Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00F878DCA6C602A6C307F603FD0301FBCF99738A.cer
File:                     00F878DCA6C602A6C307F603FD0301FBCF99738A.cer (raw, json)
Hash identifier:          5M1gAw/q2joYMf/MuTpzWOUaHxw78Kkb8vcTiATejeI=
Subject key identifier:   00:F8:78:DC:A6:C6:02:A6:C3:07:F6:03:FD:03:01:FB:CF:99:73:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B8D7AD71B614BEC8A64CCE6EEE894E39CB48FC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/00F878DCA6C602A6C307F603FD0301FBCF99738A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jun 2024 19:55:24 +0000
Certificate not after:    Tue 17 Jun 2025 20:00:24 +0000
Subordinate resources:    AS: 266232
                          IP: 45.6.180.0/22
                          IP: 2804:3cc0::/32

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 05:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:7a:d7:1b:61:4b:ec:8a:64:cc:e6:ee:e8:94:e3:9c:b4:8f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 18 19:55:24 2024 GMT
            Not After : Jun 17 20:00:24 2025 GMT
        Subject: CN=00F878DCA6C602A6C307F603FD0301FBCF99738A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:4a:ac:fb:24:58:5a:12:f3:9c:c8:0e:6e:
                    85:ea:92:51:77:61:f4:49:c1:c8:95:fd:0e:d0:f9:
                    c5:2c:0b:2b:70:44:60:3e:74:31:c4:c9:a4:2d:e1:
                    2c:50:23:2b:e2:18:c0:74:a8:3d:63:c4:62:6e:81:
                    55:16:4c:6e:6b:bf:d6:5a:f8:e5:fc:08:34:4d:a5:
                    50:6a:54:a4:ca:2c:93:51:ba:b4:68:b6:4f:3b:18:
                    43:11:99:f2:97:52:8e:1d:60:0b:e1:bd:f4:aa:38:
                    95:53:83:a3:42:ff:cd:1a:13:2d:3c:0e:13:a5:a8:
                    f5:81:97:32:02:c0:14:ef:09:08:c9:1b:bb:e8:25:
                    5a:29:73:48:cc:89:fc:c7:72:b3:d0:89:f0:da:bd:
                    93:f5:7d:54:51:fb:98:bc:78:26:bc:2c:09:52:d0:
                    f7:bd:3b:d6:f1:85:32:0c:7d:5d:88:53:43:22:07:
                    10:02:d1:1d:9b:d4:b1:1f:6d:eb:d2:d5:35:ec:4b:
                    22:f0:34:d7:a0:7b:a5:b2:0a:4a:78:fd:85:2f:68:
                    3f:ac:27:a7:1e:16:f7:e5:10:4b:60:d3:db:bb:4e:
                    4d:fc:fa:ad:7b:fd:d2:16:47:9c:c2:9b:71:c0:46:
                    83:f5:de:97:61:e0:9a:84:be:a8:4c:c0:9a:9b:ee:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:F8:78:DC:A6:C6:02:A6:C3:07:F6:03:FD:03:01:FB:CF:99:73:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/00F878DCA6C602A6C307F603FD0301FBCF99738A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/22
                IPv6:
                  2804:3cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266232

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:0c:04:e0:c8:56:5e:cf:a7:21:c0:0a:a2:6e:ee:0e:b3:
         fe:45:b3:69:18:1f:c2:33:a8:da:a8:8a:05:df:ff:eb:ca:60:
         aa:e2:f4:b7:37:96:f5:21:d0:27:3b:24:b0:48:66:c2:2a:e6:
         82:c6:82:73:23:a3:bd:c4:ee:43:47:cf:e7:6b:90:86:7e:ac:
         a3:3c:d2:12:32:92:67:cd:4c:57:63:49:a9:9a:0d:90:af:64:
         08:52:4a:31:0e:6c:1e:5f:c9:2b:73:25:29:33:1c:80:8a:ce:
         a0:15:8d:d6:47:9d:17:9b:ff:d9:6b:cb:e7:b0:38:1f:e8:89:
         28:2c:e5:6a:22:b7:67:66:9b:f0:fe:f9:f8:53:f5:75:92:2c:
         9e:66:e6:31:51:0f:f6:8d:f8:ce:d3:47:ee:84:13:fd:4a:98:
         45:6a:dc:7c:cf:21:e7:9f:e8:05:91:5d:60:02:56:f7:2d:a2:
         9b:e5:84:2d:8b:73:b4:bc:c2:0b:ed:6d:33:14:61:75:2e:9f:
         80:81:89:ea:4f:c1:34:46:63:77:e8:d3:1c:59:50:04:83:21:
         3d:ab:16:57:ba:9a:4f:9e:24:a2:b5:6f:c4:47:1c:94:29:d4:
         fe:70:21:99:d0:02:04:68:06:b2:8c:76:84:e1:0c:f1:13:dc:
         e0:0e:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:35:29 2024 by rpki-client on console-fra.rpki-client.org