Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5ED7D46CEF4BDC07DD8926D10F4B95AFBBD09F80.cer
File:                     5ED7D46CEF4BDC07DD8926D10F4B95AFBBD09F80.cer (raw, json)
Hash identifier:          5YCcZfHg5PpVL7M79fh8mQzvBasRqZ1gENKxdOEdtG0=
Subject key identifier:   5E:D7:D4:6C:EF:4B:DC:07:DD:89:26:D1:0F:4B:95:AF:BB:D0:9F:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F86DAD16F7E60B766A123A031B85989C9404167
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/1/5ED7D46CEF4BDC07DD8926D10F4B95AFBBD09F80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:24:54 +0000
Certificate not after:    Thu 03 Apr 2025 01:29:54 +0000
Subordinate resources:    AS: 265984
                          IP: 181.191.4.0/22
                          IP: 2804:40d4::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 03:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:86:da:d1:6f:7e:60:b7:66:a1:23:a0:31:b8:59:89:c9:40:41:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:24:54 2024 GMT
            Not After : Apr  3 01:29:54 2025 GMT
        Subject: CN=5ED7D46CEF4BDC07DD8926D10F4B95AFBBD09F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:96:56:2f:d8:25:e4:b5:5e:69:a9:67:4e:
                    93:f7:cb:44:a9:bd:a6:2a:89:85:9c:71:52:00:35:
                    b6:4a:1e:e6:d9:38:da:03:23:1c:88:5d:79:68:ad:
                    ee:d2:8a:d7:54:3b:eb:42:f4:82:5f:cc:8a:bb:34:
                    b9:64:71:ce:3c:e8:c7:c1:0e:fc:c4:4c:75:57:0e:
                    42:5b:61:71:29:2b:00:ea:19:0e:e5:67:6a:3c:4e:
                    c8:bb:ca:97:05:f0:38:a3:ac:e9:f6:22:7d:d4:ff:
                    55:69:6f:c6:42:19:25:86:82:46:33:f4:64:6d:54:
                    9b:64:27:48:59:8b:d6:b2:2b:fd:c8:82:22:5e:ef:
                    04:a6:b8:9a:ca:8d:d4:6a:c8:ea:c6:5c:41:09:df:
                    7a:16:57:9b:15:68:ed:92:fb:3a:12:01:6d:c9:2f:
                    73:ca:36:7b:2e:6e:f1:c5:1a:d8:44:65:5e:c9:91:
                    57:7a:f4:0f:73:80:ba:eb:d8:44:8c:34:ba:b2:a4:
                    84:bb:44:bc:39:7e:c8:62:f6:c6:a9:2f:f2:27:6e:
                    ea:4f:6a:3a:0d:9e:57:22:b1:94:70:01:fc:03:d0:
                    80:ec:5e:2b:31:cc:38:6a:8f:0a:4f:7e:2b:ce:67:
                    08:75:df:d7:46:91:9c:11:ed:ff:8e:f9:23:b6:34:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:D7:D4:6C:EF:4B:DC:07:DD:89:26:D1:0F:4B:95:AF:BB:D0:9F:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/1/5ED7D46CEF4BDC07DD8926D10F4B95AFBBD09F80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.4.0/22
                IPv6:
                  2804:40d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265984

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:34:e0:c5:83:68:9e:53:b6:f3:35:36:2f:ec:38:4b:1b:
         43:42:2c:6c:91:20:a8:32:ad:02:4d:44:75:78:95:fd:dc:f7:
         0e:02:7c:91:92:ba:cf:32:9d:98:b2:cb:91:29:63:3d:b9:c8:
         0d:77:e7:4f:42:de:aa:de:ca:f9:6b:a4:34:60:cd:84:8b:ad:
         59:01:75:9a:0e:89:f2:03:42:dc:8b:62:11:24:d3:90:9c:6f:
         99:5b:28:1f:37:bb:6d:68:60:5f:f4:39:44:82:4f:98:cf:a4:
         c9:80:1a:39:cb:42:ea:82:92:e3:7e:b9:b1:56:3e:a9:b4:5f:
         e1:bf:7c:63:15:0b:42:a2:31:a8:fd:70:e0:97:d9:24:79:66:
         d6:08:09:e1:fe:1f:55:bd:20:95:19:d0:cf:3d:c7:ed:18:e3:
         c7:a8:6b:fe:30:44:07:ae:97:b5:1e:69:63:76:8a:1f:91:76:
         fb:7b:8e:4e:39:9d:ac:54:75:d8:98:75:b1:33:70:b6:8e:0e:
         ba:5d:40:54:83:0b:6d:ad:b2:15:56:31:08:f5:35:cc:66:1c:
         9e:c7:e3:00:b0:87:64:10:f7:c7:63:dd:f4:18:5f:e1:d2:28:
         d0:e6:36:ae:ba:cf:23:51:e0:c7:59:90:78:ea:ed:08:b4:fc:
         e8:9b:3b:9c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUb4ba0W9+YLdmoSOgMbhZiclAQWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMTI0NTRaFw0yNTA0MDMwMTI5NTRaMDMxMTAvBgNV
BAMTKDVFRDdENDZDRUY0QkRDMDdERDg5MjZEMTBGNEI5NUFGQkJEMDlGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhBJZWL9gl5LVeaalnTpP3y0Sp
vaYqiYWccVIANbZKHubZONoDIxyIXXlore7SitdUO+tC9IJfzIq7NLlkcc486MfB
DvzETHVXDkJbYXEpKwDqGQ7lZ2o8Tsi7ypcF8DijrOn2In3U/1Vpb8ZCGSWGgkYz
9GRtVJtkJ0hZi9ayK/3IgiJe7wSmuJrKjdRqyOrGXEEJ33oWV5sVaO2S+zoSAW3J
L3PKNnsubvHFGthEZV7JkVd69A9zgLrr2ESMNLqypIS7RLw5fshi9sapL/InbupP
ajoNnlcisZRwAfwD0IDsXisxzDhqjwpPfivOZwh139dGkZwR7f+O+SO2NOnfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRe19Rs70vcB92J
JtEPS5Wvu9CfgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmVK
eGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2cXgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zl
SnhhWVFzYktqVFk1SGhyZ0dmazZjWnpYVzNUZGVOTXVNVWhTQXd2dnF4LzEvNUVE
N0Q0NkNFRjRCREMwN0REODkyNkQxMEY0Qjk1QUZCQkQwOUY4MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb8EMA0EAgACMAcDBQAoBEDUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPADANBgkqhkiG9w0BAQsFAAOCAQEAG3c04MWDaJ5TtvM1
Ni/sOEsbQ0IsbJEgqDKtAk1EdXiV/dz3DgJ8kZK6zzKdmLLLkSljPbnIDXfnT0Le
qt7K+WukNGDNhIutWQF1mg6J8gNC3ItiESTTkJxvmVsoHze7bWhgX/Q5RIJPmM+k
yYAaOctC6oKS4365sVY+qbRf4b98YxULQqIxqP1w4JfZJHlm1ggJ4f4fVb0glRnQ
zz3H7Rjjx6hr/jBEB66XtR5pY3aKH5F2+3uOTjmdrFR12Jh1sTNwto4Oul1AVIML
ba2yFVYxCPU1zGYcnsfjALCHZBD3x2Pd9Bhf4dIo0OY2rrrPI1Hgx1mQeOrtCLT8
6Js7nA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org