Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.cer
File:                     EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.cer (raw, json)
Hash identifier:          vOWi8I4ngEKRrt9P1SIQvhqaqQT5KthhSN66RL4NAf0=
Subject key identifier:   EA:7A:73:A4:D9:B6:A4:65:0A:7D:23:00:D2:FF:1B:94:30:39:A8:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CF55F5903E1694CC2A630556CDBCE728C441043
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Sep 2024 00:14:07 +0000
Certificate not after:    Sat 27 Sep 2025 00:19:07 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:5f:59:03:e1:69:4c:c2:a6:30:55:6c:db:ce:72:8c:44:10:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 28 00:14:07 2024 GMT
            Not After : Sep 27 00:19:07 2025 GMT
        Subject: CN=EA7A73A4D9B6A4650A7D2300D2FF1B943039A802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:51:d3:ce:03:8b:1e:78:4e:40:0d:0e:f4:
                    65:e3:44:10:2f:00:a9:5c:6a:5e:a4:23:cf:de:59:
                    4e:9b:ed:7b:ea:67:63:f6:4a:f8:1e:60:ba:cb:db:
                    62:6d:f7:0d:90:4c:0d:97:19:52:a3:93:b7:1b:f6:
                    c9:36:f7:00:43:52:63:44:71:39:23:f2:ef:9f:78:
                    24:dd:31:db:51:fe:9b:9f:37:74:85:c2:1a:d3:38:
                    95:61:fa:05:b7:a3:30:f1:99:81:0d:70:c9:e0:3c:
                    91:a7:fd:1a:24:13:06:84:91:e6:23:57:05:8c:e6:
                    14:e4:f5:b8:9a:74:c8:5c:10:a4:80:93:cc:9a:2b:
                    7e:39:2a:2b:07:48:bb:2e:d1:29:0e:f7:47:4e:44:
                    9b:7d:93:57:e6:ef:26:c5:e9:e3:0b:1a:09:09:07:
                    0d:77:e3:e1:66:f2:c9:a5:84:04:68:b7:70:bb:c1:
                    8e:89:f5:e8:93:43:6a:a1:3f:af:ce:5f:82:b6:7e:
                    bc:05:d0:81:b2:28:d0:2f:aa:fa:0c:81:94:0b:73:
                    e1:8b:40:35:64:39:d9:27:28:3b:97:4c:0d:55:b7:
                    c7:6d:31:87:7c:80:8f:96:66:3a:fe:15:4c:9b:ab:
                    62:b0:5c:c6:fb:dc:1b:e2:4a:74:4c:bf:ab:c7:50:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:7A:73:A4:D9:B6:A4:65:0A:7D:23:00:D2:FF:1B:94:30:39:A8:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         97:a3:ce:fc:68:55:9b:47:7e:25:6c:26:a3:67:eb:f2:f8:10:
         03:80:6a:89:a7:c1:ef:76:a9:94:08:fd:07:30:5f:2f:98:0d:
         c9:94:f1:b1:57:75:89:ab:52:7d:aa:6c:02:cd:2e:92:61:6c:
         3f:99:15:62:13:a0:b6:11:0a:57:c8:62:d7:c9:8a:4a:0f:6c:
         a0:55:fe:40:ec:3a:ae:8e:16:ff:d3:d0:b9:4b:84:2b:1b:d5:
         fa:31:f3:12:21:47:1a:cb:3c:94:aa:e8:38:aa:6f:91:94:dc:
         41:51:16:e8:4a:23:c8:ff:4b:68:ce:17:f1:05:7b:99:e7:77:
         ba:ab:e8:98:96:83:88:ed:07:79:8b:10:6d:2d:61:31:7b:4d:
         16:8c:65:7f:05:6d:0d:05:34:b6:4a:2f:b8:28:46:8d:c5:6a:
         53:3a:eb:39:19:f7:b2:22:36:d8:f8:f8:c5:8a:5a:53:b0:05:
         29:67:96:87:7f:22:99:4d:07:dc:11:f3:b5:5c:9a:b3:63:2c:
         c1:a8:20:62:25:66:21:34:b2:2d:f5:a5:d5:28:11:70:a0:57:
         d6:69:29:fe:06:67:b1:b4:40:47:32:71:c2:c7:a0:33:eb:bd:
         8f:6b:e3:1e:5f:f2:70:9f:1e:65:69:0b:67:61:42:b2:8d:f5:
         13:66:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:58:40 2024 by rpki-client on console-ams.rpki-client.org