Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EDC897E4325310FDE32E946F296A0E9166F42300.cer
File:                     EDC897E4325310FDE32E946F296A0E9166F42300.cer (raw, json)
Hash identifier:          gBp2k9/L1VYQBuLP9yvNI7g43EaTz3PeHwbfnNgeIfg=
Subject key identifier:   ED:C8:97:E4:32:53:10:FD:E3:2E:94:6F:29:6A:0E:91:66:F4:23:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1132CB274CF3D10023EDDA8FE219963F7CBD81C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/EDC897E4325310FDE32E946F296A0E9166F42300.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:24:00 +0000
Certificate not after:    Thu 03 Apr 2025 15:29:00 +0000
Subordinate resources:    AS: 267390
                          IP: 45.235.0.0/22
                          IP: 2804:4cc4::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:32:cb:27:4c:f3:d1:00:23:ed:da:8f:e2:19:96:3f:7c:bd:81:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:24:00 2024 GMT
            Not After : Apr  3 15:29:00 2025 GMT
        Subject: CN=EDC897E4325310FDE32E946F296A0E9166F42300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:80:fb:69:17:bc:66:be:aa:36:96:43:d4:
                    c2:25:b8:42:92:50:99:5a:94:a7:f7:b0:ad:84:5d:
                    ea:c3:28:66:f9:7e:52:05:01:47:4d:4e:8b:6e:24:
                    f5:ee:6a:75:3b:d3:8a:64:fe:ea:5f:01:f4:55:e0:
                    a8:d7:da:fe:9c:ae:7b:6b:ec:1d:5f:a7:34:92:ee:
                    16:fa:f6:cc:54:42:9e:14:1f:0e:fc:c6:a6:1b:bb:
                    e3:a5:d7:b3:5e:b8:aa:0f:88:ce:3a:da:79:77:66:
                    4a:03:94:0b:d1:12:df:12:46:fa:f7:9e:1c:ed:de:
                    3a:62:c5:25:a0:22:61:90:48:4f:93:e3:ea:ca:bc:
                    5a:72:da:cd:07:fe:d7:dd:37:9b:6f:50:19:64:5b:
                    b8:66:31:e4:aa:8f:74:33:4c:1e:e0:3d:ec:32:98:
                    2b:dd:38:51:da:f2:a4:7d:9e:fb:d5:86:8a:20:2b:
                    bd:cd:bf:06:ab:cb:bd:2a:fc:4b:a5:bb:0b:69:39:
                    4a:38:6e:fd:67:d0:87:85:52:92:0d:83:94:ae:52:
                    76:22:ad:81:0c:f7:80:8b:34:a1:d4:0a:c6:a6:18:
                    64:3e:09:79:8e:bd:cb:71:f4:9f:16:16:47:31:d1:
                    cc:89:35:61:32:fe:bd:a9:f3:12:8b:79:9b:7e:8d:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:C8:97:E4:32:53:10:FD:E3:2E:94:6F:29:6A:0E:91:66:F4:23:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/EDC897E4325310FDE32E946F296A0E9166F42300.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.0.0/22
                IPv6:
                  2804:4cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267390

    Signature Algorithm: sha256WithRSAEncryption
         06:87:ee:2d:92:a1:e8:0b:06:a5:5a:f7:9a:7f:f5:a6:d5:56:
         b6:f2:43:c4:5b:a8:41:46:01:d0:c2:27:13:ad:54:10:b0:5b:
         c3:aa:bd:2d:9f:21:59:70:c3:13:33:2a:f0:91:12:0a:90:3c:
         59:04:ca:80:e5:43:5a:bb:d3:dc:bc:9f:6a:6e:32:56:89:88:
         98:b0:83:43:be:2a:d9:7e:90:30:77:a3:cb:cc:ca:0d:07:08:
         33:b8:4d:fc:13:76:11:c4:54:37:28:b6:64:b7:91:6a:48:d5:
         15:a5:22:57:3e:61:ee:4c:e7:52:d0:48:19:dd:d5:ad:62:18:
         23:58:6e:b6:f6:e4:98:a2:f3:86:83:54:b6:af:2d:60:0f:bf:
         93:80:a5:cb:9f:87:6f:45:22:2d:01:fa:6d:38:23:0b:37:ec:
         68:d1:b4:64:40:1c:c6:93:69:0c:4b:1d:7d:4a:53:a4:dc:16:
         89:93:a3:90:52:82:af:f1:68:f0:76:b2:80:1b:b6:79:17:00:
         8a:0a:78:4f:db:41:98:c0:ea:72:a8:fd:91:7c:74:cf:92:58:
         55:7a:d5:b9:22:1d:58:64:10:d8:0a:7c:85:81:50:d7:3b:f1:
         e3:4e:d5:07:33:04:aa:b8:7d:11:2e:1f:be:9f:5d:6f:0e:32:
         83:ab:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org