Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer
File:                     EBB6E559FC85ED8E862D6358A687201B26E68182.cer (raw, json)
Hash identifier:          /vJ7dmEGkuo+q1Pw2YjAG5qGzJ3sNEE43b94J2v4qqU=
Subject key identifier:   EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53151AAE2F2E86D1FDA25004687F07A18AB2364D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/EBB6E559FC85ED8E862D6358A687201B26E68182.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:03:37 +0000
Certificate not after:    Thu 03 Apr 2025 09:08:37 +0000
Subordinate resources:    AS: 264485
                          IP: 131.255.144.0/22
                          IP: 189.91.144.0/20
                          IP: 2804:2050::/32

Validation:               Failed, certificate revoked on Fri 03 May 2024 05:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:15:1a:ae:2f:2e:86:d1:fd:a2:50:04:68:7f:07:a1:8a:b2:36:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:03:37 2024 GMT
            Not After : Apr  3 09:08:37 2025 GMT
        Subject: CN=EBB6E559FC85ED8E862D6358A687201B26E68182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:8c:ea:9a:03:4d:92:f2:5d:e8:c0:d4:e7:
                    b1:2a:07:71:7c:b3:c8:cb:a7:f3:c5:b0:b3:37:e2:
                    d0:2a:ea:c1:5e:8e:c4:52:7e:59:ec:1c:db:c9:cd:
                    66:37:49:cd:05:14:8e:e6:47:64:d0:3c:a2:05:01:
                    f9:c1:78:6e:64:05:d5:e9:7b:2f:f6:0d:2e:33:42:
                    01:a4:e4:31:24:3a:d7:5d:a8:08:98:3d:07:4e:f0:
                    ef:b2:91:1d:4d:94:65:8d:a0:66:03:da:78:76:8f:
                    01:04:9f:dc:85:11:52:1c:29:2d:67:fa:ff:c1:6b:
                    a9:be:7f:6a:0d:00:88:9b:cc:9a:42:ad:84:01:24:
                    92:7c:96:ca:2b:da:3b:52:d9:69:9c:6b:be:84:c9:
                    ef:bd:0c:4f:7f:dd:2d:79:33:79:6b:9d:4e:93:74:
                    52:17:b8:f5:19:9d:11:b1:15:c8:6d:e9:ef:a9:f3:
                    26:25:62:b2:66:6c:ca:ca:84:cd:f8:0e:64:c0:44:
                    f1:32:cb:11:38:0e:e1:c8:b6:c4:ae:f1:96:96:3f:
                    b1:c4:47:54:98:0d:05:42:1c:1c:cb:d6:b9:61:b2:
                    c4:c6:68:60:a5:90:6d:94:ad:6f:49:a8:e7:4e:e4:
                    72:81:e0:90:df:a8:d6:61:62:31:05:b5:c4:aa:d2:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/EBB6E559FC85ED8E862D6358A687201B26E68182.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.144.0/22
                  189.91.144.0/20
                IPv6:
                  2804:2050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264485

    Signature Algorithm: sha256WithRSAEncryption
         d6:09:54:b3:06:aa:73:ae:47:7b:fe:bf:cb:0e:5a:67:b2:a1:
         37:5a:99:a7:a9:eb:81:20:d1:46:2d:19:2c:25:c2:ac:75:64:
         fa:71:e7:9b:09:d6:f4:09:90:fd:48:c2:85:4b:86:e7:da:e0:
         a9:3e:1e:ee:09:08:fb:ed:e0:47:9c:77:00:13:93:a4:81:25:
         56:52:82:7e:ed:a9:ef:c8:54:b2:f1:c8:84:03:b9:3a:27:74:
         c1:7b:7c:cf:1f:e1:11:9c:20:42:60:3b:dd:b6:16:75:a2:7d:
         29:32:2c:9a:84:de:c3:b6:b3:6e:c2:33:e7:38:26:ae:a5:19:
         b0:aa:a3:1d:aa:33:2c:a0:c6:62:fe:6c:01:58:31:9e:be:95:
         9a:fc:93:3c:37:63:d6:30:8b:7b:2f:0c:83:57:6e:0c:65:93:
         45:d1:ff:0b:64:93:0c:e2:e2:47:2b:9d:6b:6c:84:aa:50:40:
         83:6b:e9:58:b6:2f:6f:60:f4:b7:3b:8d:f7:7c:41:37:45:db:
         ea:f5:15:06:e2:99:be:8f:27:5d:35:e5:e6:b9:7b:dc:58:c9:
         81:7d:52:39:c7:34:1d:c8:45:ad:90:71:d0:a4:5e:3f:b3:dd:
         5d:b1:1e:c9:8d:72:09:78:d9:7f:d2:7e:2b:ab:b4:07:1e:bc:
         9b:cf:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org