Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5956AA911D7CE03EE9093B306A7F175EAB7AFF0C.cer
File:                     5956AA911D7CE03EE9093B306A7F175EAB7AFF0C.cer (raw, json)
Hash identifier:          BonmzkkDKmna/IHc0079UYjvqk/3Eydk1G/9va0zs7U=
Subject key identifier:   59:56:AA:91:1D:7C:E0:3E:E9:09:3B:30:6A:7F:17:5E:AB:7A:FF:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77D68A7C0BECDA17803841D9E05B91E27481A234
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/5956AA911D7CE03EE9093B306A7F175EAB7AFF0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 May 2024 12:55:43 +0000
Certificate not after:    Fri 16 May 2025 13:00:43 +0000
Subordinate resources:    AS: 269567
                          IP: 45.188.12.0/22
                          IP: 2804:668c::/32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 01:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:8a:7c:0b:ec:da:17:80:38:41:d9:e0:5b:91:e2:74:81:a2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 17 12:55:43 2024 GMT
            Not After : May 16 13:00:43 2025 GMT
        Subject: CN=5956AA911D7CE03EE9093B306A7F175EAB7AFF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:86:30:b7:93:83:f5:3e:47:6f:ca:c9:c8:
                    c6:6c:34:d9:63:51:2b:a2:1b:96:77:ac:13:6b:d4:
                    89:21:19:fc:80:ab:87:ef:dc:63:75:e8:3f:0c:fb:
                    5d:00:99:fd:53:c5:5d:7e:66:20:77:0c:4a:64:96:
                    35:e9:73:98:96:6d:5d:fe:e8:ae:5b:67:38:50:83:
                    90:4f:1c:ba:96:29:72:dd:75:40:bb:c6:9c:b0:33:
                    98:cc:b9:4c:28:0f:39:ea:21:61:c8:9e:a8:9a:19:
                    65:37:93:45:f3:75:0e:6d:9e:3b:4a:ef:cb:1c:80:
                    29:c2:8d:5b:6e:9d:fe:ac:5c:68:f3:7b:22:f8:2a:
                    52:ac:22:4d:19:07:22:62:eb:82:57:f6:f7:c0:8b:
                    08:64:cf:0e:9e:f0:8a:43:63:2a:d6:59:df:07:69:
                    f6:1a:aa:56:7a:c9:4e:52:ea:88:2f:ae:04:e9:2e:
                    e7:db:e7:69:99:19:8a:52:8e:03:dc:be:25:59:b2:
                    1a:b5:e0:54:cf:8a:86:06:a5:a2:ab:62:85:87:6b:
                    02:75:2a:86:75:d1:b3:7f:dc:d8:7b:9e:e2:00:04:
                    67:52:e9:09:f2:f6:cc:80:22:be:c1:a6:72:b1:c5:
                    ad:82:50:d2:07:55:d4:0a:5f:44:c2:37:db:8a:17:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:56:AA:91:1D:7C:E0:3E:E9:09:3B:30:6A:7F:17:5E:AB:7A:FF:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/5956AA911D7CE03EE9093B306A7F175EAB7AFF0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.12.0/22
                IPv6:
                  2804:668c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269567

    Signature Algorithm: sha256WithRSAEncryption
         cd:e5:1c:0f:fa:a8:2d:18:7e:c8:8b:81:7f:a5:f1:aa:c5:31:
         2d:db:c5:ed:13:c9:75:1e:71:6f:33:83:7d:f8:88:a9:56:d7:
         5c:ee:8d:7e:bd:1a:90:29:0a:4a:21:e4:3a:99:1e:56:93:6d:
         ab:7a:58:bb:34:f6:93:90:0f:ca:e1:34:45:f6:7e:1e:6d:46:
         99:2f:46:1e:c7:95:dd:26:99:21:60:d2:43:1e:76:77:80:8b:
         7c:db:17:16:84:09:5f:57:db:24:c4:1e:31:43:89:24:bc:60:
         0d:ef:5f:9e:50:ea:d2:21:d0:fa:dc:7a:74:5e:4c:19:1c:20:
         61:aa:3d:8a:b0:a8:2a:61:91:37:e9:f6:c6:88:8b:46:99:2f:
         0b:65:cd:5f:e9:f2:39:ad:b0:01:a8:93:83:97:ff:98:60:1f:
         d8:d0:12:db:0a:45:c5:23:35:d2:7c:55:ff:5c:62:fa:3e:bb:
         fe:a9:68:3b:12:f9:37:37:aa:8b:32:51:c8:42:6f:a2:f1:9e:
         ce:58:49:be:33:7c:30:99:d7:50:0a:f1:4f:7e:a6:2c:78:25:
         b8:8e:e9:cc:21:89:2c:d9:8d:1b:fc:74:7a:5f:db:00:bf:b2:
         71:74:bb:bb:c0:87:c7:11:61:3d:e2:8b:bc:5e:1c:a7:56:5a:
         d2:ad:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org