Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5883FA86B382408D76B9CD943F7DC5442CD83E4A.cer
File:                     5883FA86B382408D76B9CD943F7DC5442CD83E4A.cer (raw, json)
Hash identifier:          nnxmanjaDyOG8i3jzeWE3b6c+rm0c2/t+aRo9ZnFGow=
Subject key identifier:   58:83:FA:86:B3:82:40:8D:76:B9:CD:94:3F:7D:C5:44:2C:D8:3E:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C177CA0782C62E9BAFC1F60232F6A104114A3E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/1/5883FA86B382408D76B9CD943F7DC5442CD83E4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:54:29 +0000
Certificate not after:    Wed 02 Apr 2025 18:59:29 +0000
Subordinate resources:    AS: 264971
                          IP: 200.219.149.0/24
                          IP: 2801:80:1920::/48

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 12:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:17:7c:a0:78:2c:62:e9:ba:fc:1f:60:23:2f:6a:10:41:14:a3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:54:29 2024 GMT
            Not After : Apr  2 18:59:29 2025 GMT
        Subject: CN=5883FA86B382408D76B9CD943F7DC5442CD83E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:66:0e:6c:81:cb:29:f7:d4:9e:3c:95:58:
                    b8:f8:04:99:7c:68:26:91:43:4c:71:49:b3:c9:ad:
                    29:e3:df:8a:44:fa:00:e6:56:76:c7:80:5f:58:cf:
                    d1:f1:17:56:7c:ee:8c:8e:0b:c3:30:f7:9e:0d:6e:
                    d6:e4:dc:7f:32:be:70:fc:a6:1c:4a:86:30:8f:be:
                    61:3a:c5:13:e3:7e:a8:11:ce:b6:36:e1:cd:6d:56:
                    55:aa:13:b9:34:5f:f7:77:08:97:26:6f:d7:65:67:
                    07:b8:86:61:2d:35:7f:b6:07:43:ff:d4:fb:27:b2:
                    97:4b:55:92:fe:d4:88:1d:9a:70:70:bc:d8:e0:40:
                    df:af:f5:f4:b8:e8:0a:71:57:77:78:30:b6:ab:81:
                    e6:d5:5a:4f:04:b4:48:70:c2:56:5f:4d:66:d9:db:
                    8f:a6:6c:4e:34:4f:2d:80:5f:47:f6:e4:de:d5:83:
                    d1:ec:87:e5:6a:0f:69:dc:b4:57:26:9e:b3:e0:3d:
                    54:f9:93:02:6a:a5:0b:40:9b:af:19:74:8c:48:24:
                    86:fd:a1:7a:a2:63:09:ee:a8:65:9b:69:b6:2c:f3:
                    29:05:fa:51:86:5f:b6:c6:71:56:b8:a4:a7:3b:37:
                    86:64:48:fb:37:19:5c:2d:1d:3a:00:90:87:98:2f:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:83:FA:86:B3:82:40:8D:76:B9:CD:94:3F:7D:C5:44:2C:D8:3E:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/1/5883FA86B382408D76B9CD943F7DC5442CD83E4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.149.0/24
                IPv6:
                  2801:80:1920::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264971

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:c8:0e:c9:4e:45:ef:8e:e5:66:ff:d3:f5:23:e2:c1:a6:
         ea:b9:a2:8c:06:44:2e:9e:60:06:19:92:63:22:23:ec:58:bf:
         52:15:a0:d6:dc:9a:45:ce:0a:37:a7:75:76:ba:df:38:33:c9:
         e8:b7:0b:20:c0:50:b2:54:d3:89:bb:73:cd:57:c0:c3:e8:df:
         de:2e:c4:91:fd:1f:46:c5:2b:04:53:79:c3:57:da:54:43:8e:
         88:3a:79:83:5e:21:05:8b:75:ec:2b:20:7d:14:cb:da:f0:db:
         fe:97:0e:a3:05:77:7b:81:2b:84:62:26:91:b4:79:24:77:e6:
         f4:34:4e:25:c7:8d:01:90:51:2b:dd:e3:10:0e:dd:db:8c:22:
         57:23:c2:48:12:18:d5:8b:f6:b3:5d:06:1e:17:8b:c7:d9:f8:
         3a:80:d5:11:57:e1:eb:ca:b8:93:cc:f1:b1:02:85:00:5e:4d:
         fb:7d:56:d6:89:3a:1d:a9:ac:6c:37:02:8a:f6:9e:68:ea:90:
         28:82:ee:17:5d:ee:48:ac:65:09:2d:16:3c:89:61:f2:95:91:
         01:4d:99:97:93:61:45:0d:ee:4f:7b:2e:61:cd:be:d2:66:0a:
         f5:07:2f:e0:4a:cf:f2:e2:72:58:b3:d4:37:65:61:ab:7a:74:
         f4:37:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org