Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E4C6878B8513BA2211F225442508EA993B8EBAC.cer
File:                     5E4C6878B8513BA2211F225442508EA993B8EBAC.cer (raw, json)
Hash identifier:          YFa8AY7ZdPMcvs7kLiLJkRXcCY11OMz8hyWnR2AhuiA=
Subject key identifier:   5E:4C:68:78:B8:51:3B:A2:21:1F:22:54:42:50:8E:A9:93:B8:EB:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       511FBE3E52DD777711128EC36EB0E3BC47EF4439
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/5E4C6878B8513BA2211F225442508EA993B8EBAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Apr 2024 05:39:12 +0000
Certificate not after:    Tue 29 Apr 2025 05:44:12 +0000
Subordinate resources:    AS: 52532
                          IP: 179.106.96.0/20
                          IP: 2804:2d8::/32
                          IP: 2804:df8::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1f:be:3e:52:dd:77:77:11:12:8e:c3:6e:b0:e3:bc:47:ef:44:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 05:39:12 2024 GMT
            Not After : Apr 29 05:44:12 2025 GMT
        Subject: CN=5E4C6878B8513BA2211F225442508EA993B8EBAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fc:3c:ef:a1:f3:81:37:7f:66:8d:ee:e4:06:
                    59:0d:f1:eb:16:98:0a:fd:a9:dc:52:4f:4b:5b:6d:
                    c7:1c:f7:b7:72:df:8d:11:60:5a:b1:ab:17:c7:57:
                    aa:1a:82:88:b0:3b:5d:1b:44:55:02:b7:3a:13:e4:
                    64:58:9d:2f:e3:15:e7:a2:5b:43:8f:fd:4b:33:4b:
                    be:0c:21:67:e7:0f:9f:fa:58:1f:ce:9a:c5:6a:84:
                    82:d9:fa:61:e9:8d:34:62:27:74:8b:e5:53:74:84:
                    29:a0:c9:45:8a:8c:8d:e5:3d:15:8f:18:db:a7:1f:
                    4f:83:7b:0d:e5:8a:d0:77:e4:74:a9:85:59:11:c9:
                    0a:70:56:0b:e8:26:d9:e5:98:ff:d8:14:62:18:89:
                    b8:e6:f6:a4:22:ef:c6:b9:ce:42:f1:4f:ed:0e:12:
                    72:02:12:b2:bd:33:8b:6b:d4:cc:8c:d3:97:40:16:
                    a2:3c:14:83:61:ed:97:43:96:e9:a0:ff:60:8d:64:
                    40:3c:6f:39:4f:d1:ee:e6:11:e9:03:35:5b:05:5a:
                    c3:35:6f:63:9c:2b:b6:94:bc:2b:ad:95:5f:01:76:
                    50:0f:15:c5:d3:d6:d6:b4:88:02:99:e8:ac:e6:7b:
                    56:99:5d:a5:8d:61:b4:ee:5b:4a:2e:7b:bf:cd:5d:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:4C:68:78:B8:51:3B:A2:21:1F:22:54:42:50:8E:A9:93:B8:EB:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/5E4C6878B8513BA2211F225442508EA993B8EBAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.96.0/20
                IPv6:
                  2804:2d8::/32
                  2804:df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52532

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:aa:a1:bb:6f:76:5e:09:59:51:77:fe:93:cd:24:7b:f7:
         38:ce:2b:f1:68:47:a6:73:3b:88:eb:fc:40:78:df:a7:73:83:
         d0:ad:23:6b:93:2f:d0:c1:fd:6e:a5:01:87:ed:4b:26:f3:63:
         73:ca:f9:75:36:db:6a:19:d3:22:31:2b:f6:09:32:32:86:bb:
         1c:6d:93:d4:7a:ca:88:6c:d7:e9:c9:0e:5c:05:05:a8:df:5d:
         23:e7:5f:fd:86:32:74:6f:34:d2:27:09:94:62:f9:03:f3:ef:
         22:2a:32:b9:ee:58:7a:1f:82:f7:46:dd:81:b6:bf:53:0a:43:
         18:e4:39:91:a9:04:56:04:d4:b3:1c:49:c4:a9:23:eb:c1:bc:
         f1:bb:0a:34:c7:e7:90:32:48:bb:94:91:86:48:fa:8c:3b:e1:
         f3:94:37:bd:db:de:c3:b2:0a:2f:9e:b6:e5:77:55:28:da:14:
         d9:9b:c0:e6:a5:65:d1:5a:7c:fd:0a:49:2d:dc:16:5c:81:8c:
         26:c7:6c:bb:a1:33:c2:60:5f:eb:28:c2:02:6d:b0:f1:58:27:
         4b:cb:3a:80:3e:75:6a:ec:84:68:22:bf:bb:bb:19:ad:aa:85:
         e7:43:3c:58:43:a2:46:a2:89:ca:69:e9:e4:08:b4:aa:c9:d5:
         59:be:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org