Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ED72691DB2D24A555706FD7151BEF591E2F4E25A.cer
File:                     ED72691DB2D24A555706FD7151BEF591E2F4E25A.cer (raw, json)
Hash identifier:          eMxrHa/q0yJ6WOIEaPBJbXYnEKTX3Eu1G7xEqPVSaU4=
Subject key identifier:   ED:72:69:1D:B2:D2:4A:55:57:06:FD:71:51:BE:F5:91:E2:F4:E2:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0702B65B678135F34594D9E2119B2B90A2652BA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/ED72691DB2D24A555706FD7151BEF591E2F4E25A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Nov 2024 16:49:53 +0000
Certificate not after:    Thu 13 Nov 2025 16:54:53 +0000
Subordinate resources:    AS: 269436
                          IP: 45.186.212.0/22
                          IP: 2804:6494::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 18:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:b6:5b:67:81:35:f3:45:94:d9:e2:11:9b:2b:90:a2:65:2b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 14 16:49:53 2024 GMT
            Not After : Nov 13 16:54:53 2025 GMT
        Subject: CN=ED72691DB2D24A555706FD7151BEF591E2F4E25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:54:3c:44:58:ad:0e:1a:c8:c8:83:01:1f:
                    bd:41:85:48:58:f0:4c:94:31:2a:38:fe:e4:12:38:
                    5e:9c:b9:b4:05:cd:df:67:47:fe:01:88:0d:59:a6:
                    ba:d0:e7:13:fc:39:c3:8b:e0:60:2f:5f:2c:25:94:
                    99:fc:80:7b:1a:87:80:cc:56:c5:f4:88:0a:b7:e0:
                    cd:6f:58:be:b8:99:ef:47:87:a5:6e:c4:4a:1b:23:
                    42:8c:5b:da:66:19:75:d5:b5:8e:fd:26:36:49:37:
                    e7:4c:e3:70:38:85:0f:55:0e:b5:da:a5:d2:be:99:
                    c2:03:cf:ea:15:7d:2f:d2:cf:9b:4c:31:57:e9:2d:
                    cb:45:b9:42:53:00:1e:cf:ec:46:ea:ef:34:06:e0:
                    d8:af:2c:c4:e2:d6:b0:9d:fa:4f:f1:1b:ca:cf:ed:
                    98:d5:e6:0a:79:eb:3e:0b:91:b1:bf:27:fa:70:0b:
                    99:53:02:60:db:86:a5:19:62:ea:16:a9:35:ac:d8:
                    de:c5:ca:d9:08:9d:4a:22:79:d1:3e:d7:7d:e6:82:
                    58:98:ad:ab:be:9d:51:d9:8c:07:8f:83:27:38:b9:
                    a3:50:c8:0c:db:b2:6d:f0:88:ff:e6:89:49:d5:c2:
                    c1:2a:4b:2e:c5:1e:d8:c9:27:5a:98:0f:37:23:ca:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:72:69:1D:B2:D2:4A:55:57:06:FD:71:51:BE:F5:91:E2:F4:E2:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/ED72691DB2D24A555706FD7151BEF591E2F4E25A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.212.0/22
                IPv6:
                  2804:6494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269436

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:df:8a:3e:47:e4:ea:22:4d:e9:4f:11:34:9b:01:0d:c6:
         05:61:24:2d:25:e7:67:c2:4c:17:46:2a:73:87:8c:fc:5e:01:
         02:7d:13:e7:b0:c7:0a:27:e2:fb:f9:2d:51:dc:39:6b:7c:6b:
         56:b0:d3:0e:f8:67:75:2e:75:12:c0:d9:42:76:98:c0:8d:0d:
         6f:87:0e:2c:d3:5a:a4:3c:a2:2a:37:0d:05:ef:fb:e2:59:2e:
         6b:88:c8:70:93:65:99:47:b8:ec:22:c2:40:74:ef:24:86:0c:
         17:8a:66:31:b4:43:2f:94:56:71:cf:0c:8c:46:ea:52:b5:a9:
         0f:a8:cf:12:0f:3a:58:df:25:a2:ee:76:ad:e3:a2:8e:1f:36:
         50:d8:9c:d7:37:cd:08:17:fe:7c:84:0b:1b:f4:8b:2c:d8:48:
         25:da:cf:85:01:a3:33:48:c8:0d:4b:52:a1:60:59:4f:42:de:
         4e:6d:dd:81:32:ae:9e:78:86:f0:66:61:8c:bb:7d:2c:ed:96:
         e4:9a:af:4f:25:0f:5d:a7:78:fa:c2:97:e9:3e:b2:48:d9:87:
         ff:e1:7c:49:49:a5:2e:c6:22:28:3d:05:ae:94:15:06:57:94:
         3d:df:b8:40:c7:6b:81:32:00:19:83:a3:ed:f0:28:70:65:a3:
         ad:ce:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:45:15 2024 by rpki-client on console-ams.rpki-client.org