Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.cer
File:                     F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.cer (raw, json)
Hash identifier:          dBgeau1mfgHX9PKhuOIYqCN0Vsh66yXcFBkWnw2GZf0=
Subject key identifier:   F5:B1:AA:DB:3E:77:F8:84:00:EF:6B:AD:DE:09:B2:D7:5E:04:07:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F37332DBF2724D5F83B63CE174A747771D3E705
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Aug 2024 18:52:09 +0000
Certificate not after:    Wed 06 Aug 2025 18:57:09 +0000
Subordinate resources:    AS: 264221
                          IP: 45.185.156.0/22
                          IP: 138.117.36.0/22
                          IP: 2804:2468::/32
                          IP: 2804:63cc::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 06:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:37:33:2d:bf:27:24:d5:f8:3b:63:ce:17:4a:74:77:71:d3:e7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  7 18:52:09 2024 GMT
            Not After : Aug  6 18:57:09 2025 GMT
        Subject: CN=F5B1AADB3E77F88400EF6BADDE09B2D75E04071B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:ef:5e:e2:63:6e:d3:94:58:a0:2c:61:c5:
                    1b:bd:a9:31:c7:8a:74:b8:21:e0:38:87:41:30:02:
                    72:1a:e1:0d:83:89:a5:1c:d7:ec:0e:be:da:92:c8:
                    c8:1c:8d:59:69:47:c1:d0:d2:67:b4:39:c2:21:8e:
                    c9:41:ac:16:07:42:8d:25:43:1d:25:21:c2:c0:39:
                    24:5b:c2:53:bb:d6:71:ef:45:fc:12:a2:7f:fe:66:
                    a5:45:07:b6:00:bc:89:4d:38:41:34:a7:f4:bb:db:
                    7d:18:86:e1:99:2d:65:08:a7:ce:b7:45:ec:1f:48:
                    1e:89:12:f8:32:75:10:69:f3:7f:76:33:6c:d4:57:
                    2b:4d:1e:72:42:38:ff:36:54:bd:9c:48:e2:e5:45:
                    e8:db:80:60:0d:ef:d8:cf:fd:b5:fc:c6:fa:85:69:
                    dc:65:9b:fb:2c:c8:5f:4a:5c:87:24:1b:9d:08:13:
                    8b:a4:af:a4:27:fa:98:7d:9e:7f:97:e4:84:26:73:
                    53:ac:a1:d5:7c:1a:b5:d9:31:6d:22:7d:8b:00:b1:
                    cf:21:89:15:77:a3:51:cb:bb:50:2f:52:df:3a:11:
                    a2:f6:49:83:a5:cf:ec:d2:7e:9e:32:3f:8e:ae:6b:
                    39:21:91:3b:01:72:16:0e:75:3a:c5:9c:0d:69:d9:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:B1:AA:DB:3E:77:F8:84:00:EF:6B:AD:DE:09:B2:D7:5E:04:07:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.156.0/22
                  138.117.36.0/22
                IPv6:
                  2804:2468::/32
                  2804:63cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264221

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:95:a2:22:e8:ba:13:90:dc:b7:60:aa:16:bc:ce:46:55:
         09:3d:8f:fe:d4:e5:ed:8b:94:5d:40:6d:8c:b0:af:cf:49:94:
         1a:74:d2:45:dc:99:ed:ae:c4:c8:53:4a:ef:29:d8:77:25:fb:
         ef:08:27:3a:56:2d:84:9f:59:10:2d:93:83:4d:9a:07:46:b7:
         12:23:17:f8:1a:fd:19:9c:19:f2:9e:80:64:90:eb:a2:36:f1:
         39:d5:bc:ff:45:3d:3a:c6:36:31:0e:7d:0a:2d:e9:d4:5c:43:
         cc:e1:2a:f3:ff:64:4f:7f:5c:cb:85:41:86:fe:69:66:3b:9a:
         a5:11:91:3e:62:ad:c1:a3:c9:67:ee:26:93:b6:c0:53:5e:44:
         7e:bd:7a:63:5b:5f:f7:a9:fc:fc:98:e0:ea:f2:0e:e3:4d:67:
         21:81:0a:b4:88:9e:0f:66:45:7b:65:f1:93:78:ee:08:3b:2c:
         af:00:56:69:db:0c:a1:09:e5:80:93:f0:0f:43:e8:4b:21:71:
         88:f5:7f:24:e3:bb:4b:83:83:8e:e2:de:34:d0:95:d9:c9:9d:
         bb:29:0a:6d:3f:29:5e:c8:fe:25:27:ec:9f:fd:6a:05:9b:c7:
         39:25:06:1d:61:e9:4b:89:88:1a:71:51:8d:7d:03:56:08:c3:
         a0:ca:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:04:39 2024 by rpki-client on console-fra.rpki-client.org