Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.cer
File:                     5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.cer (raw, json)
Hash identifier:          XGZsB8ts+RXURSXMe8wEyvsloLLHNaLNwvtJ3CGiGyc=
Subject key identifier:   5F:F2:81:58:7D:ED:2C:C2:9C:EC:66:FE:B1:B9:B4:8B:29:7F:52:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B0FE33F438FA546D12966598B790CFD37C52252
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 03:55:15 +0000
Certificate not after:    Tue 24 Jun 2025 04:00:15 +0000
Subordinate resources:    AS: 265338
                          IP: 168.181.168.0/22
                          IP: 2804:2e50::/32

Validation:               Failed, certificate revoked on Sun 14 Jul 2024 09:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:e3:3f:43:8f:a5:46:d1:29:66:59:8b:79:0c:fd:37:c5:22:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 03:55:15 2024 GMT
            Not After : Jun 24 04:00:15 2025 GMT
        Subject: CN=5FF281587DED2CC29CEC66FEB1B9B48B297F52B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:f4:a8:12:e5:00:5e:3f:6c:12:0b:d6:df:
                    4a:a1:79:24:98:43:02:b1:9e:d5:7b:a2:93:61:5d:
                    01:1e:d6:2b:eb:6c:84:01:fa:26:ee:5b:0b:a9:fe:
                    dd:a8:ce:63:f4:d8:ea:37:b7:09:79:d9:04:36:3c:
                    f4:5c:41:e7:e6:34:3d:04:78:59:37:7a:27:f4:2f:
                    69:a8:51:0a:d6:c0:8c:39:c0:66:26:1a:5a:ba:a0:
                    fa:3b:e8:60:1c:62:eb:d1:58:38:63:4b:50:dc:6b:
                    0f:6b:37:83:25:8a:78:a0:92:96:5e:3f:31:25:88:
                    82:c9:eb:a7:8f:22:a4:f7:29:a7:da:5b:ec:0f:55:
                    80:b4:b0:41:e9:be:99:0d:e5:4c:c1:e4:a8:e8:e3:
                    5b:fa:ef:05:f8:dd:9c:d3:34:25:0e:ac:28:58:85:
                    ff:ed:bf:92:70:c4:14:fd:6a:e3:ba:f5:9b:d5:3a:
                    3f:d2:e4:54:0e:f9:5a:49:f8:c4:bf:d5:4f:42:5f:
                    93:b6:cc:f7:83:3a:d0:ea:eb:ab:52:cc:e3:14:be:
                    d6:e2:25:2b:05:ee:e5:30:4d:3c:75:f0:85:13:fa:
                    04:d2:e7:1c:1b:b6:e2:2f:ae:28:07:97:21:a1:de:
                    88:92:a2:cf:b3:39:cb:69:49:8b:a8:80:d6:30:cf:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:F2:81:58:7D:ED:2C:C2:9C:EC:66:FE:B1:B9:B4:8B:29:7F:52:B8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.168.0/22
                IPv6:
                  2804:2e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265338

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:39:e6:20:c7:98:fe:56:e9:1d:2e:53:df:c5:bf:f5:20:
         3b:ee:40:77:e0:5f:1f:88:92:88:e8:c6:fd:65:86:e2:86:29:
         cc:58:a6:1a:d1:cf:b2:d1:94:63:1b:bf:b8:d0:61:6a:02:84:
         5a:fc:c5:5f:cf:21:d6:b1:d5:06:ef:06:24:8a:1e:4b:6e:8b:
         c8:fe:25:2e:07:e8:fe:7f:45:a9:09:83:78:45:ca:4b:98:c7:
         2c:5a:3a:63:02:fd:68:47:9e:38:d9:c1:30:1c:2c:56:32:c7:
         45:20:a6:f9:7a:e4:81:57:4a:28:81:cc:2c:b6:41:34:ea:e6:
         cf:a7:12:cc:25:9e:9b:3d:d7:d6:e4:d1:40:c3:70:df:93:a1:
         4d:16:5e:e4:43:a9:0a:53:c5:46:6c:36:78:5d:65:b5:29:e6:
         ae:83:e3:c7:1b:e1:69:87:ce:70:ee:12:07:e0:fe:53:b2:5b:
         90:c4:7f:4c:45:28:89:3e:b8:61:cb:ce:da:25:53:13:d9:b0:
         81:1f:ba:16:ff:52:72:ac:85:b5:ba:c9:fc:9c:ee:af:ca:94:
         a3:d3:b3:f1:b5:b4:2d:01:f9:76:7d:f2:a5:89:ec:05:56:e3:
         25:89:15:f8:fa:24:e2:5a:2a:7c:5e:4f:03:7a:16:54:21:13:
         62:62:b5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 10:46:35 2024 by rpki-client on console-ams.rpki-client.org