Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
File:                     EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer (raw, json)
Hash identifier:          q1Frs3r8W3c9OWZrI0Rop9pqvd64+PMvMXAIdhzuNkM=
Subject key identifier:   EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65962BE94E8847C3AECFD56D2BE11C9E33BA8668
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 13:27:07 +0000
Certificate not after:    Thu 08 May 2025 13:32:07 +0000
Subordinate resources:    AS: 269591
                          IP: 45.189.140.0/22
                          IP: 2804:66ec::/32

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 15:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:96:2b:e9:4e:88:47:c3:ae:cf:d5:6d:2b:e1:1c:9e:33:ba:86:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 13:27:07 2024 GMT
            Not After : May  8 13:32:07 2025 GMT
        Subject: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:f2:da:2e:0f:4b:a6:fe:84:5c:3a:41:10:
                    56:7f:34:1e:ca:a8:8f:fe:30:55:eb:fb:7c:ae:6c:
                    ae:e1:0e:06:4a:3d:a1:1c:4a:3d:dc:94:c8:2a:7c:
                    98:e8:80:e2:70:67:47:32:f5:74:29:08:b3:70:cb:
                    b4:c7:28:bf:d4:2a:09:9c:ef:31:13:38:ba:a4:56:
                    b0:5c:c5:da:a0:02:45:0a:61:87:c3:b8:1c:b1:68:
                    0f:b7:65:14:88:cc:ae:f1:ba:4c:89:e8:0e:53:c3:
                    a3:3a:1c:3d:2e:bb:d1:91:a7:27:97:ad:8d:c7:d3:
                    fd:0b:68:91:6c:d4:8c:db:98:4a:51:11:77:3b:38:
                    a9:b7:a9:39:20:06:a3:97:7c:f7:ef:9d:93:e5:24:
                    11:de:cc:54:a0:6d:32:78:6d:48:53:a9:68:ac:80:
                    89:6c:ae:6e:b5:f3:34:ac:b3:93:6e:37:52:6a:94:
                    f2:a2:fa:6d:4f:b9:a1:32:29:87:8d:8b:3b:86:43:
                    11:4d:9e:00:61:f9:5d:08:52:59:82:ca:3d:07:d6:
                    85:94:0b:1a:28:93:6f:f0:6b:15:ed:57:1a:89:c3:
                    2c:cb:8b:6b:11:d4:f1:68:d3:a5:6a:ef:8e:af:c9:
                    aa:de:3c:68:b3:46:78:b1:60:86:22:0c:96:5f:32:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.140.0/22
                IPv6:
                  2804:66ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269591

    Signature Algorithm: sha256WithRSAEncryption
         9c:6f:96:de:3d:8e:2d:6e:21:6e:7e:68:73:c7:be:6e:6c:b7:
         00:1c:87:7e:4b:32:9b:19:14:de:70:bc:0f:b1:f2:18:1a:22:
         5a:6a:f1:3e:09:74:c1:a2:36:06:27:3f:95:04:15:f6:04:ab:
         18:bd:a7:98:43:bd:7b:23:a4:7d:7a:fc:40:a0:7b:47:77:fa:
         cb:e1:cf:f3:31:8c:21:7f:a8:c5:37:32:54:b8:a4:a9:eb:4a:
         05:62:91:22:43:61:a8:ca:c0:cb:7d:f7:36:82:15:4e:09:52:
         8d:c7:f2:1c:ff:87:73:ac:26:a6:ad:64:1e:01:75:6e:ed:42:
         e8:35:76:47:f6:88:ee:fc:13:eb:6e:5d:2f:d3:a4:ef:69:d8:
         7b:36:a6:d1:b2:18:29:07:b3:9c:70:50:a8:8d:42:3a:ad:89:
         c7:7f:c9:47:c4:45:e9:2b:2d:1f:86:57:0e:8c:f6:67:b7:9a:
         ee:f3:67:e1:d5:79:6f:a8:9f:3b:34:23:05:31:3e:47:40:20:
         59:66:00:fe:b9:40:59:ab:a6:3a:bc:48:3f:26:63:65:15:1f:
         f4:f0:46:dc:bb:8f:19:62:86:5c:cd:51:f2:62:af:81:7f:55:
         6c:40:c5:4c:8d:8a:99:00:3f:d5:8d:43:d1:15:ba:51:4b:f7:
         e4:45:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 18:56:15 2024 by rpki-client on console-fra.rpki-client.org