Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECE70BE08413A31ACA6B9CCF026F65EACD1DDC6E.cer
File:                     ECE70BE08413A31ACA6B9CCF026F65EACD1DDC6E.cer (raw, json)
Hash identifier:          U+tU+FqT2G7+8Mnt5y7dbE5FbPfa9I9aIEUOh4k6ggs=
Subject key identifier:   EC:E7:0B:E0:84:13:A3:1A:CA:6B:9C:CF:02:6F:65:EA:CD:1D:DC:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D6965434E1A774F7D627D8DD991E8539F8DFA1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/1/ECE70BE08413A31ACA6B9CCF026F65EACD1DDC6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:20 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:20 +0000
Subordinate resources:    AS: 267424
                          IP: 181.191.132.0/22
                          IP: 2804:4144::/32

Validation:               Failed, certificate revoked on Thu 30 May 2024 21:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:69:65:43:4e:1a:77:4f:7d:62:7d:8d:d9:91:e8:53:9f:8d:fa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject: CN=ECE70BE08413A31ACA6B9CCF026F65EACD1DDC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:7c:33:f0:fb:d5:06:1b:fa:14:99:be:b5:
                    5f:4b:a5:cd:5e:9e:33:7d:08:08:83:fc:8e:a7:5b:
                    37:4f:8c:08:d7:8e:54:a4:a7:01:b9:2c:b9:9e:de:
                    18:8b:b0:f6:ec:f6:aa:e5:e3:6f:8d:6d:ee:77:1d:
                    2e:53:f7:f6:c7:b4:f8:02:50:87:ac:ac:01:3c:69:
                    36:45:9e:1e:45:c8:ba:93:a8:95:a3:5e:98:89:5d:
                    85:20:1b:d8:7f:df:11:f3:30:1d:90:cf:4e:f8:4e:
                    86:4b:9c:a0:40:93:67:74:36:35:a1:7a:3c:d7:a7:
                    82:53:11:33:69:26:ba:6e:85:5d:64:c1:08:16:82:
                    66:b3:a6:69:b9:9f:ea:79:42:98:66:51:2a:db:64:
                    75:93:3b:0e:b3:c1:9c:d9:be:4c:50:73:7e:4a:c3:
                    b0:2c:c4:19:d9:40:d3:7a:b7:52:28:4f:69:52:04:
                    c5:f5:91:de:70:82:62:45:6b:75:aa:20:22:a0:30:
                    8b:0b:29:12:fa:87:1a:69:cb:83:e8:b2:09:cc:e0:
                    e7:ee:16:10:ef:ae:e4:16:f4:9d:ff:93:de:ae:6b:
                    46:6c:b6:e2:ea:c0:b6:e3:0c:6e:c7:94:e9:0d:f4:
                    6b:6c:39:47:70:03:f8:34:99:d0:40:e3:77:45:e8:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:E7:0B:E0:84:13:A3:1A:CA:6B:9C:CF:02:6F:65:EA:CD:1D:DC:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/1/ECE70BE08413A31ACA6B9CCF026F65EACD1DDC6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.132.0/22
                IPv6:
                  2804:4144::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267424

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:4d:1e:ca:f9:52:36:e8:cd:ad:37:49:c7:a8:dd:24:2a:
         0a:69:11:87:6b:1b:e2:91:3c:ce:d1:fd:f2:6a:e0:09:45:ae:
         c3:10:46:50:0b:21:ac:d9:49:02:3e:22:f6:c5:dc:bc:3c:f7:
         3f:bc:c2:a0:ee:1f:c7:14:3f:b1:ab:d4:44:29:23:98:a6:ea:
         4c:5b:db:7d:81:af:19:33:db:df:fc:bf:8f:24:85:f8:c6:52:
         c9:82:45:99:fd:ae:8c:33:de:3f:7e:0a:e1:5a:dd:af:5c:ef:
         b7:f5:79:d7:c3:ff:00:e9:9c:c2:9e:22:1d:c3:2a:0b:b7:34:
         bf:e7:f7:a5:48:f8:23:2b:39:2c:9c:fd:dd:53:de:14:e8:27:
         fb:0e:07:59:b9:2b:1c:9c:02:90:15:5c:5c:d1:f9:80:a3:3c:
         68:91:11:03:60:8b:88:d4:b2:df:50:26:95:9b:e2:ca:94:f2:
         3a:2c:2b:ff:f9:00:b3:f1:b2:f6:2b:fb:71:81:86:3d:fd:75:
         bc:97:23:8e:83:7a:77:31:90:8f:fc:80:95:07:96:5a:95:49:
         10:d4:94:ed:4d:30:b4:e0:79:89:37:6e:c9:bf:70:d3:9e:cc:
         0c:3c:59:24:da:b6:2d:7b:02:6c:1e:79:5d:6e:f7:68:f0:07:
         53:f2:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org