dc:81:c5:
                    86:f8:ce:b5:52:1f:01:23:85:4d:9e:65:f4:bc:bd:
                    02:3d:a9:7e:9b:0e:99:09:42:df:a2:8d:1a:5a:d9:
                    fb:67:b5:33:36:c5:22:2f:fd:e8:95:7b:41:ad:bc:
                    7c:c3:6f:a4:59:93:0a:f4:ca:a5:12:60:d5:0e:93:
                    3c:94:20:a2:93:7a:15:66:ef:7c:aa:bc:5d:34:ff:
                    33:be:90:44:25:ab:ba:ad:54:6c:aa:1f:d6:44:2f:
                    8e:0f:f4:c3:88:66:6c:35:57:b4:5c:8b:5c:09:52:
                    4e:e0:05:4a:04:46:55:50:2c:26:08:2f:9a:10:8b:
                    29:8c:ab:38:a4:7f:08:35:31:2d:75:d9:68:c1:9f:
                    2c:29:70:f1:72:56:e0:b4:f5:9f:54:2d:c7:df:83:
                    63:9e:31:d9:7a:e7:a3:6a:40:39:22:8c:19:f5:7e:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:BB:76:1C:09:F5:2E:D9:79:46:33:C2:A5:CE:74:C6:28:0F:E5:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.192.0/22
                IPv6:
                  2804:33f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265427

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:57:c4:ce:bd:e6:ce:7b:b2:f7:09:36:b5:e4:7a:88:13:
         6b:eb:ce:07:8c:6b:8e:76:2b:65:95:62:98:ea:27:fb:4e:22:
         c3:97:06:ac:71:4d:43:2b:1c:94:e2:1e:fb:9a:c5:8d:70:17:
         1d:d2:85:ff:7f:e1:cf:15:ba:21:39:d1:71:aa:7e:f8:d4:a3:
         ef:43:af:a5:78:40:2e:e3:b7:8e:1a:42:48:27:22:09:dc:dd:
         9b:9e:40:47:ac:dd:42:28:8c:90:b0:4e:40:4a:fd:5a:e5:b3:
         33:3b:38:4e:81:a0:66:43:91:a6:e6:36:28:16:47:7d:fe:de:
         fd:ed:6d:29:4a:5a:39:32:f5:c3:19:0c:ae:65:e8:ce:c3:8f:
         92:75:08:39:fd:8d:3e:c4:62:0e:f6:9d:20:62:e1:08:9b:b8:
         dc:71:69:eb:aa:49:d3:2c:3d:2e:0e:78:2e:04:0a:17:27:fb:
         55:bf:7f:61:ba:f5:e0:12:a2:07:14:c6:89:e5:bf:b5:46:2d:
         3f:64:34:b0:33:2f:30:c1:63:41:55:21:be:ba:13:2e:59:2d:
         8e:1b:33:49:ed:4f:ec:30:b1:96:37:ba:9e:a5:81:2e:0c:14:
         d5:0c:1f:24:b7:2a:a9:5c:2a:25:59:a4:c2:3b:b3:14:8e:a7:
         f9:1f:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org