Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/510070C535E134D7C9941777DF3730EC6B804737.cer
File:                     510070C535E134D7C9941777DF3730EC6B804737.cer (raw, json)
Hash identifier:          TdskeTuGJPGLM/RSyeoxrYRpQrCsaa37kFid46Fcplw=
Subject key identifier:   51:00:70:C5:35:E1:34:D7:C9:94:17:77:DF:37:30:EC:6B:80:47:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       504AC734666993051D26A248D5A5FA0584E49402
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/510070C535E134D7C9941777DF3730EC6B804737.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 13:06:11 +0000
Certificate not after:    Mon 05 May 2025 13:11:11 +0000
Subordinate resources:    AS: 266093
                          IP: 45.5.40.0/22
                          IP: 2804:3a84::/32

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 21:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4a:c7:34:66:69:93:05:1d:26:a2:48:d5:a5:fa:05:84:e4:94:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 13:06:11 2024 GMT
            Not After : May  5 13:11:11 2025 GMT
        Subject: CN=510070C535E134D7C9941777DF3730EC6B804737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:aa:fe:01:7a:14:ad:32:cb:cf:34:54:33:
                    95:fb:66:77:a8:a8:2b:13:4c:c7:13:f3:a3:7b:9e:
                    50:ad:39:e7:b9:f9:05:4e:85:58:fd:93:1f:f7:18:
                    e6:8e:d3:f2:f4:89:e3:bc:06:ce:2e:db:af:0b:c1:
                    a2:fc:9c:0a:90:af:20:b0:7b:41:06:66:d6:85:06:
                    0e:56:95:85:c7:26:17:aa:ec:15:dd:c3:f1:23:c0:
                    ad:ef:4a:c4:39:e1:db:e4:af:36:b9:32:da:c1:59:
                    a8:0d:8e:73:97:bc:3a:a6:37:70:78:51:1f:7c:31:
                    4c:8e:1d:44:ec:3e:8f:ac:4e:21:b9:f3:24:ad:49:
                    97:9c:d7:c9:6c:22:45:18:aa:b0:fa:42:96:a8:6c:
                    6b:0e:31:05:cc:2d:d6:98:91:48:21:c9:a9:2d:e9:
                    1f:d5:ba:24:a2:fe:11:73:79:5c:e3:6e:ee:18:d4:
                    9e:93:99:3b:69:62:f3:97:83:57:a0:4c:d2:68:d2:
                    83:8d:93:eb:0d:ac:ff:25:4c:20:42:e4:ef:a3:99:
                    3f:1c:e1:51:50:99:35:95:e7:9d:04:aa:b9:59:1f:
                    99:54:63:7b:99:e5:15:2d:f1:b2:d0:f1:ee:bd:45:
                    d8:cf:64:4b:31:b7:b7:8f:b8:9c:aa:67:bc:cc:92:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:00:70:C5:35:E1:34:D7:C9:94:17:77:DF:37:30:EC:6B:80:47:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/510070C535E134D7C9941777DF3730EC6B804737.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.40.0/22
                IPv6:
                  2804:3a84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266093

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:0d:50:94:e5:b0:27:51:3e:f9:d0:c1:ae:7f:68:4d:73:
         97:25:6a:8f:9e:f3:f1:e4:87:9f:34:a8:df:1e:1e:f8:16:19:
         09:30:29:b0:d9:40:16:4d:f5:0e:e7:e9:17:69:fc:d4:88:d8:
         82:ea:0e:0c:17:a2:e4:4c:66:f8:8f:2d:3d:e8:fd:cc:83:83:
         90:c6:55:b7:b5:2b:f2:d3:45:fe:8f:5b:0d:b4:12:e1:eb:9c:
         5e:05:df:b0:ce:b9:e6:de:16:06:6d:70:01:82:0a:71:b6:af:
         66:b3:bc:10:3f:ca:9f:4f:81:c5:ea:36:23:6d:e6:ff:23:41:
         d1:fd:8d:c8:ab:8e:3f:b8:23:18:d2:fe:82:2d:27:a2:9e:5b:
         cb:5e:83:34:bb:3d:04:2a:bb:0d:f0:fb:b4:de:65:0b:ed:21:
         12:7d:ce:b4:a0:bc:00:dc:95:10:fb:1a:0c:ef:9e:93:a1:d0:
         d5:bf:8c:8c:3b:95:59:2b:25:0f:3b:6b:c3:fd:13:60:66:73:
         26:40:38:0e:f6:40:7f:bb:f4:fa:74:3f:5a:48:65:80:75:ca:
         aa:02:bc:9a:eb:05:04:ca:bd:6b:f9:fd:aa:57:e9:b9:8e:82:
         cd:bb:f9:4e:e7:d1:de:46:f8:55:2f:3f:97:c4:61:d2:40:4d:
         c0:4d:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org