Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.cer
File:                     5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.cer (raw, json)
Hash identifier:          Q4YBMRNbWh6+r8TNahRBE/7ccfnHLs55vSD86I9i70E=
Subject key identifier:   5A:4B:AE:49:80:AE:3E:48:17:72:9E:29:F0:DB:87:58:F0:C3:C0:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CC40F270979C3282E33FFC1EF0A964F22473255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2024 23:42:07 +0000
Certificate not after:    Wed 09 Jul 2025 23:47:07 +0000
Subordinate resources:    AS: 263459
                          IP: 177.190.168.0/21
                          IP: 2804:1224::/32

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 12:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c4:0f:27:09:79:c3:28:2e:33:ff:c1:ef:0a:96:4f:22:47:32:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 23:42:07 2024 GMT
            Not After : Jul  9 23:47:07 2025 GMT
        Subject: CN=5A4BAE4980AE3E4817729E29F0DB8758F0C3C067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:5c:00:98:b1:f5:da:61:bc:6e:f2:51:8c:
                    eb:a4:1b:ca:65:65:1f:17:49:43:da:a8:82:7c:2a:
                    55:90:08:4b:74:6a:bc:72:2b:79:83:49:a1:62:43:
                    0b:dd:ce:6b:76:6f:cb:d4:38:0b:85:da:fa:d6:0c:
                    57:a5:c7:27:a5:7d:ae:e5:94:00:8f:86:e4:5f:2a:
                    bf:0e:ea:5c:cd:46:03:f1:71:32:b5:70:28:4d:28:
                    39:e1:6e:3c:21:d1:36:58:40:36:ce:57:29:87:57:
                    c8:53:09:b7:11:1a:ac:70:40:70:c8:b6:4c:ca:3f:
                    0b:bc:3f:d5:ad:36:70:24:fc:77:86:30:38:d3:a8:
                    47:58:58:a5:06:22:35:76:af:70:be:91:af:73:f6:
                    fd:56:18:38:96:45:d0:0c:85:47:fa:0b:fd:f4:af:
                    b6:2a:f6:13:15:da:1f:ff:ad:8e:5f:4a:48:fe:04:
                    55:b5:df:79:71:80:34:ad:4c:b5:8f:aa:68:cf:c2:
                    3f:b8:06:d1:a0:8f:78:42:55:e5:9b:cc:c1:cb:0a:
                    51:8a:57:0b:90:32:5a:20:24:33:76:f8:b0:11:a4:
                    f2:db:d2:23:e7:57:10:16:70:e9:11:c7:82:a5:16:
                    5b:e0:49:b1:bd:6a:4a:65:89:ca:cb:a7:ba:7f:44:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:4B:AE:49:80:AE:3E:48:17:72:9E:29:F0:DB:87:58:F0:C3:C0:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/21
                IPv6:
                  2804:1224::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263459

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:7e:71:e8:86:73:4b:a8:7f:f8:ad:62:0d:b7:dd:75:96:
         51:8c:a0:ce:b2:42:8f:3c:8c:87:7d:49:31:b9:e6:44:69:ff:
         93:30:9e:06:d6:f1:d2:fc:c0:59:61:f3:bd:91:58:d3:f2:32:
         38:98:32:cb:3d:f8:13:4a:2d:52:ab:11:18:37:79:33:54:99:
         ab:12:70:af:66:6e:ef:91:a4:41:05:c3:a9:d7:b6:4a:06:b3:
         c4:5a:f6:39:a4:ad:b0:36:66:a3:99:a5:a3:b5:9f:0b:74:5c:
         23:c4:87:fd:37:57:53:2b:dc:63:da:d4:6f:6e:db:de:51:cb:
         8b:5a:dd:00:92:a7:c8:43:7c:3c:81:c8:2e:e2:2d:b4:be:b2:
         0e:cb:ef:d0:10:09:ac:06:75:39:e1:cb:fa:05:0f:3f:01:b4:
         5a:9d:b4:59:c7:fd:7c:a2:1d:4d:f2:ec:2d:bc:1f:cf:81:2a:
         4f:68:e9:0a:bf:db:ea:7e:8d:be:e0:27:f8:7b:61:5a:c4:77:
         41:fc:e3:c0:9a:b0:46:3c:47:78:31:71:7e:4b:42:18:92:0e:
         ae:c4:e4:59:fa:67:80:69:4a:74:68:4e:ba:df:f8:bb:2f:d7:
         c0:e2:16:c9:25:46:d2:7a:6b:be:b5:43:a5:b5:05:fb:64:05:
         d6:57:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:46:33 2024 by rpki-client on console-ams.rpki-client.org