Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EDA08F9ECCC3AA9D50DD4150BA6EF422EF96683F.cer
File:                     EDA08F9ECCC3AA9D50DD4150BA6EF422EF96683F.cer (raw, json)
Hash identifier:          QjbknTowDo13nArel6ib+yQLYV9u9RHP2Cpz5/l7wic=
Subject key identifier:   ED:A0:8F:9E:CC:C3:AA:9D:50:DD:41:50:BA:6E:F4:22:EF:96:68:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7DC83A61A87C0E3CAC7AE59627DFD56EC0229FFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/EDA08F9ECCC3AA9D50DD4150BA6EF422EF96683F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Jul 2024 13:23:29 +0000
Certificate not after:    Sat 19 Jul 2025 13:28:29 +0000
Subordinate resources:    AS: 271007
                          IP: 170.254.236.0/22
                          IP: 2804:74d8::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 12:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c8:3a:61:a8:7c:0e:3c:ac:7a:e5:96:27:df:d5:6e:c0:22:9f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 20 13:23:29 2024 GMT
            Not After : Jul 19 13:28:29 2025 GMT
        Subject: CN=EDA08F9ECCC3AA9D50DD4150BA6EF422EF96683F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:b8:8c:05:bf:51:27:c8:eb:8e:9b:c1:62:
                    96:b4:31:76:74:7b:bf:4e:6c:45:32:3b:cc:d7:76:
                    51:c6:a8:4d:34:9b:fe:60:c4:b3:4b:63:7b:29:04:
                    75:50:8f:be:2e:2d:fd:fd:f9:67:8d:d4:48:4e:aa:
                    93:7d:cb:e6:94:67:fd:07:b7:17:6d:95:00:3c:0a:
                    e2:13:68:2c:c9:54:35:3e:db:a7:c2:a3:1f:67:92:
                    16:b4:1d:f9:bc:d5:3e:d8:3e:3e:ce:4f:8d:73:fb:
                    fd:73:62:c0:c0:62:db:5f:cd:c8:e7:37:cb:18:58:
                    a2:41:4c:56:ac:b2:cc:5d:0e:6a:96:8e:92:e7:c6:
                    f0:16:48:6b:ca:a0:4b:db:fd:58:6f:b9:60:26:b9:
                    28:18:d3:50:15:19:29:a2:c9:7d:94:f4:53:38:9c:
                    be:f3:59:66:5b:d3:55:bd:76:34:d0:5a:19:8c:ae:
                    2f:ab:c2:0b:21:d8:52:7a:bd:14:8a:e4:65:8d:cb:
                    6e:cd:ec:b1:49:62:9f:fa:62:ae:ff:d6:d8:07:2a:
                    f3:79:e0:54:6c:55:85:e6:05:c5:61:ad:a6:53:94:
                    7e:8d:f5:29:52:cd:b1:11:07:1e:6f:90:ba:d1:14:
                    68:c8:85:67:35:51:fa:fb:3f:65:c3:22:8c:11:17:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:A0:8F:9E:CC:C3:AA:9D:50:DD:41:50:BA:6E:F4:22:EF:96:68:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/EDA08F9ECCC3AA9D50DD4150BA6EF422EF96683F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.236.0/22
                IPv6:
                  2804:74d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271007

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:55:7f:d0:bb:bb:a2:53:e4:c8:6b:e4:e9:6c:48:0f:0a:
         42:f3:98:0f:08:39:8d:6e:ba:d8:0b:95:37:98:1b:29:05:6f:
         10:cc:43:be:93:ca:f3:a5:25:45:81:73:80:47:de:5b:9a:ab:
         0e:68:3b:be:2a:ad:1e:12:ef:bd:16:06:ed:10:8f:04:ad:99:
         ce:4c:fc:fc:92:80:70:e2:eb:08:5f:3a:e9:a7:31:01:fc:99:
         11:b3:0c:6c:8d:bd:3a:d5:cd:1f:bf:22:1d:81:0e:aa:51:e2:
         92:eb:2e:4a:3d:cf:b2:56:82:9f:40:63:b8:cc:f4:0a:0f:a1:
         6d:d0:5e:98:e5:03:10:d1:a5:8c:2b:e1:bc:43:1e:3e:68:f5:
         25:2f:e1:a9:fb:63:ba:53:5e:68:a8:5e:69:b4:79:50:5c:df:
         be:51:27:86:33:d3:f8:af:d2:c4:55:1b:81:10:d3:c3:c8:f4:
         e6:ba:d1:bc:77:80:9a:2c:91:d9:cb:a8:25:06:a1:1d:8c:cf:
         2e:ce:bc:75:c1:21:dc:06:36:66:4e:f6:56:c4:0b:f3:2a:13:
         3d:b8:fa:e0:6f:e7:64:5a:4d:0a:7d:e5:3c:59:d4:a4:01:4b:
         ec:f0:b3:79:ab:b1:f3:f7:53:a2:e4:1b:76:96:af:e5:b5:9f:
         46:80:87:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 16:40:22 2024 by rpki-client on console-ams.rpki-client.org