Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
File:                     5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer (raw, json)
Hash identifier:          BTpb4+SZvu/fJYkR8L/B2yLYBode1dsTWLyKgpjWl8E=
Subject key identifier:   5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       02CD032048CDAD1FD095352ECB931D53C3E0B177
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 May 2024 04:12:25 +0000
Certificate not after:    Mon 12 May 2025 04:17:25 +0000
Subordinate resources:    AS: 270874
                          IP: 186.195.244.0/23
                          IP: 2804:72c4::/32

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cd:03:20:48:cd:ad:1f:d0:95:35:2e:cb:93:1d:53:c3:e0:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 13 04:12:25 2024 GMT
            Not After : May 12 04:17:25 2025 GMT
        Subject: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:ba:a2:51:87:a6:f3:37:f7:87:ff:5d:b2:
                    da:8f:0d:b3:53:ca:03:b5:ac:e9:c1:76:97:25:05:
                    d4:4b:ab:c4:8a:30:02:b4:1c:6e:0c:39:91:10:7b:
                    64:0e:d6:1d:45:eb:e4:65:c0:2c:c2:1e:2b:9d:1d:
                    61:dc:be:14:34:6c:c6:90:59:d4:f3:36:6e:0a:4a:
                    3f:f0:49:52:a6:f5:73:32:30:45:08:67:88:20:c4:
                    96:82:4e:2f:27:cb:ef:80:95:7d:2f:54:59:91:87:
                    ae:8a:55:6b:72:00:bf:cd:85:4b:15:1f:08:1f:74:
                    ae:3f:b9:5a:e5:4a:05:a4:d9:62:91:0c:f5:a2:63:
                    83:87:24:a1:a4:5e:18:78:2d:84:5f:f7:54:d5:d0:
                    02:04:9a:75:b8:e3:15:20:a2:2b:3a:a6:a3:61:89:
                    24:b5:9c:77:8b:26:68:db:4f:6f:09:3c:c9:ed:13:
                    58:02:3b:3e:f7:5d:b4:55:0f:64:1e:a9:15:34:c6:
                    a4:9a:f0:1a:97:38:f7:13:d7:e6:68:e7:60:95:98:
                    4b:d5:39:c3:01:31:90:74:de:91:98:12:5c:fd:90:
                    be:6e:60:fa:a3:da:b7:f9:7d:1d:a4:1d:6b:86:32:
                    7d:45:93:4e:9c:5d:1d:8f:d4:5d:b1:2c:dd:83:27:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.244.0/23
                IPv6:
                  2804:72c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270874

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:e7:12:da:d8:c9:70:a1:ea:97:6b:fa:a0:10:40:e5:b4:
         b7:fa:7d:c5:f0:22:f0:22:4c:b1:ab:7b:c7:91:57:47:fa:a7:
         72:e0:20:3e:fc:0d:23:60:f9:9f:90:86:66:8a:3b:6e:b0:7e:
         da:df:f8:a9:36:cc:09:29:e2:7f:e5:07:ce:5c:91:a9:d0:3f:
         e8:05:ca:5a:d9:d2:11:85:d9:ab:12:cc:7f:cd:4a:fd:f6:ab:
         fb:22:6b:76:e9:46:ef:af:f6:4e:59:cc:ba:7a:6e:e3:36:8b:
         d6:f4:e0:c7:0c:63:00:29:c6:e5:4d:b1:3b:23:1d:54:a4:7c:
         1b:35:0b:9c:04:1d:a4:8e:18:37:39:5e:69:96:d8:6b:47:9d:
         7f:74:1d:2c:4e:df:c2:fc:1e:02:d2:58:f6:f9:ec:ab:d3:c9:
         7b:02:85:37:41:46:29:8f:1e:c6:d1:21:d7:92:d3:47:cf:27:
         39:89:05:a9:10:f6:b6:d5:e4:50:5d:73:32:13:8d:e8:6c:94:
         22:45:1c:45:81:0c:ec:01:92:59:70:81:61:90:c8:05:25:61:
         79:90:c9:39:bb:8a:70:d9:5d:d1:f1:cb:e8:f9:48:62:de:48:
         e6:e9:c2:52:1e:8a:92:23:45:d7:d6:5c:d5:b2:59:1e:d5:96:
         5c:3b:dd:79
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUAs0DIEjNrR/QlTUuy5MdU8PgsXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MTMwNDEyMjVaFw0yNTA1MTIwNDE3MjVaMDMxMTAvBgNV
BAMTKDVGMzg0Q0FGNTk3RUU2QUQ2MUM1MjZDODZEMjJFNTg2QzE5MzVGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwvrqiUYem8zf3h/9dstqPDbNT
ygO1rOnBdpclBdRLq8SKMAK0HG4MOZEQe2QO1h1F6+RlwCzCHiudHWHcvhQ0bMaQ
WdTzNm4KSj/wSVKm9XMyMEUIZ4ggxJaCTi8ny++AlX0vVFmRh66KVWtyAL/NhUsV
HwgfdK4/uVrlSgWk2WKRDPWiY4OHJKGkXhh4LYRf91TV0AIEmnW44xUgois6pqNh
iSS1nHeLJmjbT28JPMntE1gCOz73XbRVD2QeqRU0xqSa8BqXOPcT1+Zo52CVmEvV
OcMBMZB03pGYElz9kL5uYPqj2rf5fR2kHWuGMn1Fk06cXR2P1F2xLN2DJw57AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfOEyvWX7mrWHF
JshtIuWGwZNfoDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkp2
Z3o5S2ZvUVlRQWo1a0tnSk5xYjJ0VXVkNWF5QTRRcUFtU0d4ZXZVZHUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZK
dmd6OUtmb1FZUUFqNWtLZ0pOcWIydFV1ZDVheUE0UXFBbVNHeGV2VWR1LzAvNUYz
ODRDQUY1OTdFRTZBRDYxQzUyNkM4NkQyMkU1ODZDMTkzNUZBMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBusP0MA0EAgACMAcDBQAoBHLEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiGjANBgkqhkiG9w0BAQsFAAOCAQEAYCznEtrYyXCh6pdr
+qAQQOW0t/p9xfAi8CJMsat7x5FXR/qncuAgPvwNI2D5n5CGZoo7brB+2t/4qTbM
CSnif+UHzlyRqdA/6AXKWtnSEYXZqxLMf81K/far+yJrdulG76/2TlnMunpu4zaL
1vTgxwxjACnG5U2xOyMdVKR8GzULnAQdpI4YNzleaZbYa0edf3QdLE7fwvweAtJY
9vnsq9PJewKFN0FGKY8extEh15LTR88nOYkFqRD2ttXkUF1zMhON6GyUIkUcRYEM
7AGSWXCBYZDIBSVheZDJObuKcNld0fHL6PlIYt5I5unCUh6KkiNF19Zc1bJZHtWW
XDvdeQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 02:55:36 2024 by rpki-client on console-fra.rpki-client.org