Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer
File:                     5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer (raw, json)
Hash identifier:          SurXW/IITrqOiysNIzyblsYoAyWJRIjXKEqIjo4/qcU=
Subject key identifier:   5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       111536C094F7B015A25BD5ED5453C5C1A43C5AEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:36:05 +0000
Certificate not after:    Wed 02 Apr 2025 20:41:05 +0000
Subordinate resources:    AS: 262803
                          IP: 186.250.16.0/21
                          IP: 2804:250::/32

Validation:               Failed, certificate revoked on Mon 20 May 2024 11:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:15:36:c0:94:f7:b0:15:a2:5b:d5:ed:54:53:c5:c1:a4:3c:5a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:36:05 2024 GMT
            Not After : Apr  2 20:41:05 2025 GMT
        Subject: CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:fe:e8:b8:24:c7:9c:dd:ff:7c:4d:c2:a8:
                    fe:93:3b:36:94:67:b7:3e:12:c4:94:1d:13:5f:a6:
                    aa:0b:50:61:8e:be:95:ec:27:00:64:13:b2:dd:cd:
                    17:f9:45:c6:81:4e:2c:4b:92:5f:44:c7:3e:96:2b:
                    65:c3:9a:8d:20:88:15:a3:a2:ba:22:5c:27:a2:45:
                    3d:b9:68:f6:89:48:57:84:df:e3:e7:df:5a:fc:61:
                    17:6d:30:3b:ba:55:14:9a:e0:76:2a:1e:5a:c0:fa:
                    0a:40:9d:09:8d:57:06:a0:5f:5b:10:77:d0:61:24:
                    39:8a:83:94:76:1e:b8:a9:5b:73:c1:8f:d4:8b:43:
                    27:db:58:34:87:20:a0:6c:4e:da:3c:81:04:bc:e7:
                    a1:66:95:e5:1a:5c:c5:25:24:57:9d:b1:b5:2f:c5:
                    fe:78:50:fd:5d:0f:34:b9:8b:66:fa:ca:b6:e6:e9:
                    67:a5:a3:5b:cf:fc:30:03:17:a6:bd:64:95:c9:02:
                    1c:53:99:ea:32:f2:53:77:9b:6b:ba:58:75:8e:19:
                    89:42:68:5c:c6:6c:22:6b:8a:8b:2e:b2:54:bb:85:
                    6c:e3:bf:92:56:58:bb:fb:a1:91:e7:a3:ef:9b:a4:
                    95:cb:23:a3:e1:03:ac:cb:67:4a:11:4e:48:56:15:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.16.0/21
                IPv6:
                  2804:250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262803

    Signature Algorithm: sha256WithRSAEncryption
         84:be:05:2c:79:e7:77:63:10:fe:0a:c5:43:e3:18:3a:b0:98:
         fd:b2:79:28:bc:73:bb:0a:5f:86:76:01:aa:93:b5:28:ed:58:
         d4:31:9b:65:f9:22:51:6e:7f:15:a2:9d:82:f9:b7:c4:30:dc:
         8f:3e:34:aa:ea:d9:2f:05:4e:1b:5c:3d:7f:0d:30:ba:d3:52:
         e7:13:4f:37:d3:d2:f1:63:f1:26:0d:bd:71:6e:1b:3a:b1:9d:
         9b:7c:69:6b:fc:1d:9d:c2:cd:67:b0:2c:f7:b5:3f:9e:4a:26:
         bf:f4:98:79:f7:60:a6:af:dd:dd:6b:5e:3d:b2:23:ff:33:41:
         2f:55:1e:fe:57:89:b8:43:89:6a:5e:06:b5:9e:e5:c4:5b:28:
         17:a0:bc:b3:cf:17:d8:9d:f9:42:0e:56:1e:3d:78:c1:c5:22:
         21:7d:3e:64:d8:40:44:f9:b2:65:a3:34:9e:c0:0f:e5:a6:82:
         76:12:43:32:d7:0f:ee:d4:d5:10:0d:ce:f0:2d:e5:2c:30:a9:
         ba:26:04:a0:b4:b7:48:f6:cf:f1:61:a5:d1:93:46:a9:a6:f7:
         71:db:7c:c8:fa:06:49:ec:81:0f:da:0b:a1:de:73:6d:7d:b9:
         3f:3c:46:f4:bb:7c:0a:10:89:a6:e8:4d:b0:1c:bb:a9:4c:b2:
         b8:75:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org