Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
File:                     C5E77EC37A336F071F85565E26744903BB3DEC0D.cer (raw, json)
Hash identifier:          lDyJvDbxu6BM/N+w/AV7/dMzagr1ChaKbx1V+pBQqCQ=
Subject key identifier:   C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AE9DC382F164A94C7AF9D477B4EE967195D52BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:57:03 +0000
Certificate not after:    Thu 03 Apr 2025 03:02:03 +0000
Subordinate resources:    AS: 269002
                          IP: 45.176.160.0/22
                          IP: 2804:5df0::/32

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 09:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e9:dc:38:2f:16:4a:94:c7:af:9d:47:7b:4e:e9:67:19:5d:52:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:57:03 2024 GMT
            Not After : Apr  3 03:02:03 2025 GMT
        Subject: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:84:f4:01:ae:9b:41:6f:f9:7f:5b:f5:1c:
                    ef:4c:4c:d5:98:23:be:4f:2c:47:85:2a:09:1e:3b:
                    27:22:b1:91:a3:55:ab:f3:fb:2b:3a:08:f1:7e:3f:
                    0b:00:cf:30:58:d3:14:3e:91:df:80:f8:2b:be:41:
                    13:d5:65:f9:6d:8d:d8:cd:f9:e2:7b:b8:ab:71:2b:
                    25:05:cb:e7:ea:95:5a:b5:af:7a:95:d1:1c:5a:4f:
                    68:ca:73:79:dc:d2:f9:84:13:64:a1:34:60:8d:35:
                    66:c1:39:47:0c:3d:9e:e5:3c:ee:30:d2:17:05:54:
                    c5:8a:71:1d:fe:8c:b2:2d:c1:54:b6:76:71:f0:cc:
                    43:2b:39:65:83:c4:5f:4f:c3:1e:03:dd:5b:2b:b5:
                    2a:98:73:8b:a2:ab:ec:ce:85:58:76:43:a4:7c:08:
                    ac:5b:65:07:f1:eb:ae:e3:da:16:5c:2d:7f:72:e0:
                    bb:08:de:03:62:8a:0a:47:e4:c2:a7:87:17:ef:e5:
                    37:b8:14:04:47:bc:75:e3:3d:17:b6:28:6d:ae:bd:
                    66:c7:49:5e:d6:22:93:d2:61:c2:49:f2:7f:0c:98:
                    22:e4:a2:4b:62:ab:46:a4:ac:62:53:99:62:e3:66:
                    30:a8:7e:76:54:07:04:ee:89:f8:30:b1:1b:84:3e:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/22
                IPv6:
                  2804:5df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269002

    Signature Algorithm: sha256WithRSAEncryption
         da:06:73:6a:11:76:50:52:e6:d9:c9:8c:ac:94:45:42:38:46:
         46:58:1f:5c:d7:97:6b:e8:b0:b9:8f:24:00:a1:df:c4:cd:5f:
         a8:90:b9:27:e2:df:07:b7:0e:37:88:25:ad:46:78:aa:81:28:
         3f:62:f8:88:c9:2e:be:6e:61:74:1f:8c:db:e1:75:f6:3e:a2:
         ae:25:3a:b8:ca:a3:7f:a1:bf:21:05:ae:93:19:f9:dc:0a:a7:
         9e:ab:14:c4:eb:81:82:e4:a8:59:ae:61:72:92:a3:ea:dd:10:
         aa:76:18:05:97:e5:d1:7b:05:b5:64:bf:cb:d8:e4:fd:51:e6:
         36:19:0c:20:ae:c1:3d:19:8d:59:45:9a:05:77:f3:e4:41:05:
         54:41:e6:60:f3:12:9a:c2:fd:c2:55:22:ef:56:9d:fa:96:7d:
         bc:20:15:bd:bc:58:b1:3c:fe:06:85:3c:10:db:21:c1:89:0e:
         28:3e:64:90:13:8a:0d:b1:2f:ef:80:6d:19:37:b5:d8:37:05:
         ce:05:cc:9b:01:33:66:61:5e:52:d3:6d:00:14:e6:00:40:c8:
         b7:c2:8f:9d:1e:3b:96:ca:59:f4:40:a3:5e:35:e1:67:7d:d1:
         e6:fa:2c:38:c8:ed:2a:27:c9:df:6a:f0:f6:18:f6:ac:9f:a4:
         54:64:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org