Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer
File:                     EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer (raw, json)
Hash identifier:          EzeWgOVnv33TQ15YHkBGc1bzVctWbUoLxh2WkRdQuLM=
Subject key identifier:   EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       254E5EC07BFDF755C61C6A99B80C476C4DC96501
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 May 2024 19:54:57 +0000
Certificate not after:    Fri 02 May 2025 19:59:57 +0000
Subordinate resources:    AS: 262659
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0/20
                          IP: 186.193.64.0/19
                          IP: 187.1.64.0/20
                          IP: 187.85.0.0/19
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 2804:58::/32
                          IP: 2804:e8::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 15:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4e:5e:c0:7b:fd:f7:55:c6:1c:6a:99:b8:0c:47:6c:4d:c9:65:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 19:54:57 2024 GMT
            Not After : May  2 19:59:57 2025 GMT
        Subject: CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:f6:aa:35:08:78:02:84:85:fe:da:26:57:
                    77:e4:69:82:cc:04:a5:b7:dd:08:d3:33:92:41:c5:
                    08:76:0a:8c:76:f8:4b:c0:83:e5:e6:b0:94:e1:5a:
                    2a:bd:a3:3b:8b:af:04:63:64:80:ca:f4:b9:d4:67:
                    df:b3:9b:26:d0:c4:79:64:51:bb:4b:35:80:b4:4f:
                    ec:fb:e9:a5:31:86:a6:21:d5:d2:12:e4:69:a8:d8:
                    06:75:54:2f:08:55:94:5b:61:b5:92:3e:ca:73:b1:
                    85:b4:58:33:6f:75:70:12:71:ab:c0:b0:b5:5c:64:
                    78:24:f5:bf:cf:2b:2a:2e:34:f6:07:cf:bf:8b:d2:
                    98:0d:47:a4:f2:b1:8b:56:4d:08:51:ed:32:b5:8f:
                    cf:02:c9:83:2e:85:e6:ae:0b:32:8e:35:04:88:f6:
                    d0:0f:ac:f5:66:31:7c:92:08:f9:16:ea:ee:13:27:
                    1f:29:6c:fe:21:d4:e9:6b:36:20:6b:bd:61:99:14:
                    ca:73:ab:13:6a:40:93:4b:7f:2e:e5:8b:dc:ad:6c:
                    a8:60:8d:70:fa:1a:48:d6:df:2c:6a:09:6e:14:4c:
                    47:7b:dd:e4:85:c7:18:27:92:de:23:d0:02:f7:9e:
                    78:18:0d:70:19:c3:66:a1:90:85:78:2b:30:56:43:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20
                  179.127.48.0/20
                  186.193.64.0/19
                  187.1.64.0/20
                  187.85.0.0/19
                  200.52.16.0/20
                  201.33.240.0/20
                IPv6:
                  2804:58::/32
                  2804:e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262659

    Signature Algorithm: sha256WithRSAEncryption
         6e:6f:50:d8:b0:9c:e8:f6:f3:16:65:bd:f2:a9:4f:58:10:f2:
         f1:e3:23:a3:d8:d5:a1:d3:23:9d:43:4f:31:29:9f:d2:9b:2e:
         c8:ab:b5:8e:d8:2e:66:5b:95:4a:51:49:c0:63:ac:10:25:07:
         13:80:cb:19:ac:5b:c5:fd:a1:d8:ec:85:05:6c:b0:6c:c1:90:
         17:b9:6e:e5:cb:a8:91:b5:5d:33:88:b5:0e:d1:1a:94:80:de:
         cc:d1:17:b5:20:39:7d:fa:3e:c0:7c:b3:1c:f4:8c:1b:ec:7d:
         87:d6:ee:01:f6:9b:39:92:ef:71:ad:6c:c3:db:0e:5e:ee:47:
         44:6f:83:30:71:50:b4:27:e0:2d:fc:92:31:8f:90:48:6a:a7:
         9d:73:c7:4b:bc:55:a5:21:a2:47:1a:52:93:ed:54:7e:b4:c2:
         d5:2c:81:60:9e:87:81:28:de:18:65:bb:75:0e:18:16:64:df:
         b2:f8:31:e5:5f:c2:c6:b9:d3:0c:19:f0:04:28:76:98:fe:ca:
         f5:a8:29:df:ab:ae:a2:80:fe:94:a2:eb:49:90:5b:b3:e0:59:
         e8:87:48:51:d5:33:d8:61:bb:b9:e3:d8:58:f1:d1:dc:6e:c7:
         56:c5:e4:9b:af:8f:7f:dc:28:dc:b8:56:4e:39:e0:77:65:79:
         ad:1f:48:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org