Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer
File:                     A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer (raw, json)
Hash identifier:          ZDjsex1G+iDKBMPayxCb6bIz+bM1uxK0UnvmXQx6TSU=
Subject key identifier:   A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37144BC195F9BE358C60BEE10EAF26805A2C8364
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:11:01 +0000
Certificate not after:    Thu 03 Apr 2025 03:16:01 +0000
Subordinate resources:    AS: 267629
                          IP: 45.71.216.0/22
                          IP: 2804:4460::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 14:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:14:4b:c1:95:f9:be:35:8c:60:be:e1:0e:af:26:80:5a:2c:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:11:01 2024 GMT
            Not After : Apr  3 03:16:01 2025 GMT
        Subject: CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:45:7f:04:52:77:e7:a5:76:29:53:35:c1:
                    b9:69:f7:e2:19:10:20:6e:d1:3c:4e:a0:aa:7c:83:
                    4f:bb:7e:16:de:80:96:ab:94:0b:e8:40:d3:5a:9b:
                    39:87:cd:a9:49:ec:22:e7:35:2e:9e:8c:7a:d0:91:
                    45:93:8d:6a:b5:6e:88:13:40:b5:24:a3:38:d5:d2:
                    b6:89:61:87:ac:17:83:9c:c8:fd:1c:1e:2d:1e:be:
                    66:72:2f:f9:a3:b2:f4:0f:af:20:e6:72:72:60:f1:
                    f5:21:54:76:50:90:f2:9d:cd:10:7f:be:f1:0a:d9:
                    3f:fe:51:fc:1a:17:39:0e:a8:ca:1a:5e:82:d6:be:
                    9f:ff:a2:e7:d1:6e:36:bb:92:4b:74:b5:e1:1d:40:
                    8a:ad:cc:c4:35:a0:93:71:9e:80:10:67:d7:b1:29:
                    26:86:42:82:9a:35:1a:e5:e0:e0:28:f1:a7:ab:0b:
                    39:0a:15:44:2d:c6:af:a1:6c:d1:49:46:44:89:77:
                    33:28:21:87:f7:32:c2:e8:f1:d2:d3:c1:45:1c:be:
                    97:24:eb:f9:1d:a2:da:9e:d1:1b:a1:55:6d:35:82:
                    7e:10:b6:11:f0:07:ba:21:fd:b6:85:8e:ab:05:04:
                    dc:18:63:6b:a7:ed:4b:d1:a9:4c:ce:af:be:e8:47:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.216.0/22
                IPv6:
                  2804:4460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267629

    Signature Algorithm: sha256WithRSAEncryption
         66:11:4f:80:2a:91:4e:c5:2b:c7:9a:b9:df:10:bd:6b:11:41:
         1a:bf:53:f1:e5:c2:70:f1:ff:90:1f:27:d5:a7:5f:50:b6:89:
         93:46:d4:3f:e6:ad:5e:65:88:fe:e2:40:aa:0a:f1:4d:a0:9a:
         3b:7b:cf:7b:83:f5:84:22:3a:50:98:c5:7c:50:41:47:12:7e:
         4d:8e:a5:1c:09:31:da:c0:c5:cb:1b:a3:d4:19:dc:28:aa:70:
         5f:71:fa:9a:85:94:b9:a8:2e:28:79:60:f8:03:26:91:f5:2b:
         7f:b6:51:08:fd:4b:24:80:30:f0:57:d5:46:70:4b:ac:6e:07:
         0c:cd:05:70:db:0f:63:82:9d:e5:91:47:3c:ba:ce:3a:f2:06:
         2e:9b:77:2f:94:2d:9b:a4:e3:f8:c6:ad:b2:df:3e:d9:2b:b2:
         c2:84:17:05:f7:fd:bb:17:2a:83:7e:fe:51:8f:64:b7:e0:bf:
         14:e4:15:82:fd:8d:2c:92:b4:cd:5c:7f:73:3c:32:84:9c:1a:
         2b:f5:55:81:77:0f:e7:d8:eb:7b:25:8e:29:78:59:2f:a8:e1:
         09:05:03:ad:ae:f1:f0:51:f4:ff:b2:e9:ea:8b:49:c1:cb:c3:
         00:71:28:4e:c9:6a:bc:44:a1:47:b6:65:94:ec:42:98:72:dd:
         bb:d7:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:04:05 2024 by rpki-client on console-ams.rpki-client.org