Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA25390ACA724F675CAB1BDF7451E43D924ABE03.cer
File:                     EA25390ACA724F675CAB1BDF7451E43D924ABE03.cer (raw, json)
Hash identifier:          iFWbjA0CzyiTn5PlOZyZqyVcr/kFHLVyr754I7dtgDM=
Subject key identifier:   EA:25:39:0A:CA:72:4F:67:5C:AB:1B:DF:74:51:E4:3D:92:4A:BE:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3665FD31A4B349E0073AD5AC5E690074F2D435DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/EA25390ACA724F675CAB1BDF7451E43D924ABE03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Sep 2024 13:04:10 +0000
Certificate not after:    Mon 22 Sep 2025 13:09:10 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32

Validation:               Failed, certificate revoked on Sat 05 Oct 2024 22:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:65:fd:31:a4:b3:49:e0:07:3a:d5:ac:5e:69:00:74:f2:d4:35:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 23 13:04:10 2024 GMT
            Not After : Sep 22 13:09:10 2025 GMT
        Subject: CN=EA25390ACA724F675CAB1BDF7451E43D924ABE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:55:a1:1d:6d:38:4c:b4:2a:2b:81:ac:fd:
                    1e:b4:60:09:05:37:f1:50:d9:9f:b7:e2:02:74:7e:
                    17:8b:1a:4e:7b:e1:34:79:26:d9:74:5c:05:09:84:
                    81:97:10:d1:77:fe:51:01:fa:7f:8d:1a:60:d2:94:
                    56:77:1a:d7:df:e1:d2:ed:6a:ed:dc:95:d4:6e:de:
                    c8:ec:8f:17:45:6e:9e:3c:a4:ff:eb:e4:c0:ef:47:
                    32:b0:2e:ed:07:af:ed:76:30:7f:71:8a:90:8a:05:
                    af:fd:f8:7c:53:d3:12:8b:60:fa:d8:da:77:86:df:
                    59:f1:bc:99:1d:1b:39:58:6e:29:5e:73:b6:f9:87:
                    6e:1b:6e:6e:8b:b0:1e:a9:ab:5e:6e:e8:e0:dd:98:
                    f8:62:9c:c3:52:0a:62:cb:13:6e:f8:be:00:a6:31:
                    1d:15:9d:00:11:50:07:c3:32:cc:b8:97:cc:33:c6:
                    9a:10:26:33:f2:eb:b0:1e:84:fc:80:d2:8a:3f:45:
                    1b:2c:41:65:3f:ed:08:2f:b5:42:b8:b9:5c:b4:26:
                    95:40:09:a3:72:eb:cb:f8:eb:08:94:a7:6c:e3:6a:
                    62:4c:72:58:bf:e4:6b:39:7c:8b:0f:22:79:ed:fe:
                    8f:8c:ac:77:49:c2:14:93:32:96:0c:fb:f6:84:c3:
                    91:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:25:39:0A:CA:72:4F:67:5C:AB:1B:DF:74:51:E4:3D:92:4A:BE:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/EA25390ACA724F675CAB1BDF7451E43D924ABE03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         db:18:00:f9:b1:6f:7d:22:71:ab:2f:14:ac:aa:6b:80:94:1e:
         15:4e:dc:cc:f1:fb:19:da:a1:86:c7:65:e3:ee:f8:65:6c:e3:
         b2:ac:11:fe:2b:ac:fb:04:f9:a9:d0:ac:1d:23:89:31:60:6c:
         c0:06:2f:5a:5f:0e:74:69:14:c8:a1:36:c3:68:66:78:98:2c:
         0e:d9:53:6e:c5:98:26:93:b3:0a:72:d2:53:b7:d0:73:76:87:
         7e:2c:12:b8:e4:74:dc:75:11:4a:d0:6b:ab:ac:eb:03:37:92:
         a4:a9:61:d0:b9:28:04:c0:eb:49:c1:0c:f8:f1:b2:47:40:d3:
         73:2c:56:ba:2d:4d:f1:71:f1:25:c5:17:21:41:53:a4:0c:0e:
         5f:4f:85:f0:75:34:8b:a4:ed:de:05:ef:28:50:41:7b:28:3e:
         2e:f8:3f:d4:c9:0c:c7:65:87:bd:11:3d:8a:ea:88:1e:14:55:
         63:6e:13:c9:19:55:bb:f5:35:af:73:21:41:7b:29:26:86:88:
         6e:e3:b1:2b:60:61:75:d4:8b:ab:27:88:cc:67:97:9b:73:78:
         25:d1:cf:80:bf:4e:db:67:3f:75:4b:75:46:e1:80:17:69:a7:
         04:c9:28:ed:a8:ad:19:57:8a:66:b5:3d:d5:bd:45:35:63:56:
         02:8a:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 03:35:37 2024 by rpki-client on console-ams.rpki-client.org