Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer
File:                     EE85037D3580A407793B86B1161445493E825B07.cer (raw, json)
Hash identifier:          Dl7QgPKA16xXJVdAJTZpFd7HGeNbQxyWWw8/GjfbZNk=
Subject key identifier:   EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D198BFD268336806CAD30CBB49A9B56FD0B5183
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Aug 2024 20:40:35 +0000
Certificate not after:    Tue 05 Aug 2025 20:45:35 +0000
Subordinate resources:    AS: 263327
                          AS: 268329
                          IP: 45.238.84.0/22
                          IP: 191.7.192.0/19
                          IP: 2804:145c::/32
                          IP: 2804:4f78::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 10:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:19:8b:fd:26:83:36:80:6c:ad:30:cb:b4:9a:9b:56:fd:0b:51:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 20:40:35 2024 GMT
            Not After : Aug  5 20:45:35 2025 GMT
        Subject: CN=EE85037D3580A407793B86B1161445493E825B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:e4:c1:a0:81:d0:ec:88:b5:b4:d8:1a:17:
                    62:b5:1d:2a:88:a3:6e:8e:78:98:9b:61:e9:71:bc:
                    ed:bf:cf:66:aa:20:19:b1:f5:98:bb:af:a2:f4:75:
                    9e:23:38:39:90:ad:1c:35:4d:dc:8e:32:27:4e:9b:
                    11:d9:dd:17:fe:5d:0a:11:8a:05:57:20:52:4c:50:
                    81:7a:c6:82:d6:25:65:3b:5b:81:09:e7:d0:2b:38:
                    a6:cc:09:9f:73:32:9b:55:37:8a:38:a2:a1:03:4f:
                    34:84:fa:09:7f:43:79:8e:9e:ad:96:81:07:51:da:
                    93:d9:91:12:5e:7b:e7:13:18:b6:fb:38:be:58:c7:
                    71:5e:63:0b:42:07:e7:88:34:9f:08:31:b8:3d:0f:
                    31:be:da:78:a7:67:3d:00:72:a4:f8:91:ef:b4:8f:
                    50:9a:93:21:1b:e4:da:af:1b:a1:c5:de:4f:9c:73:
                    df:ad:a8:a6:cf:c0:9a:39:10:5e:2e:8c:91:fd:99:
                    9d:f5:7a:71:87:6e:04:15:7f:4b:f9:39:ad:99:98:
                    51:f9:50:e8:e6:95:e3:81:70:28:12:b0:3e:87:46:
                    d6:82:b0:88:7e:75:0a:af:11:c6:6d:87:52:3a:1c:
                    f6:3d:ee:99:ae:49:b7:7e:88:ba:26:53:03:10:98:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.84.0/22
                  191.7.192.0/19
                IPv6:
                  2804:145c::/32
                  2804:4f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263327
                  268329

    Signature Algorithm: sha256WithRSAEncryption
         48:8a:d3:25:42:0b:9a:27:9d:06:ef:ee:71:43:19:1c:47:8e:
         bf:c7:27:4c:d7:d0:c9:3e:fb:de:62:6a:ee:e1:77:6a:b3:af:
         cf:fd:41:a3:4f:9a:15:8f:90:e5:16:2d:bc:53:ba:46:d6:db:
         a7:bd:ba:c5:7d:2e:b9:29:25:2b:0f:d1:ed:41:3e:d9:43:96:
         99:4a:57:ed:4d:d4:7c:3e:6f:30:fc:77:bd:08:b1:1d:58:b0:
         71:16:f5:8b:69:f2:c4:01:c1:b1:7e:ee:dc:2d:b6:ca:d0:ad:
         b6:4c:96:f0:59:88:7a:53:e5:3f:d3:f2:06:0d:7b:23:d2:05:
         aa:6c:51:36:fa:1c:c2:62:b1:97:b5:c2:3e:3b:37:36:e5:7b:
         cd:3c:92:73:52:27:1c:51:01:28:6d:c3:70:61:32:c4:d0:3f:
         db:f1:c5:4a:4e:a4:a3:d9:7e:60:b6:36:da:b0:1e:a1:1a:e3:
         2e:d0:d0:7c:24:94:7e:32:4a:70:89:71:75:ec:47:5e:a3:69:
         6d:ac:5c:c9:03:39:ce:fc:25:01:d0:2f:56:7a:26:32:c6:e6:
         6d:f7:10:14:c6:52:fe:d5:85:d3:36:66:15:a3:16:1d:15:89:
         19:69:58:3c:e0:aa:69:9c:d4:ff:94:ec:48:cf:f8:4e:86:22:
         72:03:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 13:00:12 2024 by rpki-client on console-ams.rpki-client.org