Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AE731E8E9FF77141833C41154EB6ED7C33E5095.cer
File:                     5AE731E8E9FF77141833C41154EB6ED7C33E5095.cer (raw, json)
Hash identifier:          ceJg0rdnZxS93yzti7om+HEHUgCbp/uD4iCiSx6DRcE=
Subject key identifier:   5A:E7:31:E8:E9:FF:77:14:18:33:C4:11:54:EB:6E:D7:C3:3E:50:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6195CAA91B492EE25150C0B5DD7ABFFCFE8595C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/5AE731E8E9FF77141833C41154EB6ED7C33E5095.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jun 2024 12:16:55 +0000
Certificate not after:    Tue 03 Jun 2025 12:21:55 +0000
Subordinate resources:    AS: 52910
                          IP: 186.251.38.0/24
                          IP: 2804:1f3c::/36

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 11:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:95:ca:a9:1b:49:2e:e2:51:50:c0:b5:dd:7a:bf:fc:fe:85:95:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 12:16:55 2024 GMT
            Not After : Jun  3 12:21:55 2025 GMT
        Subject: CN=5AE731E8E9FF77141833C41154EB6ED7C33E5095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:10:c0:39:e4:9a:a0:ee:75:58:61:3c:e4:
                    c8:5e:c9:31:2a:de:9b:e9:7d:0e:ca:b9:e9:76:a0:
                    c0:f7:cc:f5:54:d9:75:ee:be:fe:6b:20:c6:68:ef:
                    7f:f1:34:ed:01:24:25:d9:e8:71:e5:c0:ba:ca:49:
                    da:32:fd:ef:8a:f7:61:be:a2:17:22:cd:a4:01:57:
                    c4:30:07:46:41:3b:78:ee:5b:03:4c:08:f7:ca:a4:
                    54:12:08:dc:d8:16:7e:8b:08:90:97:8a:49:ea:b9:
                    70:0b:23:cb:c5:66:3c:3e:49:f1:08:85:97:7b:5e:
                    ba:c7:f6:1f:35:34:e7:d2:40:25:d7:55:df:2f:86:
                    c7:2b:61:28:6c:a0:1f:94:81:7a:14:89:62:4b:42:
                    b2:ba:2f:9a:ea:4f:96:40:d7:29:37:b1:1d:c6:49:
                    fa:2b:79:6a:a4:6a:bd:88:5d:69:40:64:ee:34:36:
                    c7:7c:93:e2:0a:5e:38:59:db:a5:24:12:dd:fb:fc:
                    de:88:de:cf:ae:28:42:7f:3c:2f:92:41:b8:2e:13:
                    36:df:74:03:21:4f:11:8e:b5:96:13:85:f5:a2:31:
                    0e:4e:69:d1:0e:f0:e1:54:07:b9:d7:2d:b9:32:99:
                    90:df:aa:f5:9f:3b:58:84:0c:0e:05:f2:03:21:8a:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:E7:31:E8:E9:FF:77:14:18:33:C4:11:54:EB:6E:D7:C3:3E:50:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/5AE731E8E9FF77141833C41154EB6ED7C33E5095.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24
                IPv6:
                  2804:1f3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52910

    Signature Algorithm: sha256WithRSAEncryption
         28:41:37:f3:7d:d7:c4:72:d9:fd:3b:2b:8e:1a:74:ea:39:c8:
         85:8a:dd:32:32:63:41:9e:db:1f:43:26:f4:f7:f9:30:f7:a6:
         64:0b:11:c6:f3:17:46:05:85:a1:42:bc:eb:95:bd:7f:cb:ab:
         87:8d:d5:f0:69:21:d8:3a:35:a0:e9:97:3d:fe:33:c7:90:d3:
         d2:2e:2c:12:7d:02:c0:6e:d3:9a:fe:c4:7a:a3:d2:56:30:f4:
         a0:6f:1b:3b:94:fd:4c:6e:4d:5c:51:5c:12:58:27:1c:cd:31:
         e4:98:37:db:95:eb:84:7f:3e:cb:6f:b5:0c:eb:6e:97:20:31:
         5e:ec:a6:07:6b:aa:20:ab:d4:23:a4:3b:b6:7d:15:11:c7:3b:
         4f:07:e8:e8:6d:08:e2:55:2b:84:f5:d8:0e:d9:a5:f9:10:45:
         a7:0e:e6:5a:98:75:9e:db:68:07:d4:fa:63:0b:09:b2:e5:df:
         6f:03:d3:86:a0:61:a4:ad:5d:2f:ff:ff:16:23:c2:54:a3:30:
         62:4f:97:2f:9d:d3:08:df:55:19:75:fb:3c:24:d2:f8:06:8c:
         3f:d2:1c:3a:14:b7:68:36:e3:48:0c:d3:8c:94:31:8f:ad:95:
         b8:08:da:03:29:d1:db:3d:9d:23:ef:33:de:0f:00:0e:79:56:
         c1:16:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 13:36:47 2024 by rpki-client on console-fra.rpki-client.org