Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
File:                     EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer (raw, json)
Hash identifier:          Ch2/yyDktWiBRSAfNnCxNOAlqt28HsanX9l963W8ViM=
Subject key identifier:   EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AA49E86DDD61CF1F914187CAB36540E622238A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 18:15:38 +0000
Certificate not after:    Wed 07 May 2025 18:20:38 +0000
Subordinate resources:    AS: 52932
                          IP: 177.185.112.0/21
                          IP: 2804:28b0::/32

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a4:9e:86:dd:d6:1c:f1:f9:14:18:7c:ab:36:54:0e:62:22:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 18:15:38 2024 GMT
            Not After : May  7 18:20:38 2025 GMT
        Subject: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:a7:df:01:52:e0:d6:e3:aa:ad:4a:d0:42:
                    75:05:39:bc:83:0e:4a:ea:6e:e2:0e:82:05:7c:19:
                    c1:83:08:58:2b:89:76:7a:0e:7c:b5:5d:56:c5:c4:
                    f7:60:d7:4e:6b:ba:36:74:9b:9a:37:af:7e:40:83:
                    1b:49:81:96:59:90:30:c9:a0:9e:da:8a:cf:ee:a3:
                    ef:00:96:20:85:c8:18:34:19:29:ed:9a:fa:b5:d7:
                    9f:b8:19:df:50:2e:8c:60:8c:bb:70:e1:0e:22:7c:
                    6e:b2:a7:cf:37:c5:16:f6:1f:b6:9a:2d:e4:37:83:
                    50:46:2b:23:e8:90:2a:ff:eb:5e:28:61:41:ea:91:
                    8f:77:08:45:ed:bc:87:3a:60:9f:81:95:55:61:91:
                    77:6f:94:84:15:50:5b:bc:99:1b:a3:ad:ea:49:98:
                    50:9b:73:f0:9f:21:be:be:58:eb:fc:fe:65:23:f3:
                    ff:35:cc:21:ae:27:36:ea:c0:1f:35:63:67:91:61:
                    02:12:ca:2e:de:58:2b:b8:d8:1b:ca:94:26:16:8e:
                    81:be:43:99:6f:73:c2:de:80:25:01:21:7a:78:77:
                    bb:7e:60:d6:01:f4:a9:37:42:6f:b9:52:c5:91:5a:
                    0a:b7:cb:1e:ca:41:5f:8d:b9:88:0c:83:ed:dd:26:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21
                IPv6:
                  2804:28b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52932

    Signature Algorithm: sha256WithRSAEncryption
         8b:69:f0:92:c7:74:c3:4e:b7:bb:1a:b9:99:38:d3:b1:6d:25:
         f5:6d:7a:34:a5:61:5a:5f:30:d7:31:c0:c5:38:44:8b:04:3f:
         8a:1e:2d:5b:83:e7:77:9b:7c:99:5b:9d:73:5a:e9:3e:da:55:
         1e:16:d8:42:c3:c7:d9:39:2a:cb:7e:85:4d:b1:25:df:07:7d:
         1e:9c:05:7e:8e:6f:48:a9:bd:da:88:26:dd:58:f5:37:d7:0b:
         41:68:46:be:23:e8:49:c5:27:b0:ee:23:72:d5:36:20:70:1a:
         00:2b:43:2c:77:ca:5f:fc:07:b7:bc:1c:ab:fd:4c:20:58:50:
         4f:87:dd:84:c5:05:93:36:8d:43:84:54:d4:f8:41:09:c0:c4:
         8b:9d:e4:ed:de:f8:28:3f:d1:f9:2e:12:56:92:00:5b:a0:8d:
         cd:b1:4a:6f:5d:2d:71:a6:50:64:a6:cc:e1:a5:70:69:53:3f:
         27:55:79:17:7c:a8:23:b7:5c:37:09:b2:7b:32:0a:46:14:0b:
         1f:99:53:21:a3:d1:4c:d4:38:34:21:99:88:23:a3:cd:7e:98:
         9b:0d:be:ac:2a:82:c3:4d:6b:d2:b8:9b:56:aa:9c:e9:d8:fd:
         97:9a:65:61:96:6d:3c:ff:07:20:0d:aa:4f:62:3e:1c:8b:57:
         94:bd:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:41 2024 by rpki-client on console-ams.rpki-client.org