Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
File:                     EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer (raw, json)
Hash identifier:          2uqdJzPdyY/y3ih3uW1xNiiTLR+bqGGOHd81AgcOFJY=
Subject key identifier:   EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09BE774ECB36F1225C7CA3BB6A437B29C5C36DD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 May 2024 14:27:05 +0000
Certificate not after:    Tue 20 May 2025 14:32:05 +0000
Subordinate resources:    AS: 270602
                          IP: 177.85.240.0/22
                          IP: 2804:6e84::/32

Validation:               Failed, certificate revoked on Mon 27 May 2024 09:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:be:77:4e:cb:36:f1:22:5c:7c:a3:bb:6a:43:7b:29:c5:c3:6d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 21 14:27:05 2024 GMT
            Not After : May 20 14:32:05 2025 GMT
        Subject: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:14:c1:de:df:ff:08:80:45:bd:19:86:16:
                    1a:7e:b9:35:58:96:d4:f8:b8:01:d9:81:04:ab:ac:
                    85:ae:44:a1:24:ba:85:ba:49:92:ea:73:2a:07:36:
                    aa:fb:3b:57:bf:7c:85:06:18:f5:e5:94:8f:81:cf:
                    e7:c0:36:f4:6f:19:22:e4:20:ef:59:7a:2a:79:90:
                    3b:e0:33:36:37:8b:15:c6:a1:dc:7c:12:42:ed:84:
                    28:2f:b2:05:79:b6:cd:69:47:ad:73:15:6c:11:cc:
                    23:95:b0:c2:ee:08:98:0d:6d:01:a5:e5:6c:7c:54:
                    dc:25:4b:0e:03:7e:fd:4a:60:50:30:0e:cb:d3:e8:
                    cd:3f:89:53:21:59:83:2f:51:52:66:4d:ae:91:4b:
                    e6:a4:93:6e:c9:97:39:f8:46:95:b5:63:0c:28:72:
                    03:8f:2d:d5:66:f6:5a:53:64:41:e8:3e:9e:e2:aa:
                    ed:a0:a4:e5:31:1a:58:04:f2:ec:5f:f0:e8:1a:50:
                    c0:ec:74:ef:69:6c:ca:99:c2:bc:03:5f:9c:5f:0b:
                    bd:e6:28:21:98:8a:36:be:6d:34:9a:a4:2d:77:d6:
                    50:92:62:7c:20:5f:30:37:93:6f:75:58:eb:d1:f9:
                    25:3b:e5:30:d4:89:fe:b2:e9:32:2a:da:fa:61:2c:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/22
                IPv6:
                  2804:6e84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270602

    Signature Algorithm: sha256WithRSAEncryption
         17:01:3f:2e:4f:6f:5c:51:9b:90:22:44:df:52:47:64:c6:0c:
         d7:ca:15:67:ba:71:49:63:78:61:07:8a:c3:c1:e8:0c:81:2b:
         ac:b4:3e:c2:5e:93:59:be:e1:d6:ff:de:b6:9d:6c:06:c5:bd:
         d6:55:15:e6:fb:0a:33:fc:9a:8a:8c:40:81:a6:a3:bb:3c:dc:
         9d:62:b3:84:46:2d:a0:c1:96:4a:17:96:01:01:a7:20:77:32:
         5a:39:e0:e9:9d:81:20:5a:62:ed:85:98:8d:da:a0:99:0e:c3:
         7b:09:e1:bd:e9:21:5c:06:9f:b3:cb:03:e9:a3:6c:17:eb:ad:
         8a:b8:64:ca:0a:d7:b1:91:b2:76:38:76:9f:68:3b:29:43:3b:
         bd:4a:71:b5:01:11:79:b3:c4:ab:8e:f9:03:9c:26:63:b4:a9:
         5f:8d:82:a7:80:90:4d:56:75:a2:3d:c1:f1:65:05:c9:f9:e4:
         51:d7:ce:fe:d2:c7:ad:9c:9d:c1:9f:dd:16:67:0c:44:a9:f5:
         e9:7f:2f:b6:79:46:68:99:0c:c4:ac:a9:be:ac:a2:60:7b:7b:
         d7:71:0e:5a:1f:c8:14:38:87:59:e9:13:e9:83:ce:d8:94:03:
         9b:af:23:68:7b:de:82:f1:06:81:6e:a5:bc:cc:d9:f5:63:a2:
         9c:9d:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org