Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA8322F6CF02BAA7B2F4C3720792E502E938CEC9.cer
File:                     EA8322F6CF02BAA7B2F4C3720792E502E938CEC9.cer (raw, json)
Hash identifier:          rlXZqkMk8UgJPCoP9rvMZnosnKa1dHQDffXlNeRzMUQ=
Subject key identifier:   EA:83:22:F6:CF:02:BA:A7:B2:F4:C3:72:07:92:E5:02:E9:38:CE:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       594782031125F71DEAA02903C39212F46D9E271A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/EA8322F6CF02BAA7B2F4C3720792E502E938CEC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 May 2024 14:27:03 +0000
Certificate not after:    Wed 21 May 2025 14:32:03 +0000
Subordinate resources:    AS: 268692
                          IP: 45.165.208.0/22
                          IP: 2804:5524::/32

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 09:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:47:82:03:11:25:f7:1d:ea:a0:29:03:c3:92:12:f4:6d:9e:27:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 14:27:03 2024 GMT
            Not After : May 21 14:32:03 2025 GMT
        Subject: CN=EA8322F6CF02BAA7B2F4C3720792E502E938CEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:b7:a3:2a:91:0e:b9:a9:d9:d3:23:e9:bc:
                    03:9e:81:b6:96:b0:72:7b:81:39:fb:b1:ff:50:1f:
                    ca:ef:0b:f9:0f:8a:f2:8a:0e:81:0b:07:3c:cf:54:
                    74:c0:d0:f7:f1:0b:1c:98:da:dd:4a:a5:54:50:4c:
                    21:b6:3c:01:e4:1d:44:6f:a3:db:80:eb:2a:fe:a4:
                    5d:e3:a4:e4:9f:d6:25:54:98:b7:45:76:d1:94:63:
                    96:35:6a:27:34:8b:9c:ab:c8:92:4c:a8:3c:93:94:
                    0a:e9:fa:0d:63:7d:ef:37:30:83:7c:53:f1:fd:4c:
                    a7:e9:eb:05:01:24:6c:04:74:bd:1b:71:70:27:cb:
                    e8:42:6a:98:bc:2c:7a:53:4e:4c:65:70:31:70:0f:
                    9c:a2:21:34:f7:0f:d0:72:8a:55:83:6f:69:e7:48:
                    de:6f:4c:80:99:07:75:80:f0:99:7b:8b:7f:fa:89:
                    c7:4a:8a:09:ab:cd:7b:7e:54:b2:7a:61:69:91:eb:
                    67:d0:b1:ce:06:16:e3:eb:10:6d:66:ea:79:3e:97:
                    b5:82:4e:97:f0:78:85:59:ae:1d:dc:cc:99:02:89:
                    fd:47:94:ad:ec:d0:f4:97:da:99:06:5f:88:d1:40:
                    9f:74:99:0e:30:a6:71:c4:0e:25:0c:3f:5a:16:0f:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:83:22:F6:CF:02:BA:A7:B2:F4:C3:72:07:92:E5:02:E9:38:CE:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/EA8322F6CF02BAA7B2F4C3720792E502E938CEC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.208.0/22
                IPv6:
                  2804:5524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268692

    Signature Algorithm: sha256WithRSAEncryption
         56:70:29:45:2c:f6:b1:92:06:0e:8c:40:2e:02:0c:9f:b6:b1:
         4c:a4:22:9b:bb:a5:bd:e5:4b:ad:8f:b7:36:a5:59:b3:f8:44:
         a0:56:a4:51:a5:aa:9e:2f:b7:b6:91:ad:bf:fb:ad:57:23:e5:
         5f:eb:f7:53:7a:b1:6e:c5:1e:c3:94:4c:dd:b2:a8:8c:47:84:
         29:3b:f7:31:70:a4:b2:4e:4c:b2:2c:91:ab:83:7f:15:d0:17:
         dd:00:07:4c:01:76:b5:49:fc:e2:e5:9e:32:71:f8:77:c6:4c:
         50:d0:06:50:a0:90:27:cf:d2:40:a7:f2:16:fe:30:73:a6:d7:
         81:6e:b0:49:f2:7e:b8:4a:68:7c:da:ef:21:9c:22:c1:47:fd:
         41:29:dd:5b:91:51:07:19:66:c4:f7:bb:69:2d:12:bf:6a:95:
         d5:92:d7:e3:82:01:e5:3d:ae:51:2f:5e:15:5a:f6:e7:1c:14:
         ef:29:af:2c:46:95:e7:cf:d9:41:6d:eb:e6:7f:dc:fe:b7:00:
         1c:20:b8:d3:f5:95:3b:3c:89:75:c4:dd:41:8c:c9:f1:45:9b:
         3a:84:95:8d:22:bb:04:4a:92:2d:76:02:a0:58:83:18:f1:a1:
         25:66:3c:4c:6d:59:6f:ae:6c:02:95:50:55:af:7a:a6:c4:70:
         05:89:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:56:00 2024 by rpki-client on console-ams.rpki-client.org