Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
File:                     5A96080087CD6DEA60732C4BB764DEF86100C18B.cer (raw, json)
Hash identifier:          4RtPoqwRnJa0/rsfF0JF0zS3KBl/vyHbsnvUK6cawuk=
Subject key identifier:   5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0642441D98D5E74A856ECEA353A4830E75660182
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:20:22 +0000
Certificate not after:    Thu 03 Apr 2025 09:25:22 +0000
Subordinate resources:    AS: 270544
                          IP: 187.95.208.0/22
                          IP: 2804:6d9c::/32

Validation:               Failed, certificate revoked on Wed 01 May 2024 16:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:42:44:1d:98:d5:e7:4a:85:6e:ce:a3:53:a4:83:0e:75:66:01:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:20:22 2024 GMT
            Not After : Apr  3 09:25:22 2025 GMT
        Subject: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:cd:4d:84:a6:3b:2f:74:f2:48:95:d2:71:
                    f3:90:a9:cd:fa:fd:c6:6c:cb:c6:1f:0b:f2:c8:14:
                    7e:0c:9d:eb:09:4b:be:d4:b3:38:42:e7:f4:42:a0:
                    88:45:c0:0d:1e:68:cf:3b:6c:d1:93:69:da:87:d7:
                    4f:dc:01:d1:c6:81:c1:cd:6a:67:e4:7c:1d:82:cc:
                    16:7a:05:ca:73:fd:ee:a4:4d:99:33:40:a6:a7:c4:
                    06:5d:a5:f8:22:a4:3a:c6:3e:50:ee:a9:9b:34:af:
                    47:bd:c9:6f:ca:29:02:ac:14:4a:07:8e:90:1a:f3:
                    e1:f5:55:25:7e:1a:3e:62:e8:0c:a3:75:73:06:d7:
                    12:a6:6d:89:22:d1:1f:5d:78:3b:1a:26:5e:7d:dd:
                    44:84:57:89:ea:7d:b5:11:6d:c1:4b:74:93:30:03:
                    0b:cc:59:26:56:64:4a:a9:2c:99:b7:ee:ce:b5:b1:
                    47:1b:c9:83:fd:01:b9:ea:24:3a:a7:1d:eb:a0:24:
                    f9:56:c9:e3:26:d6:03:3f:1e:76:12:5b:77:d1:0d:
                    81:20:ca:2b:62:6e:aa:13:c9:9a:56:49:6f:76:86:
                    be:50:4d:a3:1e:43:5f:da:13:44:7f:66:b2:0b:60:
                    2d:94:b5:c4:17:bf:0c:f5:b2:de:30:f3:7c:d1:14:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/22
                IPv6:
                  2804:6d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270544

    Signature Algorithm: sha256WithRSAEncryption
         96:44:38:07:24:b4:cd:91:c9:ec:b6:20:4b:0f:08:76:7a:63:
         d3:09:1d:66:f4:15:5d:28:39:2c:1f:b6:82:28:06:98:b8:f5:
         a1:7a:1a:58:fa:80:dd:22:61:6e:96:9c:d0:42:92:41:af:de:
         f5:c9:1e:c2:6c:81:8f:c9:fd:03:67:69:86:c0:4d:a9:e9:89:
         bf:76:3a:85:2b:29:41:d7:ed:46:e8:29:59:4e:fc:31:2f:a1:
         af:d9:45:67:1c:9d:fa:5e:e3:36:7e:84:0d:43:55:21:e3:18:
         40:64:8a:b2:aa:ce:37:cc:f1:6f:5f:9f:3f:bd:2f:83:db:92:
         89:0e:88:68:9d:f8:88:eb:e1:22:86:2b:af:17:6a:c7:67:5b:
         17:bb:78:46:c3:6e:c2:30:c9:85:4f:b4:bb:73:0d:49:e4:61:
         cb:d8:b2:fa:e4:0f:8f:85:bb:b0:4b:3d:6f:44:9f:25:f3:ee:
         ea:6b:5c:d3:27:63:be:c1:fa:22:61:56:7f:2c:ad:bd:6c:6f:
         97:a1:82:dd:01:c7:ab:c3:6a:6f:3e:4f:7f:0f:d9:e6:b6:1d:
         8a:27:12:91:00:4a:b2:6c:ba:b8:bb:fa:0b:78:58:e7:ef:d4:
         5e:1c:0a:d8:25:11:3c:d5:f2:1b:85:af:5c:60:34:19:20:c5:
         62:16:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org