Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB5B4AAD46B776E2A4AF09300A21EA835D57DFF7.cer
File:                     EB5B4AAD46B776E2A4AF09300A21EA835D57DFF7.cer (raw, json)
Hash identifier:          ezQ1ouRwWiLysqDT5IcXMh0NN5NkVr4x3uSlgalEK1Q=
Subject key identifier:   EB:5B:4A:AD:46:B7:76:E2:A4:AF:09:30:0A:21:EA:83:5D:57:DF:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F072AB7EB7D3EF2C445273367259ED23B00DE87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/EB5B4AAD46B776E2A4AF09300A21EA835D57DFF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2024 19:40:24 +0000
Certificate not after:    Tue 16 Sep 2025 19:45:24 +0000
Subordinate resources:    AS: 266126
                          IP: 45.6.72.0/22
                          IP: 2804:3b0c::/32

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 09:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:07:2a:b7:eb:7d:3e:f2:c4:45:27:33:67:25:9e:d2:3b:00:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 19:40:24 2024 GMT
            Not After : Sep 16 19:45:24 2025 GMT
        Subject: CN=EB5B4AAD46B776E2A4AF09300A21EA835D57DFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:ec:22:4c:3a:b1:67:8f:b8:d5:b0:53:30:
                    bf:81:d7:b0:ec:12:62:22:e3:fa:0b:dc:cd:b4:12:
                    04:5f:fc:dd:94:2c:a9:f7:61:16:12:31:63:de:75:
                    1d:d7:b8:71:0e:ba:7c:b3:d6:ee:22:9f:9e:c9:e5:
                    c4:85:7c:13:d2:e9:b6:8f:79:1b:cf:8f:6c:30:4a:
                    a9:46:06:cd:f3:15:56:14:8b:c0:1d:08:62:3e:91:
                    0d:7f:70:08:02:1c:c4:4b:dc:e6:b0:3b:3b:00:af:
                    9a:c2:bf:86:8b:a0:47:5a:ff:fb:5e:e3:89:1d:4c:
                    d9:db:97:f5:2b:18:9f:3a:18:15:91:83:68:67:66:
                    bf:8b:1b:7d:4e:ff:aa:82:c6:f3:32:b3:88:b1:18:
                    41:d0:09:b8:24:b3:b4:5e:70:cb:30:39:70:9e:c9:
                    26:5f:c4:77:8f:41:b4:19:c5:c0:bf:5c:c6:86:04:
                    e8:17:b9:0a:00:3b:93:3b:83:9f:b2:98:78:ff:ad:
                    ac:75:14:c2:26:cf:17:55:8d:12:40:b6:c1:cd:00:
                    cc:6a:b0:92:19:7c:7f:54:96:e0:30:0f:60:af:ec:
                    2c:e8:e0:0c:6d:09:ff:3c:63:3d:91:48:d1:55:49:
                    59:39:b6:8c:57:85:d6:7b:16:f9:b5:6b:40:83:48:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:5B:4A:AD:46:B7:76:E2:A4:AF:09:30:0A:21:EA:83:5D:57:DF:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/EB5B4AAD46B776E2A4AF09300A21EA835D57DFF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.72.0/22
                IPv6:
                  2804:3b0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266126

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:5c:14:a1:7f:f2:bc:fb:32:52:a4:eb:cf:0b:75:5e:78:
         be:06:6f:00:9b:e0:28:86:04:41:0d:cc:9c:71:3a:7a:fa:c0:
         46:a5:df:6a:a2:15:dc:8c:d4:ab:2a:bf:5e:03:ed:56:2e:ef:
         e7:1d:3d:56:f3:a3:44:ae:01:b0:e1:be:b2:3b:b7:98:94:a9:
         dd:f6:e2:71:21:c8:e5:d8:3d:ec:27:f0:fa:d9:a9:56:0e:48:
         ad:71:5c:7e:22:88:91:b7:49:55:47:21:d4:69:57:4f:90:2c:
         98:fc:35:19:d4:a9:39:25:81:32:54:cf:03:58:5b:60:f2:b6:
         01:b1:95:23:b9:1e:2f:8f:43:05:93:66:7a:4c:69:13:6a:0f:
         70:c5:e9:b1:fb:63:f9:8f:ee:fb:75:6b:50:2c:f7:4d:00:bb:
         fb:b0:b8:19:2c:d3:bc:6d:5a:0c:49:4d:1d:7e:2c:fe:bf:e2:
         dc:03:13:4a:b8:6c:4a:6f:bd:1a:1b:5f:1c:ab:3f:be:5b:7a:
         cc:d2:eb:2a:16:67:f8:bb:43:dc:b1:c5:9e:b9:91:ff:a9:27:
         92:48:01:54:37:4f:1a:b7:f0:f6:f0:fb:43:d3:34:9f:c3:d8:
         04:dd:8b:da:47:57:3b:a6:1b:cc:e7:05:3f:58:2d:27:dc:d3:
         84:b1:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:47 2024 by rpki-client on console-ams.rpki-client.org