Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
File:                     E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer (raw, json)
Hash identifier:          GhRhNtLKEZLCfjJh7AtGb61A87N4FTvvWhSQwV/Wr2o=
Subject key identifier:   E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37AC16E2B672CB2446C4A58486563FB18F333A33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:09:12 +0000
Certificate not after:    Thu 03 Apr 2025 07:14:12 +0000
Subordinate resources:    AS: 268248
                          IP: 45.236.220.0/22
                          IP: 2804:4e3c::/32

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 16:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ac:16:e2:b6:72:cb:24:46:c4:a5:84:86:56:3f:b1:8f:33:3a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:09:12 2024 GMT
            Not After : Apr  3 07:14:12 2025 GMT
        Subject: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:38:26:53:9f:65:17:fe:07:c0:84:98:28:
                    90:45:41:16:7f:2d:60:78:a6:8b:e0:77:40:b6:f4:
                    6a:9c:4f:7a:be:97:b3:46:2e:d8:cf:c1:c8:4c:6d:
                    23:4d:40:79:2a:dd:da:e3:a8:8d:df:07:3e:27:11:
                    02:b5:0e:99:4d:5a:52:c3:36:85:71:ac:6f:f9:27:
                    84:f0:f1:94:ab:09:20:eb:30:96:01:e2:85:e6:33:
                    12:60:ed:9c:17:a4:47:34:2e:83:4a:74:ff:a8:98:
                    46:07:fe:fe:84:01:96:83:70:83:92:45:6f:20:73:
                    7a:00:71:b1:74:42:d6:4c:d3:ae:e3:60:3f:f8:b6:
                    58:84:7f:82:8e:10:8d:f8:d6:b3:53:5f:9c:92:90:
                    e8:bf:ba:d9:69:b2:b4:00:7a:05:61:a4:5c:f7:43:
                    e9:a3:86:1b:ef:49:33:31:fb:e4:4e:59:6a:9e:e3:
                    af:83:8d:d6:d3:09:8b:be:7b:0f:5a:1d:55:2c:82:
                    ba:67:5f:63:a9:23:4f:95:57:a5:41:26:fb:b6:08:
                    17:d1:67:ff:a7:02:c8:29:77:c0:e1:81:fb:ff:10:
                    72:fa:44:e8:5a:18:78:f2:3a:d1:d3:07:86:5f:74:
                    9d:4f:85:8d:9b:4b:c7:c1:80:cd:e7:c3:b8:99:6c:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/22
                IPv6:
                  2804:4e3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268248

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:b8:90:39:7e:50:40:07:b5:2e:83:dd:69:dd:4c:19:c2:
         fd:e5:07:00:ef:55:f0:ec:88:d0:d5:80:38:cb:a2:85:7e:89:
         88:cb:a2:12:3d:41:7c:a3:ec:75:82:22:bb:59:63:fd:e7:d3:
         8d:0f:91:59:28:0b:07:1c:e8:aa:a7:49:63:39:75:59:2d:83:
         68:5d:c7:5d:25:0b:9a:d5:7c:f3:8a:f3:75:76:a6:42:65:b8:
         e0:16:e2:ef:7f:b1:3b:9d:1d:da:90:10:04:e9:c4:5a:d8:6b:
         54:70:37:32:76:2f:23:e0:1d:c3:4f:e5:2c:8c:8e:c0:2a:3b:
         07:87:06:ad:02:34:f1:a1:79:aa:ed:64:2c:27:f2:34:33:02:
         3c:41:78:c1:fe:82:f9:54:04:d2:e7:da:93:e8:93:b4:69:ca:
         8d:91:3f:14:e6:bd:4d:e1:31:77:7e:f7:e3:e2:df:cb:ff:8b:
         71:9c:55:50:c9:7f:85:6b:91:f3:30:f0:2c:ae:87:a6:9c:01:
         81:81:fa:d3:3f:66:db:ce:d8:a7:ba:e6:29:bb:df:64:78:17:
         8b:d9:bc:f6:8a:8a:eb:29:97:8a:4c:e9:47:59:5c:be:74:6d:
         12:a8:6c:fd:51:11:e0:f2:f0:35:68:c6:9e:2d:47:9f:0a:d6:
         2d:58:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:39 2024 by rpki-client on console-fra.rpki-client.org