Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer
File:                     5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer (raw, json)
Hash identifier:          E+siKH0XWVHb9btrTqFZMwwdmQl8quaLVe/FL3HFZH8=
Subject key identifier:   5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       409C7C59AE4C8D6FAA160BED71A9A537C1F430AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jul 2024 15:30:40 +0000
Certificate not after:    Thu 17 Jul 2025 15:35:40 +0000
Subordinate resources:    AS: 265287
                          IP: 168.90.132.0/22
                          IP: 2804:2d84::/32

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 10:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9c:7c:59:ae:4c:8d:6f:aa:16:0b:ed:71:a9:a5:37:c1:f4:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 18 15:30:40 2024 GMT
            Not After : Jul 17 15:35:40 2025 GMT
        Subject: CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:6b:20:81:f5:e0:d3:05:1e:5a:49:0d:e0:
                    b8:3d:10:02:52:f4:6f:02:70:e2:9f:c2:e4:e5:c0:
                    97:ac:9d:2f:b1:cd:a4:e3:91:36:e3:dd:83:72:04:
                    ca:66:e6:b4:b5:ca:43:54:8a:96:a4:97:2e:50:3e:
                    af:32:f9:04:72:02:f0:71:b2:1d:eb:d6:09:d4:f5:
                    2d:b5:3e:16:05:76:35:cd:7c:6c:27:c3:f2:63:78:
                    a7:cc:19:ed:31:c1:28:2a:66:6d:79:ad:f2:be:3c:
                    91:7f:b0:00:f0:57:4a:e7:e5:c9:93:0e:9c:a0:a4:
                    31:83:48:47:69:db:a0:12:30:55:18:ab:7a:c2:24:
                    5e:07:db:be:21:b6:32:8c:84:bc:45:4a:35:57:d6:
                    ee:91:95:b2:08:5a:ca:85:df:bf:de:f9:70:b2:fc:
                    35:33:bb:9c:cb:e8:92:bd:85:72:3d:eb:20:95:8d:
                    9c:10:2f:f8:43:ec:05:09:38:54:1b:de:2d:00:a7:
                    22:e4:24:db:4b:42:5d:99:af:90:de:66:0e:d9:eb:
                    3f:e0:e2:44:d1:37:83:7e:80:27:d1:12:fe:c3:fb:
                    d7:0c:83:9e:7c:2a:f6:12:ed:e2:4b:7e:ce:25:dc:
                    fb:07:12:37:d4:4c:ff:34:72:6e:af:2e:c4:aa:de:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/22
                IPv6:
                  2804:2d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265287

    Signature Algorithm: sha256WithRSAEncryption
         c9:bf:8d:e8:84:7e:19:f2:16:d2:98:1b:d0:47:dd:97:88:19:
         71:78:ba:43:a8:ac:9b:c2:d0:47:01:65:54:98:2b:14:96:65:
         50:3a:43:7b:bb:3b:88:54:71:d7:a0:56:b2:3e:d4:cf:ab:5a:
         67:78:96:09:a7:64:04:23:df:09:9c:49:f5:17:94:3c:40:c9:
         d1:56:1d:26:ae:12:69:b3:2f:69:df:68:2e:3f:95:3a:b3:93:
         db:70:e1:37:5a:f5:b0:d7:22:e9:3f:76:df:30:36:a0:f3:e1:
         c5:7c:55:f5:8f:bf:6f:b0:e8:d4:3c:17:1b:a8:8c:55:f4:f8:
         94:66:54:28:b8:5a:60:bd:66:88:54:3d:d6:46:6b:fb:d6:24:
         f1:78:26:a0:a4:2d:48:1b:42:f6:4a:4d:23:89:d7:95:87:3e:
         d2:e1:bd:79:8e:d6:9e:15:27:65:d7:14:c7:70:d4:55:59:03:
         b7:61:2d:ae:e7:66:90:82:b7:33:12:17:20:46:54:f6:72:2c:
         a6:cc:f3:c3:07:c2:8d:ee:5a:f7:46:f2:ba:91:fb:f1:24:b1:
         b4:e5:a5:50:62:d1:a0:b0:0b:44:8d:91:24:57:18:e8:9c:4a:
         b2:2d:00:bb:8b:3b:3b:74:b4:1c:9f:2a:f8:57:8f:61:4f:11:
         d2:55:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 14:05:17 2024 by rpki-client on console-ams.rpki-client.org