Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.cer
File:                     A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.cer (raw, json)
Hash identifier:          BGGmZ3j1p1P0ETAY1bmvD5SwdYnLhARmbVakTP/oLoc=
Subject key identifier:   A5:CF:73:5C:37:CC:45:93:2C:60:F6:CB:A0:9E:15:88:F0:F5:1F:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       605BB550AC4E79E328DC2393AA0F026807DD5CBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 May 2024 18:08:31 +0000
Certificate not after:    Fri 02 May 2025 18:13:31 +0000
Subordinate resources:    AS: 265079
                          IP: 170.233.136.0/22
                          IP: 2804:3274::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 15:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5b:b5:50:ac:4e:79:e3:28:dc:23:93:aa:0f:02:68:07:dd:5c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 18:08:31 2024 GMT
            Not After : May  2 18:13:31 2025 GMT
        Subject: CN=A5CF735C37CC45932C60F6CBA09E1588F0F51FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:13:69:54:67:7b:f4:59:55:17:c2:bf:08:
                    ca:80:84:f6:b9:5a:cf:d5:7f:ce:37:15:e0:2a:25:
                    8b:7c:4b:5e:7f:f9:b9:ee:b1:4f:c4:38:51:ec:32:
                    78:bf:00:e4:af:25:51:2f:15:fe:dd:94:af:2d:c8:
                    88:c4:f9:55:f3:dd:90:07:65:41:4d:11:28:6b:48:
                    57:91:b4:0e:2d:63:81:9e:86:ba:6f:75:a4:12:a1:
                    0b:f6:72:35:f2:79:58:a6:3e:e7:27:2e:28:0c:f5:
                    f1:fc:d4:53:be:7e:6f:b0:f9:11:95:ad:67:cb:71:
                    b4:14:9b:01:6b:ac:2e:7e:f7:e6:68:fe:2c:18:36:
                    9f:6d:4c:30:89:8f:fa:fc:c9:7c:b1:61:ab:eb:66:
                    58:2d:18:ef:65:be:f7:c0:20:49:1c:43:ad:a9:22:
                    e2:e8:46:1c:bd:f2:e7:08:6b:d5:2c:69:17:c5:ef:
                    a4:48:95:80:90:b1:48:88:9d:fa:a0:05:cc:40:1b:
                    18:41:cd:e2:46:1c:f8:64:69:be:b8:2f:1b:b2:5e:
                    67:ba:41:2f:2c:b6:c9:2b:69:fd:fe:95:34:e6:06:
                    52:4f:18:77:71:d9:e8:f3:71:4f:e8:93:57:74:1b:
                    2f:9b:0b:fb:6f:28:05:f1:4e:7d:62:9b:54:82:2c:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:CF:73:5C:37:CC:45:93:2C:60:F6:CB:A0:9E:15:88:F0:F5:1F:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.136.0/22
                IPv6:
                  2804:3274::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265079

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:8e:c1:9e:b7:83:3f:d5:11:fc:62:e0:43:8f:54:cc:42:
         2e:f9:81:a4:dc:79:0d:22:69:39:f8:06:b7:0b:12:fb:5c:5c:
         e3:1b:0c:46:82:05:63:fb:9a:a3:88:56:70:14:f4:1f:d6:70:
         7d:44:92:a8:54:15:e8:80:94:40:a4:b4:64:c9:54:70:66:87:
         5c:c7:d5:c1:7e:46:7c:8d:3a:04:71:69:08:8c:ce:96:9e:61:
         50:54:f7:d4:eb:f0:db:0f:f7:f2:6e:6a:c5:11:72:e0:22:65:
         f3:9f:70:51:d7:df:c9:88:35:a5:c0:cc:5c:03:65:5c:76:6a:
         2f:00:91:bd:6a:37:e1:79:42:d0:94:a6:a6:de:b7:c7:fd:f6:
         3a:dd:70:14:7a:24:bd:8b:36:4e:a2:91:de:96:24:58:ff:c4:
         db:d7:e7:25:25:fc:31:b2:b8:ba:0a:2f:3a:b9:fa:02:a0:b4:
         8f:33:c2:47:f2:4f:2b:af:dd:7f:bb:27:2d:e3:13:48:d6:37:
         cf:57:b8:b2:95:4f:dd:da:9c:2b:0f:52:62:66:7a:7d:4c:d9:
         e4:db:50:62:d7:32:9e:60:bd:55:65:06:bd:f4:34:c6:ff:e1:
         0b:fa:25:15:82:27:08:d3:ad:a4:68:b7:85:be:f4:f5:ae:ce:
         26:f8:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org