Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
File:                     06A6703BF770768B2EF441F46345E46D1CF107A6.cer (raw, json)
Hash identifier:          tWVnfRA2UjO0H5A5XH9QE7ra2PPAEDQ8AvL8L0jQr+Q=
Subject key identifier:   06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62DD81913568D9242876DDF9F446AF57EB1CB60B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Aug 2024 19:52:26 +0000
Certificate not after:    Mon 11 Aug 2025 19:57:26 +0000
Subordinate resources:    AS: 28360
                          IP: 138.94.8.0/22
                          IP: 177.8.0.0/19
                          IP: 179.124.224.0/20
                          IP: 189.76.208.0 -- 189.76.239.255
                          IP: 2804:14::/32

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dd:81:91:35:68:d9:24:28:76:dd:f9:f4:46:af:57:eb:1c:b6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 12 19:52:26 2024 GMT
            Not After : Aug 11 19:57:26 2025 GMT
        Subject: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:95:91:88:66:4e:15:1c:60:b6:76:23:6d:
                    7f:bb:9e:27:96:1f:cb:a6:1c:7a:20:a8:7a:a6:4c:
                    44:aa:19:b1:28:6a:2e:09:eb:72:97:3a:70:78:01:
                    82:03:76:86:ea:22:69:76:08:3c:e4:10:d6:40:e4:
                    37:38:23:40:7c:57:1d:06:65:97:b0:a3:f1:9f:71:
                    27:53:9a:dc:46:60:b4:ae:3e:15:7b:6f:e4:80:1e:
                    c4:dd:df:5b:ff:2a:f0:1a:56:3c:22:3b:5b:f7:13:
                    65:3b:62:aa:9a:20:48:ea:50:05:cf:c5:07:4c:e8:
                    cb:55:b3:47:8a:44:c6:40:be:19:97:34:07:3f:5d:
                    61:05:3c:fc:fa:30:a8:33:9a:ce:a1:67:79:2b:5d:
                    3d:38:be:bd:25:a8:5e:c6:25:42:43:31:0f:7f:73:
                    7b:51:42:0f:60:45:02:91:5c:04:d6:24:f1:13:a9:
                    63:d7:be:e6:f9:ad:25:9f:52:7b:81:68:d4:db:40:
                    a1:40:95:4b:3b:23:25:7b:4d:b6:3b:b6:0a:81:34:
                    1d:10:23:c7:dc:24:c7:1f:3b:23:22:0d:59:4b:12:
                    be:13:74:14:d8:e5:c9:2f:a3:f6:69:ac:34:d2:4e:
                    ea:87:a9:fb:cb:05:07:6f:4c:73:bd:24:81:e4:f2:
                    52:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22
                  177.8.0.0/19
                  179.124.224.0/20
                  189.76.208.0-189.76.239.255
                IPv6:
                  2804:14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28360

    Signature Algorithm: sha256WithRSAEncryption
         c2:52:ac:3b:03:25:41:c0:ff:47:6e:17:54:0f:63:74:88:6d:
         12:c2:7b:4f:24:0b:4a:7f:15:36:cc:22:dd:66:f9:9b:c1:56:
         12:41:ac:f1:ae:cf:0d:71:21:56:a0:18:59:4b:81:12:a1:7e:
         f5:02:28:4d:7f:b2:64:fd:4a:27:6b:b1:c4:3a:45:31:8c:a4:
         23:77:79:8f:e0:bd:39:10:67:13:f0:77:f7:1f:64:9d:05:d4:
         9c:1d:7d:a0:62:ac:ad:41:b9:da:7c:f1:fd:b9:a9:17:8e:6b:
         d0:ed:17:c5:10:f7:0b:df:d7:e1:d0:78:54:fd:b5:1f:a2:1f:
         c3:8b:f3:c2:a7:fe:dd:43:cf:7f:ac:a5:35:f1:b1:66:5d:c8:
         26:10:68:5d:1b:51:6c:d8:af:51:54:15:73:b9:51:ac:1e:54:
         74:e2:34:91:b5:b1:d1:c1:0b:8b:76:6e:ce:4e:55:07:04:91:
         88:42:e1:39:e1:7d:a0:0e:ba:f9:42:95:ea:37:af:f6:63:d8:
         9f:ba:77:c8:c7:bc:a5:44:57:63:ed:dd:83:9b:26:4a:68:59:
         e7:89:48:74:2f:26:f4:1b:02:20:82:c9:35:68:22:9b:c4:66:
         2f:d5:bf:c5:67:e1:d4:a0:d5:6d:47:65:ec:56:5d:76:ba:d3:
         f0:6b:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:07:53 2024 by rpki-client on console-ams.rpki-client.org