Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EBE7B7FEB4A878E340455E6D23E96F336C45530.cer
File:                     4EBE7B7FEB4A878E340455E6D23E96F336C45530.cer (raw, json)
Hash identifier:          iD60E9xNJc+nW0HBQJcODHhDDd2rEZP8NKSgCV4mwTQ=
Subject key identifier:   4E:BE:7B:7F:EB:4A:87:8E:34:04:55:E6:D2:3E:96:F3:36:C4:55:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7101C8511C7539DB3FFDE23BD17185623879A983
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/4EBE7B7FEB4A878E340455E6D23E96F336C45530.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2024 17:13:03 +0000
Certificate not after:    Mon 28 Jul 2025 17:18:03 +0000
Subordinate resources:    AS: 270614
                          IP: 2804:6eb4::/32
Validation:               Failed, certificate revoked on Mon 29 Jul 2024 18:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:01:c8:51:1c:75:39:db:3f:fd:e2:3b:d1:71:85:62:38:79:a9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 17:13:03 2024 GMT
            Not After : Jul 28 17:18:03 2025 GMT
        Subject: CN=4EBE7B7FEB4A878E340455E6D23E96F336C45530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:ca:41:5e:fa:5a:41:2f:e4:75:72:89:65:
                    7f:52:69:9a:41:a1:9a:9d:0b:3f:37:4d:62:80:36:
                    ae:ff:ea:de:ae:62:98:7e:47:5e:c6:8e:59:b7:df:
                    64:04:51:76:ec:1e:1e:51:c5:cd:37:5e:42:1a:ea:
                    ce:fa:c0:45:0e:ca:13:7b:ba:e6:01:be:78:fb:dc:
                    a3:30:ed:83:bd:08:d5:be:f4:c2:2c:4b:df:f5:bb:
                    ec:cc:21:f7:a5:a6:78:69:85:1b:49:65:aa:39:6b:
                    72:cc:76:20:3a:31:b7:15:18:75:af:7c:9b:df:29:
                    b4:10:60:89:91:58:c0:eb:14:bc:63:b3:4f:99:18:
                    35:9e:ce:94:d5:f5:ba:70:09:55:56:9b:2e:0e:05:
                    9c:76:6e:b0:45:fd:dd:cd:30:ee:ff:18:6a:8f:6e:
                    d4:08:67:45:c2:e1:58:34:4c:98:d8:9e:10:82:01:
                    40:32:0d:63:66:9e:96:a4:94:20:ee:f5:e3:a3:b4:
                    a5:2e:cc:61:ea:c8:04:0c:9e:f5:cf:2c:a9:ba:b1:
                    50:29:6b:85:02:c2:64:d2:ba:c5:04:37:fb:98:26:
                    1c:a8:54:9f:aa:cb:60:74:0c:36:bb:81:93:3a:e0:
                    d3:0b:f2:31:f6:91:d9:bb:d5:83:ce:c2:00:67:9a:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:BE:7B:7F:EB:4A:87:8E:34:04:55:E6:D2:3E:96:F3:36:C4:55:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/4EBE7B7FEB4A878E340455E6D23E96F336C45530.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270614

    Signature Algorithm: sha256WithRSAEncryption
         26:58:ee:f6:a7:e7:ea:b7:ef:af:64:a7:48:69:ba:0a:3f:8f:
         48:fe:be:a2:d8:d5:3e:48:f7:9a:63:af:d6:8d:c2:a0:37:81:
         09:1c:3f:27:f0:91:6e:02:40:68:be:7c:29:99:2a:70:2e:46:
         d2:98:2b:0a:1c:47:da:09:82:48:5b:dc:15:03:f1:27:89:24:
         24:d2:69:4c:9f:17:80:dc:cd:8a:2b:0e:17:63:3b:53:20:21:
         97:62:b1:44:5f:a7:41:9f:4e:e2:6c:bd:bf:fc:b7:8a:3d:4e:
         7d:4a:71:73:82:94:eb:a5:a4:87:26:6e:a5:0f:6e:da:85:69:
         b3:c0:56:90:74:99:16:8c:a2:78:36:ab:53:14:43:53:a2:d4:
         57:8d:db:20:33:6f:fa:e2:a8:5d:a4:b6:f6:84:ab:06:ab:45:
         41:e9:e4:6c:ac:a6:b7:85:fd:05:b4:59:94:ef:35:a4:8a:4c:
         e9:36:c6:84:9c:85:1d:8d:f1:fe:fd:4e:ba:3d:0e:b2:d3:ef:
         cc:64:8a:9b:75:7f:2c:6a:88:40:de:dd:16:a1:d0:37:d1:57:
         8b:d9:2c:29:39:33:6b:f6:91:13:ea:e3:43:8c:d1:c3:0b:a5:
         4b:61:15:3f:14:20:ed:b1:d0:29:56:e7:92:3f:5c:b9:40:12:
         a7:d4:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:15:29 2025 by rpki-client