Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer
File:                     06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer (raw, json)
Hash identifier:          P44sKvy9vaYjIfQ15j9+Hr2N/sFmWhN1w/jswPEPGA0=
Subject key identifier:   06:C6:44:10:65:1F:06:07:F2:4E:4F:1A:3A:F2:CB:4E:AC:85:7C:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43ECF0B416CB9AE85613FEFC52E19D2C56D8DB81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 May 2024 14:49:23 +0000
Certificate not after:    Fri 09 May 2025 14:54:23 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 18:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ec:f0:b4:16:cb:9a:e8:56:13:fe:fc:52:e1:9d:2c:56:d8:db:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 10 14:49:23 2024 GMT
            Not After : May  9 14:54:23 2025 GMT
        Subject: CN=06C64410651F0607F24E4F1A3AF2CB4EAC857C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:41:07:99:ea:9a:da:eb:3e:45:4c:09:37:
                    86:fd:f7:99:25:3f:96:5f:b2:97:73:47:1c:30:90:
                    1d:9e:dc:fe:64:32:e3:09:c0:08:7e:3c:f3:ea:bd:
                    3d:10:f7:b6:e1:ed:eb:2a:25:fe:9a:23:18:51:0e:
                    c6:38:76:18:f6:4d:0e:39:75:b8:9d:f6:63:f9:35:
                    50:b7:5b:e4:24:8e:dc:f4:ff:4c:92:e5:a0:bf:8c:
                    d8:88:d8:90:98:17:00:e8:cb:4b:53:eb:fe:61:71:
                    7d:90:9d:b0:6d:0b:08:2b:82:e7:e2:1d:35:8b:67:
                    06:df:6b:cb:a4:7a:e4:43:ff:db:ce:37:c1:c6:b8:
                    d2:35:eb:cc:c5:e6:1c:37:01:63:d8:9c:88:a8:72:
                    e9:42:2d:3b:ff:a7:8b:af:30:1e:1d:09:49:06:d4:
                    96:40:15:b3:99:22:2e:4a:75:8d:cb:02:e5:c0:9b:
                    f9:12:e8:3e:f5:20:f3:73:8d:04:6a:bd:76:c4:ea:
                    f7:e6:4a:72:f1:d5:cd:41:2e:fd:cb:9f:e7:fb:59:
                    bb:a8:da:c3:18:06:08:c5:d1:a7:27:71:cb:9a:1a:
                    53:86:ac:8b:81:28:40:81:7a:f4:be:b5:ae:70:9f:
                    8c:f0:27:60:df:a8:ac:34:a2:f9:53:de:84:27:16:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:C6:44:10:65:1F:06:07:F2:4E:4F:1A:3A:F2:CB:4E:AC:85:7C:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         c2:f6:24:0c:6d:24:fa:19:c6:d9:10:a1:9b:70:21:51:b7:46:
         20:b5:f6:4c:28:06:68:9e:e1:22:51:2e:3e:73:1b:d5:60:77:
         28:23:80:d9:f8:e6:93:52:97:cb:3c:4f:54:f9:02:9f:f8:15:
         58:94:f6:41:41:6b:21:d0:c7:74:80:9d:9a:ad:f9:e8:ef:6c:
         69:88:39:98:6d:da:92:bf:6e:c6:3d:63:99:ce:a4:b7:58:d3:
         98:77:86:c6:1e:a1:e2:9b:48:93:a8:5a:f0:1f:05:27:ea:30:
         4b:44:e9:d7:54:82:5e:62:30:af:49:47:b3:63:40:f7:2c:8a:
         3b:5c:51:d2:dc:ea:c7:df:c6:bc:4d:08:34:61:ea:cd:45:8c:
         5d:4e:0c:cd:05:2f:60:7e:11:84:70:cd:0b:62:48:97:8e:84:
         54:7e:96:12:38:b0:c4:d9:8a:70:74:7b:bf:0a:80:fb:aa:1e:
         e7:0c:27:ad:53:24:20:ea:b0:71:bd:c3:b2:4b:18:e6:c6:8b:
         23:e0:68:4b:2d:4d:ff:e5:ec:89:f8:c9:7a:40:fd:fb:3f:e6:
         b5:04:8c:69:c5:e9:93:90:a9:b9:b5:ec:dc:58:f1:05:7c:3a:
         39:cd:fc:8b:a5:b0:21:38:bc:9e:e6:4b:19:88:9c:40:f5:4a:
         d6:f2:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 20:25:08 2024 by rpki-client on console-fra.rpki-client.org