Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer
File:                     A5CAB69B324D77E7069383E1585A8C071704B85E.cer (raw, json)
Hash identifier:          Zh8dmokuPxVz879IawcwZryY/A+Q0BgSQ022oFWiHkY=
Subject key identifier:   A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       554519DB3E09432F5B6E7910A46E1421261DD8BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/A5CAB69B324D77E7069383E1585A8C071704B85E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Apr 2024 14:00:48 +0000
Certificate not after:    Tue 15 Apr 2025 14:05:48 +0000
Subordinate resources:    AS: 265285
                          IP: 168.90.148.0/22
                          IP: 2804:2d78::/32

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 19:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:45:19:db:3e:09:43:2f:5b:6e:79:10:a4:6e:14:21:26:1d:d8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 14:00:48 2024 GMT
            Not After : Apr 15 14:05:48 2025 GMT
        Subject: CN=A5CAB69B324D77E7069383E1585A8C071704B85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2f:40:db:8e:e8:2c:b3:e3:b0:e5:1d:3a:aa:
                    1f:d8:ad:ea:c7:33:d2:3d:fa:fc:f6:f4:e3:6d:77:
                    fd:11:15:1d:f6:82:f4:7b:f9:ed:6c:f2:94:2e:ec:
                    95:3b:48:72:52:6c:57:bb:46:d4:51:69:c9:e6:f5:
                    9a:f7:bb:75:85:7e:8e:77:93:01:6f:a3:d2:fd:ac:
                    1a:ed:88:14:88:ae:01:4e:af:67:76:3e:0d:7c:3d:
                    92:11:9d:a0:16:41:90:a9:41:cb:07:00:e7:bf:6a:
                    10:09:5e:40:37:f7:a1:eb:22:5c:eb:7e:8e:b3:03:
                    5f:76:58:cb:89:9a:7a:a8:c4:a6:a2:a9:fc:f8:11:
                    c8:7b:f3:1c:8b:56:a4:c9:d6:d7:43:8c:f1:4c:cc:
                    a4:44:61:08:35:62:34:b2:35:c2:5a:bf:57:f1:85:
                    77:74:e1:1c:a3:13:0c:a6:12:5c:69:99:43:9b:bc:
                    78:64:75:16:dd:6a:64:5d:f3:91:c6:f6:c3:08:bc:
                    a0:06:7a:b6:c5:2a:cc:cb:31:e2:82:8c:32:d9:ed:
                    43:3c:14:6e:80:e9:46:ee:9c:17:4e:b1:bf:f8:7a:
                    fb:94:97:0d:4d:99:d9:06:8f:27:a3:f5:84:9b:d4:
                    92:22:17:11:7e:87:9e:e4:13:3e:9f:f7:26:8e:0a:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/A5CAB69B324D77E7069383E1585A8C071704B85E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.148.0/22
                IPv6:
                  2804:2d78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265285

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:c3:af:91:a6:63:66:6f:27:5a:60:ca:d4:70:a6:96:45:
         65:01:09:8d:85:a8:5f:8c:a7:6e:ea:90:0a:63:20:e9:17:94:
         5a:77:b4:c6:42:e8:81:27:a1:9b:ce:4b:89:77:fd:f6:6f:1d:
         70:7f:04:1e:f4:52:a9:8a:f8:eb:a7:85:cd:10:23:90:7b:8f:
         01:6f:36:bf:31:0e:e5:54:52:a2:31:65:74:cd:5b:eb:16:45:
         8c:92:0e:ec:85:3e:31:d3:f5:2e:2b:eb:6f:ea:00:21:38:62:
         0d:3f:73:19:72:24:ef:83:ba:8c:e4:9c:ee:8a:a1:9c:1e:5f:
         dc:5a:79:73:e2:10:47:e0:46:3c:e6:7c:8f:c2:41:0c:16:67:
         59:35:82:55:f0:38:de:1b:2f:ae:c8:90:09:e5:fa:e1:16:f2:
         b8:a5:d9:3e:53:f7:ae:81:b1:7a:fa:39:2e:68:19:b4:6a:96:
         f3:cf:bb:5f:3e:08:fd:11:36:14:c3:7a:36:18:a2:d3:cb:11:
         ff:f8:a0:db:b8:71:68:8a:40:07:74:00:58:f6:2d:b2:a9:71:
         ba:5a:90:d6:81:60:da:b8:54:fe:47:2b:32:43:df:47:57:95:
         9d:cd:a7:43:5d:19:27:9f:fe:9e:e9:ee:6d:e4:31:68:11:7f:
         0a:0d:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 20:21:27 2024 by rpki-client on console-fra.rpki-client.org