Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.cer
File:                     2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.cer (raw, json)
Hash identifier:          5WodQLUspIVfOQkJGPzIGpGWW2sQ4+hqp9q+2nMDmYI=
Subject key identifier:   2A:C5:BD:DE:C0:D2:61:35:EE:BA:D9:2B:ED:76:87:5C:3A:E4:39:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0559EB1A82C57CED46B4EB48E54BE8AC692FAFB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 12:52:03 +0000
Certificate not after:    Thu 08 May 2025 12:57:03 +0000
Subordinate resources:    AS: 271022
                          IP: 200.49.24.0/22
                          IP: 2804:7514::/32

Validation:               Failed, certificate revoked on Wed 15 May 2024 08:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:59:eb:1a:82:c5:7c:ed:46:b4:eb:48:e5:4b:e8:ac:69:2f:af:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 12:52:03 2024 GMT
            Not After : May  8 12:57:03 2025 GMT
        Subject: CN=2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:ef:c6:c6:89:23:c9:29:d8:1e:0d:f4:a7:
                    d3:bc:e1:62:c1:a3:db:ba:ff:90:f2:d6:01:c4:a7:
                    c6:fe:20:c8:8b:73:5e:9a:9f:30:9c:a0:b4:f8:97:
                    d6:eb:a5:76:aa:10:84:c2:9a:39:19:0c:d3:1e:2c:
                    d0:30:7f:c6:e1:14:37:ff:f2:5c:1f:11:98:a7:42:
                    e0:6e:1d:a7:c1:a3:76:4d:3d:3e:ed:b4:1d:03:99:
                    ec:eb:0b:28:d1:7e:45:5a:15:f7:07:de:2a:d6:5e:
                    5b:f4:8b:b2:1d:6e:e5:6f:0b:53:1b:9b:cf:ae:a5:
                    7d:0c:9c:39:5d:a9:a6:9a:9e:11:d0:f7:d1:0f:43:
                    c3:a2:30:c9:10:d2:59:dc:72:68:78:f9:1f:79:d4:
                    14:f6:e0:bb:c1:4a:f5:1a:06:b3:8b:19:76:90:75:
                    64:0f:3d:e3:e6:6c:f6:b8:79:9a:1f:10:49:b5:de:
                    42:d8:8c:59:e1:d1:4a:bb:0b:66:92:1b:2f:be:d0:
                    cc:96:bc:a3:6d:de:3e:78:80:11:60:eb:ac:30:4d:
                    a9:a1:c8:4f:27:77:0b:7a:24:de:bb:1b:cc:56:e4:
                    92:79:46:5d:c7:77:79:a9:de:20:5a:06:86:ea:66:
                    47:90:2c:44:88:51:65:f3:49:12:5b:3c:dc:a6:da:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:C5:BD:DE:C0:D2:61:35:EE:BA:D9:2B:ED:76:87:5C:3A:E4:39:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/2AC5BDDEC0D26135EEBAD92BED76875C3AE4390C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.24.0/22
                IPv6:
                  2804:7514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271022

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:d4:52:da:9d:e9:e7:f8:90:ec:cf:a1:6b:4d:49:ea:ea:
         6e:85:b0:ce:58:e8:0c:f5:cc:9c:a2:99:72:5a:7d:fd:d6:c2:
         aa:24:42:6d:a6:13:ad:1b:c7:cc:9f:59:a2:16:f9:bf:45:53:
         d4:cd:cf:ca:25:6c:6c:8b:84:c8:70:c3:ec:bf:8a:b5:9d:10:
         03:71:b1:69:e9:2a:b3:e6:65:ab:2b:64:af:d5:01:a5:8e:6c:
         7a:59:10:c1:26:09:35:3e:cd:31:4a:0f:26:52:3d:c4:f3:52:
         ce:39:5a:ba:7b:9e:fd:17:8f:42:f1:65:95:06:43:59:03:21:
         3c:91:aa:7f:05:15:eb:a8:08:11:d0:40:30:53:f0:44:82:36:
         68:38:4b:d8:75:91:44:aa:3d:8a:62:a5:0e:58:cc:38:11:38:
         e4:d3:29:2e:a5:45:b1:08:f9:36:16:cb:4c:2f:10:00:04:d2:
         63:e2:9e:01:8a:b2:d0:29:61:43:e2:41:a4:2e:15:88:44:e8:
         32:21:b1:dc:2b:04:c7:53:1c:c6:bb:1d:f2:0d:bb:80:df:b9:
         a5:90:5a:43:31:cd:a8:ca:a2:49:2a:3f:87:b8:cf:0b:cb:74:
         76:e9:8d:8e:16:a9:ae:6e:04:a3:b6:4c:59:d2:23:42:15:b3:
         59:d3:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org