Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.cer
File:                     06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.cer (raw, json)
Hash identifier:          OoqgzEONze9HJT/sKK3T2HxXK+spNrodz5oDVeFxp0g=
Subject key identifier:   06:C5:4D:13:8C:DA:DE:E9:6A:57:6E:4A:6E:B0:0A:7C:C3:16:CD:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54FDEBA831C225A369FC5472318B18B53790B9CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:58:14 +0000
Certificate not after:    Thu 03 Apr 2025 11:03:14 +0000
Subordinate resources:    AS: 271503
                          IP: 181.233.140.0/22
                          IP: 2804:7c8c::/32

Validation:               Failed, certificate revoked on Mon 20 May 2024 09:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fd:eb:a8:31:c2:25:a3:69:fc:54:72:31:8b:18:b5:37:90:b9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:58:14 2024 GMT
            Not After : Apr  3 11:03:14 2025 GMT
        Subject: CN=06C54D138CDADEE96A576E4A6EB00A7CC316CDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:78:07:01:1c:b6:12:51:d9:43:ad:6f:f4:
                    7b:61:a3:56:f1:fe:5f:f1:44:33:a2:c9:ed:8e:32:
                    81:f1:91:0c:36:03:93:e6:26:97:ca:73:0b:c8:c0:
                    75:f1:79:c7:fe:65:24:d6:42:44:48:fb:53:52:82:
                    a9:7c:af:d9:90:74:ab:78:b7:27:99:71:a7:87:86:
                    c6:33:9e:48:cc:d0:87:b3:c9:7a:5d:40:2c:99:25:
                    26:7f:69:83:17:b8:ef:b5:14:06:82:5f:dd:9f:1f:
                    c2:02:c0:ad:b1:2b:05:d9:77:f5:cb:2a:66:cd:b3:
                    fc:1b:c3:90:bd:d3:ed:2a:3c:10:51:da:6e:84:f3:
                    40:94:26:67:08:71:65:02:3f:88:51:8d:e8:16:a1:
                    9d:b7:e3:1d:29:72:e0:97:01:ce:e0:a2:39:54:28:
                    f8:5a:0b:51:4f:07:46:44:e2:cc:7e:f5:83:9b:11:
                    55:cb:66:d5:cf:a0:de:04:eb:dc:aa:20:ef:cb:b9:
                    30:ba:7c:dc:c6:4c:19:1e:ad:4e:28:cf:1f:6d:28:
                    df:82:cc:62:2c:29:0a:ec:17:e0:a9:b9:76:df:08:
                    dd:26:c0:97:d5:ca:ae:c7:34:f5:a9:0c:02:e7:30:
                    c4:a8:83:6e:23:e3:43:4b:71:86:af:8a:ea:ba:40:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:C5:4D:13:8C:DA:DE:E9:6A:57:6E:4A:6E:B0:0A:7C:C3:16:CD:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.140.0/22
                IPv6:
                  2804:7c8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271503

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:9f:fd:09:bf:1b:30:6d:5e:8f:5d:2c:36:c8:c3:e9:68:
         f0:58:69:a6:6f:a8:79:9a:6e:38:6e:43:da:ce:68:83:00:67:
         94:f2:ee:7d:33:0c:9d:4e:f1:51:f0:5a:7d:03:3c:39:ca:c4:
         71:c1:4f:6a:32:db:6e:0f:89:af:b5:a8:03:3d:5c:31:24:da:
         61:34:33:7d:56:61:f1:94:55:ab:f7:07:37:4e:25:32:23:c8:
         cc:77:bd:e9:88:ac:a2:b4:a6:af:7e:a2:3a:08:bd:77:eb:2f:
         5e:3c:0a:66:96:78:10:ce:a1:7e:87:6a:cd:53:e5:d2:bf:68:
         a8:de:0b:34:04:38:f7:08:22:f1:d9:2b:f5:87:39:cb:c0:ca:
         3a:53:12:70:96:0d:a6:8b:14:17:68:e7:72:cd:be:17:29:9d:
         fc:67:d1:6f:2f:c2:c2:a3:02:64:61:fc:15:db:08:ca:f8:90:
         1c:a2:14:16:89:32:14:48:8d:c3:c8:7e:dc:3b:4e:29:71:54:
         b3:64:56:69:63:2b:75:a1:67:38:f5:8e:f1:ee:31:ed:43:10:
         e4:21:fa:a0:6d:6e:8c:24:3d:b0:da:5c:23:1d:d5:27:b2:2c:
         5e:5b:90:06:3a:a6:b4:64:28:79:74:11:ff:47:94:fa:ed:3f:
         47:59:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org