Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.cer
File:                     A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.cer (raw, json)
Hash identifier:          9PPypg7LOx5czHi4otZR6O+NeYOUIG0eKVntm8qaJUA=
Subject key identifier:   A5:F5:DB:F9:5A:DD:EC:D0:94:90:4E:D7:FC:75:F9:D7:D5:99:4C:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39E6B1FD0CAFFF9DCEA579DFCBAEA2D88D433A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:37:54 +0000
Certificate not after:    Thu 03 Apr 2025 00:42:54 +0000
Subordinate resources:    AS: 268166
                          IP: 45.170.180.0/22
                          IP: 2804:590c::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 11:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e6:b1:fd:0c:af:ff:9d:ce:a5:79:df:cb:ae:a2:d8:8d:43:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:37:54 2024 GMT
            Not After : Apr  3 00:42:54 2025 GMT
        Subject: CN=A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:e1:cd:8f:52:1f:db:b6:05:0c:0a:c3:9e:
                    2b:e7:70:aa:f9:17:f3:8d:91:d4:ff:1a:90:f3:ac:
                    d6:bb:37:e9:0e:ff:75:79:d5:34:a9:e1:70:84:d1:
                    c8:a6:a2:b0:00:56:8d:c3:e3:47:c9:ea:ad:60:d9:
                    39:f9:97:62:05:e9:3a:f7:83:eb:9e:25:41:19:e6:
                    50:93:a0:f7:3d:a7:02:9e:0d:e1:45:3d:59:44:88:
                    a7:4f:ce:ac:18:40:85:dd:ea:87:ab:bd:59:3b:99:
                    89:ff:a2:99:9a:cc:08:11:2c:5d:8f:e5:c3:63:18:
                    6f:aa:87:f7:ae:64:a6:2d:dd:f6:d6:18:9b:57:52:
                    b5:00:a5:b6:4a:b1:35:0c:fb:b6:93:03:14:35:17:
                    11:c7:2b:e7:e0:b5:14:be:e6:7f:e7:9d:1b:93:73:
                    f6:9d:cf:56:e0:fc:61:2a:2f:f8:ff:46:12:7d:66:
                    1f:24:5f:80:16:1e:1e:07:71:05:d4:8e:7c:ac:fd:
                    a5:48:ee:0c:83:f6:f4:91:27:70:6b:5d:53:96:fe:
                    bd:fe:36:e4:e8:44:a3:39:4d:e1:6e:27:b5:48:3a:
                    6d:53:68:90:ca:c3:cd:29:2b:25:5f:9f:b7:d8:18:
                    08:b7:2c:42:24:ba:34:d4:ca:c5:11:65:c9:70:bd:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:F5:DB:F9:5A:DD:EC:D0:94:90:4E:D7:FC:75:F9:D7:D5:99:4C:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/22
                IPv6:
                  2804:590c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268166

    Signature Algorithm: sha256WithRSAEncryption
         da:0a:3e:f7:3a:8e:f4:1e:8f:5e:be:bc:fc:a8:83:2a:06:99:
         a5:bf:01:9c:07:1e:1c:dd:d2:fb:55:6e:4f:05:93:a2:4a:93:
         41:35:82:70:1b:e2:b8:cf:63:82:f9:66:ee:0d:94:8b:4d:65:
         97:cb:fb:e7:74:af:2e:3c:c8:4d:b2:c8:5d:02:f4:e9:e5:a2:
         b7:65:b8:52:f1:02:79:3b:14:d3:88:8f:4c:46:23:00:1b:80:
         a3:e5:8d:e9:80:19:28:39:f0:03:45:a5:08:41:5d:fa:dd:34:
         9e:fc:80:5e:58:44:5d:19:b8:80:26:cc:73:4b:52:b7:e6:f0:
         e8:c4:78:a9:44:2f:51:8c:d4:cd:96:6c:4a:bc:44:2a:25:9c:
         b0:72:3c:df:88:40:b3:9a:31:2c:2e:99:1f:19:16:71:9b:bf:
         34:c8:c8:bb:23:e0:67:c2:47:a6:40:46:2b:29:a7:66:7a:28:
         03:ca:d0:26:7a:b2:83:23:59:39:23:a7:ed:9b:b7:52:b3:a0:
         aa:55:f9:6e:8a:89:07:9b:c5:09:3c:5c:d4:89:c3:dd:c3:b8:
         e1:d0:82:36:51:82:59:03:64:1c:9e:7f:90:94:a0:b2:1c:d8:
         e6:80:3d:e7:5b:d0:dd:43:5a:b1:cc:02:5a:be:21:17:91:24:
         5f:56:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:06 2024 by rpki-client on console-fra.rpki-client.org