Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
File:                     5FF0AF706C62B5250221CAAA58C63419A81F3472.cer (raw, json)
Hash identifier:          +zJAk70PvXTopjlT0PVmSAKfnnCtGOVjS/DTQbKvTwE=
Subject key identifier:   5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F39FE7B963E1A7011842593E02745C930C4D92B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:31:45 +0000
Certificate not after:    Wed 02 Apr 2025 20:36:45 +0000
Subordinate resources:    AS: 270406
                          IP: 190.111.100.0/22
                          IP: 2804:6b88::/32

Validation:               Failed, certificate revoked on Sun 05 May 2024 02:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:39:fe:7b:96:3e:1a:70:11:84:25:93:e0:27:45:c9:30:c4:d9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:31:45 2024 GMT
            Not After : Apr  2 20:36:45 2025 GMT
        Subject: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:fb:56:86:63:97:76:1f:fc:9c:98:c6:97:
                    8d:ca:06:f7:4e:ec:42:ee:69:de:0c:44:33:08:3c:
                    73:d3:09:a7:9c:24:e2:79:66:78:94:80:29:a3:4c:
                    4e:e1:86:c9:56:a8:aa:46:23:f0:0e:4c:86:d8:18:
                    77:18:cd:82:63:8c:57:88:5c:14:43:4d:66:96:0f:
                    3c:77:3d:7c:01:13:1f:2b:8b:6e:da:50:fe:e0:84:
                    75:7b:38:6f:8d:89:de:19:79:8e:6b:2d:ef:48:56:
                    8e:93:f4:d1:cb:a3:4d:79:e2:f2:97:e1:3d:32:08:
                    79:ac:98:a5:fc:a0:10:a2:1e:6f:9d:b9:c5:a4:ca:
                    a9:31:c9:8e:0a:fb:67:38:75:c0:0d:c0:59:8c:33:
                    0e:fe:2a:ee:61:a5:95:f8:43:b5:77:e9:ae:e9:dd:
                    ae:93:25:30:45:c6:cf:47:1c:2e:b8:ce:3b:1d:04:
                    ac:e3:dc:bb:13:83:f5:94:1d:cf:a1:76:46:ee:2d:
                    fc:7f:fa:a4:bc:92:8e:c4:9c:ec:e8:d1:84:d8:1e:
                    33:3a:87:f2:2a:23:11:30:6c:cf:8a:dd:b8:23:67:
                    5a:9a:cd:1d:88:d2:24:79:6b:a5:9f:1d:eb:6d:bc:
                    26:ad:a0:18:bd:5d:f7:b2:47:e4:ae:21:2d:92:7d:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22
                IPv6:
                  2804:6b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270406

    Signature Algorithm: sha256WithRSAEncryption
         54:55:20:b7:52:8f:f8:c8:88:64:39:d7:64:3a:35:22:a2:3f:
         c7:71:02:c8:89:4b:c8:74:e0:19:a4:c8:fd:fc:55:db:c1:76:
         37:2b:1d:7a:0b:f7:97:b9:23:38:09:30:40:ab:96:e3:59:66:
         01:81:ef:8d:99:03:72:62:5b:f8:5d:dc:98:ad:eb:d0:35:40:
         dc:81:38:c3:91:0f:47:ff:e0:63:d1:e4:27:89:78:1e:1f:24:
         0d:d1:41:a9:07:d1:fb:0c:2b:5b:13:25:a8:58:32:f1:0a:d3:
         1a:51:1c:ba:22:68:eb:3e:04:6f:88:79:06:11:64:e9:1c:b0:
         d6:46:0c:2e:7a:66:8a:c8:05:3f:c5:d6:9d:cc:9c:e6:d8:cd:
         d0:86:d0:21:9c:14:78:88:bb:00:f2:9c:8b:91:ab:ca:70:da:
         81:0c:dd:e8:a8:0e:29:0a:46:19:ae:ac:c9:57:b2:e5:a8:a3:
         75:e1:75:de:72:64:95:9d:f5:3d:7b:de:31:12:c7:00:32:c3:
         fa:26:a0:09:4d:9b:e8:37:2b:92:23:1a:68:1f:b3:39:d8:5b:
         6b:b9:2f:66:ba:b1:04:e7:39:84:c8:47:10:7f:79:87:9f:8a:
         19:bb:12:1e:ab:0a:b1:8a:62:c5:94:dc:37:d6:a5:68:8f:6d:
         6d:01:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org