Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.cer
File:                     5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.cer (raw, json)
Hash identifier:          NupP3XXRNFtwzMQJJalEzSpLe8+CBt3MN6Y6gA6NezE=
Subject key identifier:   5A:D4:46:F3:BE:E5:4E:EF:84:CB:0C:3F:8F:7F:50:E3:AA:1C:EF:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FDF4995CC63CC95A9E650D8A93C908A8E6B06AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 13:38:34 +0000
Certificate not after:    Thu 15 May 2025 13:43:34 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:df:49:95:cc:63:cc:95:a9:e6:50:d8:a9:3c:90:8a:8e:6b:06:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 13:38:34 2024 GMT
            Not After : May 15 13:43:34 2025 GMT
        Subject: CN=5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:cf:3c:7a:3b:6f:23:74:17:0a:3d:f4:19:
                    cf:70:a3:01:84:38:39:99:6f:dd:d3:20:36:4b:7c:
                    45:32:c5:f9:3c:23:34:b6:27:7b:57:ac:a1:8c:59:
                    0a:ef:e2:a5:94:13:66:2a:0d:15:83:ed:50:ff:a5:
                    e7:1c:e1:e8:8f:e4:5b:de:70:02:08:a7:7c:2e:e5:
                    b3:b7:bb:d0:a7:34:90:41:2a:48:18:77:d3:b4:13:
                    67:c3:4a:85:9c:5f:05:f3:b0:c7:a9:27:9b:ac:5e:
                    d7:74:00:db:fe:9d:4a:e1:8f:a7:4b:4f:44:c6:87:
                    2e:a2:07:e7:23:fa:4a:ea:5f:f9:26:1e:18:dc:27:
                    c6:6c:ba:f0:78:74:ec:80:83:0f:e4:e9:c4:c8:4f:
                    e9:ee:bf:47:ba:97:bb:95:28:87:63:5a:34:22:0e:
                    02:65:2b:14:66:fc:00:43:70:a0:26:c8:85:ba:77:
                    21:47:95:7c:e1:a7:91:b9:b6:40:23:80:f1:91:42:
                    d0:64:ae:8d:70:0a:a1:8b:e4:34:aa:f7:d2:f3:5a:
                    ec:ff:86:f4:95:b4:59:b5:36:88:8b:89:eb:c1:4b:
                    5e:b7:cf:0a:ef:22:d0:64:0d:53:b5:cf:7e:52:7f:
                    f3:fb:6f:e4:55:0b:b9:69:0d:d9:65:5f:69:89:af:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:D4:46:F3:BE:E5:4E:EF:84:CB:0C:3F:8F:7F:50:E3:AA:1C:EF:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5AD446F3BEE54EEF84CB0C3F8F7F50E3AA1CEF11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:6e:83:7a:01:71:db:0f:ef:18:0b:20:c4:34:bc:72:e8:
         27:a4:a8:55:11:bb:bb:4f:50:db:6b:6d:71:90:79:46:1e:b9:
         98:68:f4:21:9c:5c:f6:35:26:c4:4a:c2:88:da:80:21:4b:15:
         a6:28:05:6c:39:14:b1:d9:0b:70:c6:8a:d7:a9:b1:62:4c:3b:
         eb:0b:52:ca:4b:ca:22:a0:39:2e:48:10:6d:8f:9d:dd:21:41:
         df:75:11:78:20:9c:83:28:3e:09:cb:47:ab:0c:86:18:1b:35:
         63:fc:52:a1:4f:09:62:e1:52:1f:07:eb:62:71:bd:93:ed:25:
         a5:93:73:8c:9d:3f:48:66:d0:39:d8:a0:69:93:be:1a:54:da:
         cb:ff:ae:14:aa:8d:7a:e4:d0:ab:21:f9:b7:d8:82:2b:79:50:
         04:82:5b:59:9e:d5:af:00:07:26:8b:af:33:d7:b0:bf:ba:02:
         25:44:bc:3f:a1:0b:1f:60:3d:20:e3:06:64:38:b4:e3:e9:56:
         25:1e:97:01:75:c2:6e:08:10:8a:6a:08:86:84:0d:a7:ac:6a:
         9e:96:96:69:2d:57:20:af:3d:60:7e:ca:c5:66:9d:73:ed:b0:
         eb:ae:38:7a:83:e9:a4:87:ea:d5:db:69:45:fe:28:58:10:df:
         c0:fd:ae:4f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUP99JlcxjzJWp5lDYqTyQio5rBq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MTYxMzM4MzRaFw0yNTA1MTUxMzQzMzRaMDMxMTAvBgNV
BAMTKDVBRDQ0NkYzQkVFNTRFRUY4NENCMEMzRjhGN0Y1MEUzQUExQ0VGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdO888ejtvI3QXCj30Gc9wowGE
ODmZb93TIDZLfEUyxfk8IzS2J3tXrKGMWQrv4qWUE2YqDRWD7VD/pecc4eiP5Fve
cAIIp3wu5bO3u9CnNJBBKkgYd9O0E2fDSoWcXwXzsMepJ5usXtd0ANv+nUrhj6dL
T0TGhy6iB+cj+krqX/kmHhjcJ8ZsuvB4dOyAgw/k6cTIT+nuv0e6l7uVKIdjWjQi
DgJlKxRm/ABDcKAmyIW6dyFHlXzhp5G5tkAjgPGRQtBkro1wCqGL5DSq99LzWuz/
hvSVtFm1NoiLievBS163zwrvItBkDVO1z35Sf/P7b+RVC7lpDdllX2mJr0axAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa1EbzvuVO74TL
DD+Pf1DjqhzvETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNms4
QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0MlpKZUJSSjVKbjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr
OEEyZVV0QndpNWtBOVBKNnhwYXN6QlNjY3ljck5wdDJaSmVCUko1Sm40LzAvNUFE
NDQ2RjNCRUU1NEVFRjg0Q0IwQzNGOEY3RjUwRTNBQTFDRUYxMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeUYMA0EAgACMAcDBQAoBEgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTWDANBgkqhkiG9w0BAQsFAAOCAQEArctug3oBcdsP7xgL
IMQ0vHLoJ6SoVRG7u09Q22ttcZB5Rh65mGj0IZxc9jUmxErCiNqAIUsVpigFbDkU
sdkLcMaK16mxYkw76wtSykvKIqA5LkgQbY+d3SFB33UReCCcgyg+CctHqwyGGBs1
Y/xSoU8JYuFSHwfrYnG9k+0lpZNzjJ0/SGbQOdigaZO+GlTay/+uFKqNeuTQqyH5
t9iCK3lQBIJbWZ7VrwAHJouvM9ewv7oCJUS8P6ELH2A9IOMGZDi04+lWJR6XAXXC
bggQimoIhoQNp6xqnpaWaS1XIK89YH7KxWadc+2w6644eoPppIfq1dtpRf4oWBDf
wP2uTw==
-----END CERTIFICATE-----
Generated at Tue Sep 10 18:33:30 2024 by rpki-client on console-fra.rpki-client.org