Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9127881693A08A5A9B4E52FE5C0798735DBB2A0.cer
File:                     E9127881693A08A5A9B4E52FE5C0798735DBB2A0.cer (raw, json)
Hash identifier:          AuZj5+uwLYIMgDloCAyKdY70Vb9wo1QF15UCoTxQ2f0=
Subject key identifier:   E9:12:78:81:69:3A:08:A5:A9:B4:E5:2F:E5:C0:79:87:35:DB:B2:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25F5DE98809AE2CF5C4F747FED7673AB5719D941
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/1/E9127881693A08A5A9B4E52FE5C0798735DBB2A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:17 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:17 +0000
Subordinate resources:    AS: 265314
                          IP: 168.90.52.0/22
                          IP: 2804:2df4::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:de:98:80:9a:e2:cf:5c:4f:74:7f:ed:76:73:ab:57:19:d9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:17 2024 GMT
            Not After : Apr  2 19:03:17 2025 GMT
        Subject: CN=E9127881693A08A5A9B4E52FE5C0798735DBB2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:97:6c:3b:f0:52:e4:bc:3b:0e:28:5e:42:
                    0b:0c:54:b0:63:b2:a0:46:55:49:20:fe:6b:de:25:
                    fc:8c:03:cf:31:df:de:86:76:75:31:8f:ec:23:65:
                    34:e1:eb:7f:ce:6b:de:0a:8a:81:96:7e:a3:b9:47:
                    61:51:66:37:06:fa:8c:d6:0a:7f:6d:4d:3a:1d:a6:
                    7b:42:e7:97:39:a2:01:eb:70:93:a0:7d:48:5d:ea:
                    e0:79:44:fe:b7:be:10:21:7c:4a:76:74:a8:1c:b9:
                    5e:4c:5a:92:be:44:3a:63:8b:8d:fa:7f:de:57:8c:
                    b0:66:40:5b:1f:f1:7e:13:82:ff:c5:60:f4:9e:8c:
                    36:2a:50:c5:8c:d9:89:45:42:fc:68:be:32:1b:07:
                    a9:e2:19:2f:a3:d6:85:6b:97:c1:b2:46:7e:17:6f:
                    33:ac:fe:5b:20:e1:40:eb:1c:5b:5a:94:52:0c:9e:
                    c4:50:72:54:81:93:c0:77:ec:c1:07:d1:a3:28:ad:
                    1a:be:76:ef:ae:b9:ef:60:aa:1d:07:53:c9:ae:bd:
                    0a:e1:67:93:59:73:a9:f6:69:ec:c9:1a:e2:20:8b:
                    50:bd:d5:26:3e:ff:fe:3d:db:7d:e2:04:ed:3f:c1:
                    2b:54:03:70:ac:8e:d8:d7:18:71:a9:a9:0c:1f:7b:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:12:78:81:69:3A:08:A5:A9:B4:E5:2F:E5:C0:79:87:35:DB:B2:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/1/E9127881693A08A5A9B4E52FE5C0798735DBB2A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.52.0/22
                IPv6:
                  2804:2df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265314

    Signature Algorithm: sha256WithRSAEncryption
         55:21:2b:aa:01:92:44:10:c0:14:a5:5f:f2:20:69:a4:0b:4d:
         81:bf:c7:20:cb:fe:0a:a1:95:eb:25:0e:41:f3:dd:1b:2e:c4:
         be:17:4d:f0:ad:c2:54:ad:a9:08:a1:70:76:35:e2:08:1f:d3:
         19:bd:d0:30:4d:17:62:9f:83:c0:34:ef:8c:a7:f8:66:3f:e3:
         ca:d8:5a:45:38:1e:31:50:5f:ac:70:d2:b2:aa:88:2b:ed:ce:
         29:ae:62:31:f1:bc:a1:ee:6f:0f:4e:b2:c4:5f:22:63:64:d7:
         e5:dc:23:0f:a7:2f:e4:e6:3a:d4:51:9b:52:7b:8b:e6:e7:34:
         77:38:27:33:9c:8b:14:b2:63:40:02:37:17:d5:6d:b0:89:2b:
         21:e4:7c:d5:53:28:21:0a:86:d5:7d:c8:48:ba:ee:66:2c:b9:
         eb:32:94:44:eb:fc:74:4c:d6:e1:fa:0e:de:6e:44:46:d7:ae:
         08:f9:01:0b:63:96:e4:ac:64:09:45:78:df:b6:03:b6:01:c8:
         90:e1:c8:12:63:c6:c8:27:bb:09:5a:90:d8:39:ab:c1:9c:05:
         48:56:89:2c:6d:b6:b0:d2:b5:b6:eb:36:5c:7c:3c:74:cf:3c:
         31:5f:15:13:31:5f:32:26:6a:08:ad:1d:75:5a:f0:de:8e:a8:
         90:49:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org