Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E68E37E7148EA9F2ACAAF02328DE764438A84B3A.cer
File:                     E68E37E7148EA9F2ACAAF02328DE764438A84B3A.cer (raw, json)
Hash identifier:          B8d2Mmh5E5QN9Rxl/M84uVt39/jF2Hvst9LlO2F4AEQ=
Subject key identifier:   E6:8E:37:E7:14:8E:A9:F2:AC:AA:F0:23:28:DE:76:44:38:A8:4B:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       142FBE46CD1A193C9CC18DB6D64C872DB6CC29AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/E68E37E7148EA9F2ACAAF02328DE764438A84B3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:36:09 +0000
Certificate not after:    Thu 03 Apr 2025 11:41:09 +0000
Subordinate resources:    AS: 273714
                          IP: 2804:8b24::/32

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 04:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2f:be:46:cd:1a:19:3c:9c:c1:8d:b6:d6:4c:87:2d:b6:cc:29:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:36:09 2024 GMT
            Not After : Apr  3 11:41:09 2025 GMT
        Subject: CN=E68E37E7148EA9F2ACAAF02328DE764438A84B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:b1:c3:d1:d6:13:6c:a1:6b:aa:86:9a:ef:
                    f9:7a:b1:17:b4:45:23:dc:5e:1a:61:a4:91:dd:bb:
                    aa:ab:99:ff:b8:48:73:74:f2:ef:a6:38:ab:b5:ce:
                    ae:ca:fa:d3:10:9c:cd:09:0d:cf:f5:4d:3e:d7:fa:
                    3d:6c:4c:c7:0f:b4:0e:29:88:df:cd:23:a8:e4:1e:
                    8a:f5:7a:9a:7b:13:e2:85:de:75:e1:cf:b1:da:c3:
                    ec:8f:68:c9:77:89:dc:ba:36:ac:aa:24:07:93:ef:
                    97:8a:ce:ce:e9:4b:fe:82:4c:12:e2:93:d5:a8:13:
                    80:db:45:75:43:65:0c:77:be:53:50:f4:5f:0b:da:
                    69:df:2d:05:d4:de:cf:2c:9a:58:5e:aa:3d:72:8b:
                    e0:e8:bf:f7:0a:10:0b:75:87:7f:80:0e:e2:56:d1:
                    f5:90:3c:e2:aa:14:f0:74:fb:33:92:bf:c1:4d:85:
                    cb:fb:7b:cc:8b:62:c2:a9:76:ff:30:4e:11:7a:3a:
                    0b:65:d3:e1:b2:60:83:89:2e:d2:da:68:21:7c:0a:
                    99:b4:0d:f0:f9:f8:77:c6:d6:34:fb:4d:95:97:8e:
                    bf:79:98:5f:a6:d8:b1:a0:85:8f:b3:e2:bb:ca:29:
                    95:d5:94:11:f9:b4:96:d2:cb:2e:e9:6e:b8:82:f8:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:8E:37:E7:14:8E:A9:F2:AC:AA:F0:23:28:DE:76:44:38:A8:4B:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/E68E37E7148EA9F2ACAAF02328DE764438A84B3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273714

    Signature Algorithm: sha256WithRSAEncryption
         16:35:d2:da:7f:dd:82:b3:37:3a:f6:69:e3:88:4f:38:08:59:
         cb:65:95:9f:54:7f:e6:51:e1:d7:b8:9f:28:13:65:c2:fb:6d:
         d3:6c:b5:9c:43:2e:c6:0b:05:81:ed:77:58:25:c7:3c:dc:37:
         26:49:81:78:5b:b5:57:a2:2b:eb:04:cc:e2:08:92:da:37:19:
         71:5d:b5:d4:33:71:c2:1f:1e:0d:71:9e:92:7a:67:3a:f2:5a:
         91:e1:ee:27:16:3b:6e:a1:88:f5:2b:83:97:91:27:5e:b1:51:
         89:eb:c9:7d:39:fe:fd:c7:82:e1:a4:8b:97:7b:47:e7:3b:1b:
         84:f4:3f:01:a7:f4:41:45:fa:b9:80:ec:3d:03:60:ce:d1:aa:
         3a:dc:28:cd:f8:d9:8e:9d:cf:5a:8b:5c:19:05:1d:44:5d:32:
         fa:6c:d4:78:39:09:b5:99:db:32:25:5c:5f:a3:75:6a:84:29:
         99:ad:48:99:83:42:da:a0:5c:a5:d0:73:d4:73:94:f4:52:b6:
         88:14:95:54:d0:fa:82:5d:0d:9e:ea:de:8e:b0:f0:e7:4f:7e:
         88:40:ce:1e:71:27:a1:ed:fd:2a:5c:cc:9d:d9:0e:18:2d:9f:
         22:08:4c:9a:dd:f2:34:9a:f2:cd:cf:d1:6e:e7:6b:04:3b:88:
         a8:0d:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 06:43:33 2024 by rpki-client on console-fra.rpki-client.org