Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A0404C93988F8D1485906BC43C569B00CE04709.cer
File:                     5A0404C93988F8D1485906BC43C569B00CE04709.cer (raw, json)
Hash identifier:          Qij4/bVeC/gmS9Nucnjg9K3kV02I2Nz+jDj7I/6U4zk=
Subject key identifier:   5A:04:04:C9:39:88:F8:D1:48:59:06:BC:43:C5:69:B0:0C:E0:47:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20D0AF95268CD3B89661EEEDEAC57C4213843CC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/5A0404C93988F8D1485906BC43C569B00CE04709.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jun 2024 23:31:47 +0000
Certificate not after:    Wed 25 Jun 2025 23:36:47 +0000
Subordinate resources:    AS: 269463
                          IP: 45.187.108.0/22
                          IP: 2804:6504::/32

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 19:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d0:af:95:26:8c:d3:b8:96:61:ee:ed:ea:c5:7c:42:13:84:3c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 26 23:31:47 2024 GMT
            Not After : Jun 25 23:36:47 2025 GMT
        Subject: CN=5A0404C93988F8D1485906BC43C569B00CE04709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:e7:92:da:1c:87:3f:7a:0a:6f:72:4a:43:
                    4e:bb:90:f5:45:8d:2a:61:f9:a4:ba:3b:cf:13:e0:
                    bb:20:77:a5:11:98:55:35:d4:52:89:79:64:45:d4:
                    0a:45:f4:48:71:4c:31:de:38:11:d4:d1:15:6a:05:
                    33:16:3b:ec:69:c1:4e:8e:94:4b:47:a6:39:d4:db:
                    49:d3:58:11:51:82:0e:db:07:71:43:45:d4:ba:dd:
                    34:d6:5a:71:29:ad:15:47:c6:68:da:37:6f:fb:16:
                    28:05:cf:22:6f:fa:1e:f6:5c:ad:63:38:e7:44:02:
                    a3:fc:25:2a:f4:32:cf:59:97:bb:b1:97:2a:34:e2:
                    ca:f7:68:ab:09:71:33:94:1e:07:11:e7:07:ab:82:
                    24:25:41:38:b9:27:a8:92:0e:2d:5e:81:12:3f:2b:
                    63:9e:d8:ef:87:f3:b4:a3:95:6d:f4:72:81:33:06:
                    d0:a2:19:ba:cd:24:89:a5:e5:d4:41:9d:de:55:f6:
                    eb:ae:94:12:ed:ce:a0:b8:6d:82:c9:67:0b:10:c7:
                    bc:4e:2d:2b:6e:e6:83:f0:6a:f8:6d:35:85:a7:2e:
                    1f:e8:88:57:fa:1f:0a:f9:fe:29:b2:19:09:73:9a:
                    ec:98:b0:41:06:c0:62:07:96:66:1d:fe:41:9e:b6:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:04:04:C9:39:88:F8:D1:48:59:06:BC:43:C5:69:B0:0C:E0:47:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/5A0404C93988F8D1485906BC43C569B00CE04709.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.108.0/22
                IPv6:
                  2804:6504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269463

    Signature Algorithm: sha256WithRSAEncryption
         b7:4e:53:3b:43:d8:ff:ce:4a:e1:71:62:1c:aa:45:19:e2:c6:
         8e:75:11:41:e3:a1:66:49:44:d8:bb:81:65:a4:ca:e4:fb:41:
         d0:e4:76:aa:06:9f:ea:a7:3b:56:99:9e:98:42:4e:ec:58:9b:
         05:10:78:ec:6c:0a:94:42:99:6a:30:c8:1a:99:89:ba:92:17:
         9e:0e:dc:b7:c8:87:68:84:5b:df:94:1e:f7:4a:29:67:de:89:
         c9:00:3a:29:a8:85:c5:db:3d:dd:68:da:14:cc:d2:1e:f6:d9:
         5e:40:63:e4:d3:ba:2a:d5:e1:31:a2:eb:f7:4a:d3:aa:83:34:
         03:23:b4:db:bd:f6:ec:e6:9c:ea:b6:48:c1:02:09:c5:d7:1e:
         05:4a:88:73:5c:3b:5b:08:32:8c:b9:58:6f:af:c9:ae:f7:3d:
         59:f1:94:79:5d:10:19:59:84:55:bd:a8:1e:b7:a9:df:e0:53:
         df:2b:6c:1a:4e:77:7d:29:c1:d4:fa:5c:a8:1d:5a:d2:e2:7e:
         09:2d:0c:6a:30:55:70:19:b9:1f:24:ad:b1:4e:3e:f4:d5:e3:
         08:79:ba:32:4d:61:b6:47:e8:e1:d6:e3:dd:32:64:04:db:da:
         ad:ee:91:e8:25:e5:3a:5e:68:7b:5a:e7:0f:e1:27:a6:98:aa:
         75:2a:12:ac
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUINCvlSaM07iWYe7t6sV8QhOEPMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjYyMzMxNDdaFw0yNTA2MjUyMzM2NDdaMDMxMTAvBgNV
BAMTKDVBMDQwNEM5Mzk4OEY4RDE0ODU5MDZCQzQzQzU2OUIwMENFMDQ3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yueS2hyHP3oKb3JKQ067kPVF
jSph+aS6O88T4Lsgd6URmFU11FKJeWRF1ApF9EhxTDHeOBHU0RVqBTMWO+xpwU6O
lEtHpjnU20nTWBFRgg7bB3FDRdS63TTWWnEprRVHxmjaN2/7FigFzyJv+h72XK1j
OOdEAqP8JSr0Ms9Zl7uxlyo04sr3aKsJcTOUHgcR5wergiQlQTi5J6iSDi1egRI/
K2Oe2O+H87SjlW30coEzBtCiGbrNJIml5dRBnd5V9uuulBLtzqC4bYLJZwsQx7xO
LStu5oPwavhtNYWnLh/oiFf6Hwr5/imyGQlzmuyYsEEGwGIHlmYd/kGetsPfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaBATJOYj40UhZ
BrxDxWmwDOBHCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2lD
d2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhNMk0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dp
Q3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAvNUEw
NDA0QzkzOTg4RjhEMTQ4NTkwNkJDNDNDNTY5QjAwQ0UwNDcwOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbtsMA0EAgACMAcDBQAoBGUEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQclzANBgkqhkiG9w0BAQsFAAOCAQEAt05TO0PY/85K4XFi
HKpFGeLGjnURQeOhZklE2LuBZaTK5PtB0OR2qgaf6qc7VpmemEJO7FibBRB47GwK
lEKZajDIGpmJupIXng7ct8iHaIRb35Qe90opZ96JyQA6KaiFxds93WjaFMzSHvbZ
XkBj5NO6KtXhMaLr90rTqoM0AyO027327Oac6rZIwQIJxdceBUqIc1w7WwgyjLlY
b6/Jrvc9WfGUeV0QGVmEVb2oHrep3+BT3ytsGk53fSnB1PpcqB1a0uJ+CS0MajBV
cBm5HyStsU4+9NXjCHm6Mk1htkfo4dbj3TJkBNvare6R6CXlOl5oe1rnD+Enppiq
dSoSrA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:45 2024 by rpki-client on console-ams.rpki-client.org