Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.cer
File:                     5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.cer (raw, json)
Hash identifier:          a7FykSHhN3bY7CfcF2nMZ78X/42+u17J+YCbTKBRkVY=
Subject key identifier:   5B:23:C3:6E:85:0E:FC:7F:8B:7E:5B:CF:98:9C:E2:45:95:36:FA:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C17A3ECD6F38663C3502543B99DF1C0DB3834C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:42:31 +0000
Certificate not after:    Wed 02 Apr 2025 20:47:31 +0000
Subordinate resources:    AS: 268571
                          IP: 45.163.160.0/22
                          IP: 2804:533c::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 05:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:17:a3:ec:d6:f3:86:63:c3:50:25:43:b9:9d:f1:c0:db:38:34:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:42:31 2024 GMT
            Not After : Apr  2 20:47:31 2025 GMT
        Subject: CN=5B23C36E850EFC7F8B7E5BCF989CE2459536FA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:be:bd:c0:a7:b9:02:4d:3d:a1:bf:bd:cd:
                    91:4f:08:f2:d0:f8:01:ec:37:6f:4c:e1:2b:c0:75:
                    93:2f:2a:3e:64:58:30:44:d9:79:63:cb:54:12:61:
                    07:34:5c:28:1d:4f:bc:40:96:65:73:49:1c:f0:86:
                    05:f3:93:ca:93:27:fd:6b:c6:b7:cc:c8:ab:45:6e:
                    e1:b5:dc:40:40:85:3d:7f:1f:9a:f9:2a:80:e0:95:
                    4c:62:11:9c:d8:73:a2:e1:20:62:33:e2:15:c8:ea:
                    69:57:9c:79:5a:8a:a1:7a:94:1c:e9:0a:ef:f9:cc:
                    93:00:41:23:14:6d:98:e2:c9:1f:32:2b:52:3b:50:
                    32:5d:7d:2b:39:4f:fb:31:40:bb:fc:d1:62:c8:ae:
                    90:e4:b4:99:49:79:f0:ca:b6:31:72:30:d4:6b:62:
                    b5:78:57:83:73:e6:7d:d6:5b:c2:8d:c1:65:29:24:
                    9a:71:15:89:51:63:c4:b3:21:e2:9a:c5:d8:16:c2:
                    2d:da:f1:16:b8:1b:4e:4e:4e:83:f5:c1:ce:6b:3e:
                    0c:52:f3:d9:7e:a0:23:bb:42:8b:7c:43:22:36:cb:
                    fe:82:94:f7:30:77:72:ce:5c:05:59:ad:91:cb:04:
                    2f:a3:79:c4:5a:44:41:58:bb:7a:95:b0:a6:9f:eb:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:23:C3:6E:85:0E:FC:7F:8B:7E:5B:CF:98:9C:E2:45:95:36:FA:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.160.0/22
                IPv6:
                  2804:533c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268571

    Signature Algorithm: sha256WithRSAEncryption
         cb:4e:87:8d:11:e5:6a:4c:41:2d:4b:4a:8b:66:17:5f:28:ac:
         d5:16:6e:23:c8:8d:67:da:92:67:ee:05:d8:f7:cc:fc:0f:bf:
         c3:df:0d:93:08:f8:98:ac:04:e6:ee:2a:8b:99:ae:04:10:7a:
         3e:27:c7:df:41:23:ac:d0:ca:f6:66:57:bc:09:90:16:e5:d5:
         dc:37:3d:e4:98:7d:7d:9a:44:99:bf:80:2c:af:55:f7:d4:2e:
         ed:8c:91:b9:92:c8:9b:55:28:d5:9d:43:7d:bc:39:86:5d:bf:
         ae:cd:c9:8d:9f:57:61:bc:a6:0c:00:1b:9b:96:61:c1:99:1a:
         f3:24:ba:c8:70:4d:62:69:a4:a2:99:22:0e:20:2f:4c:23:a4:
         ab:88:68:00:5a:5c:dd:71:44:78:54:94:42:86:22:4b:42:dc:
         70:b2:97:59:e3:53:2e:96:08:00:5a:e1:ca:29:05:08:43:bd:
         35:df:06:99:e7:37:03:14:3a:ae:ec:df:72:ce:e4:c3:ca:e6:
         74:3f:9a:e0:52:a1:4c:87:6f:24:ca:18:20:5d:a0:4d:80:f6:
         2b:f9:b6:35:0d:22:59:81:6e:6e:e2:bb:f1:c0:5f:c9:54:06:
         7b:01:bf:d1:b4:83:2c:ba:8a:74:6e:c9:8f:ef:69:94:ea:6e:
         9f:b5:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org