Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB5BCABD07EDB610C423873FB91711A872DE657E.cer
File:                     EB5BCABD07EDB610C423873FB91711A872DE657E.cer (raw, json)
Hash identifier:          PsIx3jjT/4gCur5/iYyggYgDWHUcGowIxSfG2TRzjlg=
Subject key identifier:   EB:5B:CA:BD:07:ED:B6:10:C4:23:87:3F:B9:17:11:A8:72:DE:65:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AA0697EF8D9DFA1E2FE12A1DEDD49CC556A7434
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/EB5BCABD07EDB610C423873FB91711A872DE657E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Feb 2025 11:56:09 +0000
Certificate not after:    Mon 16 Feb 2026 12:01:09 +0000
Subordinate resources:    AS: 265906
                          IP: 128.201.240.0/22
                          IP: 2804:3fac::/32
Validation:               Failed, certificate revoked on Mon 31 Mar 2025 05:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a0:69:7e:f8:d9:df:a1:e2:fe:12:a1:de:dd:49:cc:55:6a:74:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 17 11:56:09 2025 GMT
            Not After : Feb 16 12:01:09 2026 GMT
        Subject: CN=EB5BCABD07EDB610C423873FB91711A872DE657E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:62:ea:65:4c:4e:72:57:f5:a4:6c:5e:c2:
                    ae:b5:d3:f5:8a:ba:3b:50:48:9f:80:d1:2c:42:0e:
                    94:e2:ab:ec:5f:34:74:50:42:24:c2:db:29:d4:b0:
                    38:53:61:70:c6:c4:0a:db:37:62:5b:a2:61:23:01:
                    6c:9d:16:6e:89:e9:0a:54:7d:bf:8c:08:b2:a0:9c:
                    b1:3d:0f:26:2d:bf:91:f8:6a:8b:73:f0:51:65:c2:
                    fb:7f:5e:a8:2d:1d:e1:08:0e:a4:31:81:10:58:69:
                    e3:6c:71:5b:f3:14:32:48:4f:4d:d9:65:7e:c4:33:
                    16:5d:c9:02:cf:ff:97:6d:0f:c4:1c:39:99:f3:c4:
                    ca:cf:0d:40:f7:52:b0:22:c9:32:6e:0f:54:26:5a:
                    55:88:0c:0c:f3:25:fd:70:0b:6d:6f:fb:95:00:31:
                    c7:ae:78:f2:33:85:c5:be:dc:ea:99:4b:a1:fe:0d:
                    17:97:fe:7f:85:e2:4b:0d:b6:78:14:49:5b:90:00:
                    68:38:f5:55:2e:57:73:e3:be:04:3a:85:d6:69:cf:
                    2b:74:ec:b4:61:e7:49:33:32:07:3d:17:31:86:4b:
                    59:ca:1a:e9:52:f9:4f:14:44:1d:20:4d:e1:3a:87:
                    31:e5:b5:68:0c:e0:f0:6d:47:32:de:f2:a4:1f:97:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:5B:CA:BD:07:ED:B6:10:C4:23:87:3F:B9:17:11:A8:72:DE:65:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/EB5BCABD07EDB610C423873FB91711A872DE657E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.240.0/22
                IPv6:
                  2804:3fac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265906

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:f9:6b:fd:3d:2d:ea:ef:f4:80:64:26:73:6b:19:09:03:
         60:1d:60:71:81:98:56:6e:ee:91:ab:23:79:64:8c:37:b8:43:
         4b:e1:d4:5b:15:ce:f6:8a:02:e6:eb:df:75:0d:d3:7d:62:50:
         32:77:9b:6d:d6:1c:33:ff:e7:66:9c:fe:c4:4d:a6:c4:db:cc:
         a7:85:79:3c:9e:83:1e:e2:33:6c:a9:88:3a:bd:d8:2e:99:fd:
         d7:7c:ad:74:61:99:5d:d1:ad:86:b0:72:46:8f:22:63:bd:c0:
         e5:79:9a:ee:a2:81:04:13:82:c6:34:ee:76:a9:94:9b:75:fd:
         91:2e:b0:a6:99:25:5f:f1:57:2b:d3:3c:18:00:97:12:c4:49:
         6f:fb:86:83:37:ee:6f:7f:97:09:87:cf:1b:a8:91:49:0c:a6:
         29:f3:99:4b:20:13:05:4a:56:82:75:3a:3d:07:b4:ff:2c:ca:
         fd:0c:12:e4:56:61:98:bc:59:e5:ad:22:5d:60:f7:60:bd:dc:
         9c:87:8e:a3:c7:dc:f5:db:5e:76:42:5f:52:10:8a:ba:2c:0e:
         ec:f6:fb:15:c7:c8:e2:73:bc:b3:12:e0:bc:88:b4:d4:7d:a3:
         84:93:a4:92:3a:ec:bb:a0:1d:91:b9:02:08:ef:a3:73:e4:ec:
         f4:ba:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:16 2025 by rpki-client