Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.cer
File:                     5D18B697A5B088EC543EE5DA1B461A1DD606BE88.cer (raw, json)
Hash identifier:          pj/zCVMOJ1z+fkk6KSqi5m5AbCUiF560fu2NxtkkZAM=
Subject key identifier:   5D:18:B6:97:A5:B0:88:EC:54:3E:E5:DA:1B:46:1A:1D:D6:06:BE:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       549354323BD641DAA390CD65E2E4E2C944D43407
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:31:43 +0000
Certificate not after:    Thu 03 Apr 2025 17:36:43 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 19:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:54:32:3b:d6:41:da:a3:90:cd:65:e2:e4:e2:c9:44:d4:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:31:43 2024 GMT
            Not After : Apr  3 17:36:43 2025 GMT
        Subject: CN=5D18B697A5B088EC543EE5DA1B461A1DD606BE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:b4:db:7c:5c:08:ef:28:7b:1a:68:10:74:
                    a5:cb:10:20:b6:8f:ca:66:65:04:e0:c4:8a:fa:2c:
                    ec:72:03:25:a9:96:63:b8:49:bc:a9:2c:36:44:b7:
                    0c:e3:8e:e2:b6:a8:cc:00:30:3e:63:8f:e3:d9:0e:
                    c0:fe:18:bb:87:2f:f3:68:fc:f4:d5:a2:a1:af:d7:
                    c7:0a:9c:3a:b0:fb:10:ff:69:31:96:82:2d:42:a2:
                    90:bb:ec:33:da:bd:a8:42:1c:d7:3d:a6:76:a1:1a:
                    8e:1d:a1:17:20:3c:e5:55:46:b8:fa:49:86:c2:bd:
                    d8:b8:a8:f4:de:2c:0c:fd:48:3e:af:02:52:c7:70:
                    31:ba:fe:8a:fe:46:75:25:7b:58:ae:d1:85:04:19:
                    86:52:3d:82:99:cc:73:dd:71:b2:a5:08:d7:0c:22:
                    23:1b:bf:87:c7:98:a7:23:28:31:32:96:30:9a:43:
                    a4:03:15:d9:ca:7e:c1:60:9b:74:2b:84:a5:9a:94:
                    99:cb:19:8c:e2:eb:55:1d:57:d1:1b:64:4c:8e:e6:
                    b8:c0:2d:5b:58:65:35:47:c5:82:32:7c:66:5b:7c:
                    07:52:a9:d4:96:77:72:a4:04:99:35:13:a4:60:a5:
                    0e:fc:31:11:18:6f:ba:fc:e3:e9:a4:ee:e7:82:0c:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:18:B6:97:A5:B0:88:EC:54:3E:E5:DA:1B:46:1A:1D:D6:06:BE:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:b6:8b:ac:b3:69:07:f8:fe:c5:1e:32:e6:0f:c8:30:57:
         2c:76:f2:00:a9:be:0a:e4:67:0b:2a:72:bf:cd:02:cc:a8:44:
         61:d1:c1:12:7d:fb:e5:17:14:c4:cf:28:22:bd:1c:cc:4a:53:
         e7:22:ec:b6:25:df:ea:16:53:5c:3e:a1:11:11:2e:ef:96:ad:
         0a:44:d8:3b:f0:f6:0b:20:30:f6:50:4e:75:59:05:b3:c2:5d:
         17:db:db:5b:a3:19:6c:3c:62:80:10:d0:6e:0a:98:ca:fe:39:
         42:f8:dd:f0:7a:17:24:15:61:94:c5:1b:45:3c:0e:73:42:f8:
         20:e7:f1:2d:01:f0:2c:a5:a3:5f:1e:08:45:ca:f4:a8:3f:9a:
         e1:b5:20:a9:59:05:aa:bb:03:1d:1b:80:06:89:89:7e:54:a7:
         2b:a0:d7:f1:7f:f0:54:9c:48:af:8a:a2:4e:7f:c3:e9:bd:a3:
         d9:b6:dd:b3:69:21:3f:12:6b:98:45:fe:3c:83:1b:65:f8:a4:
         16:e9:f1:03:26:99:fa:ff:0f:71:4d:68:41:b3:0c:4b:40:07:
         2c:9b:ce:50:d0:c8:5a:15:4d:8f:b3:f9:4c:ff:21:16:43:8a:
         db:e3:f8:c5:c3:76:73:5e:d1:3b:55:22:a5:d3:9e:54:58:9e:
         5a:a2:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 21:58:31 2024 by rpki-client on console-fra.rpki-client.org