Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
File:                     D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer (raw, json)
Hash identifier:          a8nZsf3O3TjZ1amXNwacV+8YnFuam5Cg82PJqJ/GUnA=
Subject key identifier:   D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B24516A84FB7CC531CE52594873DC80160F9240
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 16:03:06 +0000
Certificate not after:    Wed 23 Apr 2025 16:08:06 +0000
Subordinate resources:    AS: 266021
                          IP: 170.245.36.0/22
                          IP: 2804:3940::/32

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 21:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:24:51:6a:84:fb:7c:c5:31:ce:52:59:48:73:dc:80:16:0f:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 16:03:06 2024 GMT
            Not After : Apr 23 16:08:06 2025 GMT
        Subject: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:65:e5:8e:d7:4f:f5:05:08:bd:a8:db:68:
                    41:92:5f:69:71:19:1e:52:b8:45:fe:42:09:5c:91:
                    0b:f6:f8:a0:a0:80:bb:b9:36:95:8b:0e:1a:09:02:
                    ef:d2:92:b1:93:79:b3:15:c6:e8:cb:2f:ab:27:5a:
                    2f:bf:dd:34:83:3a:0f:c3:ab:84:a0:74:ba:e5:31:
                    2f:44:97:47:a9:df:2e:9d:3e:8d:88:27:f9:d4:0f:
                    a3:4f:90:5e:fd:9e:cd:67:74:16:5b:2f:0b:73:2c:
                    36:c6:88:f5:e8:6d:d7:21:f8:6c:0c:62:2e:50:fb:
                    e5:82:2e:a2:51:30:92:8c:3d:8b:8c:71:1f:be:37:
                    81:d4:ec:1c:80:e2:77:95:24:8a:16:99:46:5a:25:
                    01:4b:2b:80:0f:2c:7c:96:3a:70:02:fa:c4:f7:a9:
                    70:1d:f4:71:fe:53:fe:73:de:52:ef:9e:e8:37:a1:
                    87:8b:06:cf:6b:1e:10:d6:58:4f:f8:db:39:04:6b:
                    66:d1:cd:be:67:05:30:14:68:c6:c5:3d:21:8b:7f:
                    fc:ca:ce:43:a1:28:64:6e:92:bb:b2:65:b4:ad:47:
                    24:ac:f4:98:c9:6c:3d:2f:dd:d9:06:26:e5:bb:0d:
                    8c:00:27:4e:c2:2a:78:b2:86:a9:1c:6b:78:b9:f5:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
                IPv6:
                  2804:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266021

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:7e:27:e4:87:05:05:a3:5a:48:28:8e:79:e1:4c:70:53:
         f2:c3:af:5d:b0:47:cc:c0:b2:3d:8c:db:d8:84:c7:a6:a1:4a:
         19:9e:fd:82:d9:63:2f:67:b2:e1:ec:a0:32:52:a8:5d:9f:0b:
         6a:4f:d0:5a:87:93:60:e9:0b:07:d1:77:c0:28:2f:92:0c:c7:
         18:4a:d9:a2:0c:d3:fc:66:23:d3:4e:91:a2:35:55:b6:ba:f0:
         8d:ca:11:28:ff:1a:d9:fc:ee:fa:e2:e7:68:fc:29:d9:77:19:
         ac:b9:58:0b:5d:c7:7e:a2:37:a2:a6:4f:c1:f5:24:7c:4b:ac:
         4a:0c:29:92:2d:ef:56:be:79:83:40:88:61:57:eb:74:3c:de:
         02:9e:8e:fa:3a:61:08:2e:cf:9a:c0:de:47:e1:32:c0:af:b2:
         c3:1c:88:d0:2d:9a:cd:ad:c2:54:d8:82:13:6a:dc:31:78:0d:
         2e:99:fa:1b:5a:ca:48:12:1d:81:27:ea:7b:8d:08:65:43:45:
         93:aa:cc:49:01:ca:4c:ec:44:60:3e:a7:7a:5c:d1:d2:19:70:
         03:c8:dd:09:c3:36:3d:0b:f2:f4:e7:76:24:1d:2f:ef:31:fc:
         65:53:f5:7b:17:e0:c3:a7:e9:a0:94:87:98:76:b0:b3:d6:06:
         8a:43:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:04:04 2024 by rpki-client on console-ams.rpki-client.org