Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer
File:                     5A3F0107992B5594AAC8127D2D4984343707D1A1.cer (raw, json)
Hash identifier:          xyGNV/sT0JoNcy2iynr/NB7h5BoW3l1X+70Q8bKlknY=
Subject key identifier:   5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13FDA29F882A344B0518A50D219926D18B1892AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:14:58 +0000
Certificate not after:    Thu 03 Apr 2025 05:19:58 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32

Validation:               Failed, certificate revoked on Wed 08 May 2024 18:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:a2:9f:88:2a:34:4b:05:18:a5:0d:21:99:26:d1:8b:18:92:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:14:58 2024 GMT
            Not After : Apr  3 05:19:58 2025 GMT
        Subject: CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:7e:e9:bf:6b:d3:21:42:92:f0:e4:c7:9a:
                    08:70:31:20:71:a0:6d:eb:06:51:01:a7:18:80:c9:
                    58:bb:0d:eb:55:81:b1:cc:ca:c7:b1:72:30:9a:91:
                    00:47:97:a3:17:84:fc:f1:89:fe:a6:f9:b8:5d:f8:
                    df:a1:20:6e:62:f0:9a:85:2c:25:e2:b8:9b:5f:de:
                    f4:6b:05:b5:61:c7:aa:08:95:a4:7a:59:a7:03:a9:
                    31:7f:b9:1f:cf:70:15:5c:e8:66:96:cf:f8:a0:81:
                    a4:aa:85:67:e9:96:ee:de:be:82:0a:9a:a6:67:b1:
                    60:48:94:2b:3f:a3:7c:39:85:66:9b:0c:57:dd:77:
                    25:3f:67:16:f6:99:11:aa:4e:0b:75:1a:14:c0:a2:
                    7c:b2:59:51:ad:42:ab:fd:9a:cc:18:eb:5c:a2:d5:
                    bb:bd:36:39:8e:fe:e3:07:6e:2b:88:e3:98:12:ac:
                    cf:62:93:48:31:ff:c6:49:b5:de:7e:5b:f0:bc:49:
                    64:59:d3:56:76:cc:c2:24:95:8e:f8:b5:32:22:bb:
                    76:6b:d1:00:b0:e0:55:fd:62:c6:46:d6:3c:a9:c4:
                    a5:35:f8:81:1f:a1:1a:cc:e6:c4:af:9e:00:20:32:
                    22:d1:97:27:ff:33:0e:2f:2d:81:ba:e9:a2:91:93:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         cb:0d:da:da:1d:d5:b8:dd:33:70:d8:b9:0b:ad:ab:d4:e7:eb:
         f8:1b:c6:f3:12:a1:96:a6:df:86:2b:4e:4d:6c:8e:73:42:5c:
         cf:ee:e3:57:4c:6c:61:fe:1e:0f:9c:b7:b8:dc:2b:8c:67:ce:
         b0:76:3f:4b:22:73:7b:c4:2b:7b:ed:13:a8:06:db:b4:82:4b:
         d7:5e:50:9c:b2:35:2b:eb:62:ed:2c:c8:c4:79:3e:e3:fc:ea:
         31:14:95:71:02:8c:91:4e:88:9f:92:08:e2:0f:51:d8:3e:9e:
         fd:3f:55:10:eb:41:4d:ff:0b:34:84:b2:3f:d3:15:69:b9:3d:
         02:53:3d:c9:30:44:7d:c4:4a:f8:93:82:9f:75:c1:fc:00:f7:
         50:d6:3c:9f:d9:8a:1f:18:7a:1a:8e:3d:ab:16:05:be:3c:ae:
         4f:5f:4b:05:55:2d:08:4f:59:df:e0:10:79:e2:4e:32:dd:4f:
         ee:16:a5:f7:52:d5:ce:03:40:de:be:04:f1:5e:c7:85:ea:84:
         01:9d:31:d5:2b:20:50:cb:6c:66:36:6e:26:d0:95:47:da:85:
         53:0b:dc:3b:16:06:2c:12:e5:42:b0:f7:da:62:08:56:85:6c:
         78:c6:b8:59:07:1e:37:dd:11:f1:e8:7d:e7:0d:43:7b:e6:7a:
         c4:f5:bf:a0
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUE/2in4gqNEsFGKUNIZkm0YsYkq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNTE0NThaFw0yNTA0MDMwNTE5NThaMDMxMTAvBgNV
BAMTKDVBM0YwMTA3OTkyQjU1OTRBQUM4MTI3RDJENDk4NDM0MzcwN0QxQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T37pv2vTIUKS8OTHmghwMSBx
oG3rBlEBpxiAyVi7DetVgbHMysexcjCakQBHl6MXhPzxif6m+bhd+N+hIG5i8JqF
LCXiuJtf3vRrBbVhx6oIlaR6WacDqTF/uR/PcBVc6GaWz/iggaSqhWfplu7evoIK
mqZnsWBIlCs/o3w5hWabDFfddyU/Zxb2mRGqTgt1GhTAonyyWVGtQqv9mswY61yi
1bu9NjmO/uMHbiuI45gSrM9ik0gx/8ZJtd5+W/C8SWRZ01Z2zMIklY74tTIiu3Zr
0QCw4FX9YsZG1jypxKU1+IEfoRrM5sSvngAgMiLRlyf/Mw4vLYG66aKRk1YbAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaPwEHmStVlKrI
En0tSYQ0NwfRoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmhC
c3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1M3AvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zo
QnNxVVRLVTdWS3prQmNKUVJwRE5DaWdyVGdjYlZYWnB2V3pOM25hNTNwLzEvNUEz
RjAxMDc5OTJCNTU5NEFBQzgxMjdEMkQ0OTg0MzQzNzA3RDFBMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQAyACzAwQByAaGAwQAyYNqMA0EAgACMAcDBQAoBH2g
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQk1TANBgkqhkiG9w0BAQsFAAOCAQEA
yw3a2h3VuN0zcNi5C62r1Ofr+BvG8xKhlqbfhitOTWyOc0Jcz+7jV0xsYf4eD5y3
uNwrjGfOsHY/SyJze8Qre+0TqAbbtIJL115QnLI1K+ti7SzIxHk+4/zqMRSVcQKM
kU6In5II4g9R2D6e/T9VEOtBTf8LNISyP9MVabk9AlM9yTBEfcRK+JOCn3XB/AD3
UNY8n9mKHxh6Go49qxYFvjyuT19LBVUtCE9Z3+AQeeJOMt1P7hal91LVzgNA3r4E
8V7HheqEAZ0x1SsgUMtsZjZuJtCVR9qFUwvcOxYGLBLlQrD32mIIVoVseMa4WQce
N90R8eh95w1De+Z6xPW/oA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org