Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
File:                     0E5A5F5023E75AE879856236916A3D99195F7F79.cer (raw, json)
Hash identifier:          qGuV5TmRGoOOEn+ntuZg1et7rU6c2Da0K7D8UuvD2LA=
Subject key identifier:   0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E0B7EB35695FB4806F9C272C1073A82E23A498C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:43:41 +0000
Certificate not after:    Thu 03 Apr 2025 04:48:41 +0000
Subordinate resources:    AS: 264585
                          IP: 138.36.192.0/22
                          IP: 2804:2200::/32

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0b:7e:b3:56:95:fb:48:06:f9:c2:72:c1:07:3a:82:e2:3a:49:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:43:41 2024 GMT
            Not After : Apr  3 04:48:41 2025 GMT
        Subject: CN=0E5A5F5023E75AE879856236916A3D99195F7F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:de:fc:b4:8d:fb:c1:09:0f:de:cd:4c:4a:
                    fc:df:c6:33:c2:f0:5a:0f:98:d9:8b:7d:82:2a:34:
                    e8:0b:8a:54:a9:03:bc:0a:9a:e2:d3:ad:e3:05:1f:
                    53:56:31:40:a1:b5:d2:13:74:1a:7e:4b:47:0a:b4:
                    d8:a5:05:21:f6:ec:03:74:13:be:6e:37:65:8c:58:
                    f9:d9:a4:f3:f1:a4:7c:8f:90:42:c2:c3:06:fe:07:
                    28:87:f7:3f:ae:38:32:40:75:a8:7f:ff:e1:4a:12:
                    61:cc:7c:12:9e:74:74:07:0c:06:e6:5c:43:80:12:
                    3b:37:fc:5a:c0:3b:ec:b9:4f:13:ab:de:23:91:a9:
                    a3:e6:24:33:f2:bd:8e:39:ab:2c:82:22:f4:fc:d2:
                    83:06:aa:1e:d8:62:13:53:1c:9e:82:81:23:67:b0:
                    6f:7d:da:83:8c:6e:35:95:57:9e:e8:d5:7f:35:75:
                    08:a5:d2:a5:48:85:2a:55:19:42:49:e7:ca:43:a4:
                    57:4e:47:65:a6:f8:60:5b:00:75:d4:ff:05:90:19:
                    14:dd:23:f1:1f:0a:50:9f:3d:73:5a:98:36:ff:96:
                    13:b7:2b:85:9d:40:31:55:aa:25:95:96:ab:43:8a:
                    54:44:ac:5d:da:cf:33:b2:76:3a:5a:2b:74:4c:ae:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22
                IPv6:
                  2804:2200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264585

    Signature Algorithm: sha256WithRSAEncryption
         10:aa:84:0c:a3:be:c9:db:02:66:e9:d4:c3:6a:40:bf:42:da:
         93:1e:54:ca:92:63:72:89:2a:7f:f6:a8:e9:85:6d:84:59:9f:
         26:44:73:6e:04:7f:e7:05:15:b7:62:7c:5c:dd:2b:a0:06:b4:
         ad:19:18:b5:6c:c9:bb:01:ae:fc:d6:b6:6b:72:ee:d7:28:12:
         de:08:07:d6:1f:83:52:e1:bc:60:c4:77:0e:5d:23:59:3e:bc:
         7e:90:9c:33:3e:ef:63:79:f0:05:65:4d:c1:4e:ea:f3:60:29:
         94:38:df:ba:a8:c8:74:89:2c:e4:4b:97:b6:c1:0d:3f:14:d6:
         00:7f:a0:48:da:bf:40:af:d0:6d:db:25:2a:03:61:7b:86:02:
         16:71:9f:16:1b:8a:25:ee:2c:1a:7a:a5:bf:7c:1e:d1:6e:c9:
         8f:c0:4b:89:86:d8:19:e9:5c:a4:a9:b1:ae:17:5c:d0:11:a6:
         60:d2:bc:fe:87:49:51:cb:8e:3d:73:20:07:51:75:3b:74:a0:
         01:06:c1:34:ec:2e:40:6b:08:43:f5:59:6f:83:5e:d2:7e:c8:
         af:db:9f:78:c7:b1:a4:9d:7a:da:0e:d5:0c:ba:0c:bd:3e:2c:
         bc:3a:b4:a5:11:0c:16:ed:c3:a1:f1:25:3c:02:09:d6:08:33:
         0c:0e:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:57 2024 by rpki-client on console-ams.rpki-client.org