Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.cer
File:                     0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.cer (raw, json)
Hash identifier:          BoFRuHaq3REmFI5ePvkSzL0VMPkSmd3i/uWnROGV7kg=
Subject key identifier:   0D:6B:EE:B6:4B:23:5D:97:33:34:23:3A:F4:B2:AD:BF:25:8D:7D:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E9A7E22D74F0998C6B020EC67C00A2D04B4FD3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 11:46:00 +0000
Certificate not after:    Thu 15 May 2025 11:51:00 +0000
Subordinate resources:    AS: 263624
                          IP: 179.124.216.0/21
                          IP: 2804:1034::/32

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 08:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9a:7e:22:d7:4f:09:98:c6:b0:20:ec:67:c0:0a:2d:04:b4:fd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 11:46:00 2024 GMT
            Not After : May 15 11:51:00 2025 GMT
        Subject: CN=0D6BEEB64B235D973334233AF4B2ADBF258D7DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:a0:b4:50:c8:77:ea:33:a2:ad:44:cf:e8:
                    a8:c7:55:e7:9d:9b:51:69:bf:44:f1:0f:07:24:ed:
                    b1:bd:34:e9:74:48:3f:3d:ef:d8:a6:7d:1a:4c:79:
                    32:da:b1:c1:ca:9c:26:14:63:35:e0:b3:a5:89:21:
                    52:d4:e5:df:4c:b2:80:a4:5d:25:7f:b2:cc:63:7e:
                    89:7c:5c:1c:c5:e9:08:70:a6:31:50:0a:83:bf:64:
                    78:ba:35:68:0d:9b:ca:49:dd:f4:f9:1a:0d:1a:f0:
                    9d:f7:9c:fc:ab:ed:47:b0:d3:77:a1:56:f2:1d:93:
                    13:05:fd:69:01:fc:29:f6:6c:d5:5d:9a:0a:3a:d1:
                    85:84:5a:0c:e6:ea:b1:04:07:30:04:d8:ec:4e:0d:
                    2a:20:c7:a8:33:f7:3f:40:19:eb:40:eb:60:76:4a:
                    08:c5:80:ee:3c:95:d3:c0:1a:53:dc:23:e2:7c:fd:
                    9c:f6:af:b4:e0:c0:91:f1:c9:c1:e9:4c:98:02:f2:
                    2e:89:6e:7a:f7:9f:3d:22:ee:44:9a:cb:1f:22:fb:
                    3c:d0:68:e5:63:02:a1:ee:1b:d3:cd:8f:0d:a5:cc:
                    57:32:33:0a:82:f5:7a:f9:7b:5c:e0:80:b1:8a:8b:
                    59:f0:63:0d:2f:e0:4d:35:ff:5c:7b:95:13:88:0b:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:6B:EE:B6:4B:23:5D:97:33:34:23:3A:F4:B2:AD:BF:25:8D:7D:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.216.0/21
                IPv6:
                  2804:1034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263624

    Signature Algorithm: sha256WithRSAEncryption
         cd:90:85:6d:b8:a7:86:c1:4f:1c:18:0c:a2:7a:ad:24:6b:13:
         1b:9b:b9:35:55:ff:e7:fe:82:56:bb:0e:9f:8e:0e:ab:30:ce:
         39:e0:42:69:5f:57:e9:b6:cf:25:a0:3a:fe:a8:f7:52:85:ca:
         b9:58:87:cb:41:f8:2d:a9:66:a9:96:4e:85:16:b7:5e:74:7b:
         b7:4e:3d:46:28:48:6d:23:c6:5c:fe:41:72:17:d2:7a:d5:3d:
         53:fc:c7:17:9c:a6:d5:3a:a8:29:b7:8b:00:0f:d1:40:78:57:
         82:3a:22:e3:c3:33:e3:a2:cf:4a:49:0d:ea:e3:a0:d6:89:d6:
         88:95:e0:f2:13:df:bb:a3:bb:9c:2a:2a:d7:d0:e4:f6:14:e8:
         7d:7f:85:68:02:e1:0f:02:e6:58:f4:a7:fc:29:7b:1a:73:b8:
         d6:df:93:36:43:69:29:7f:b4:38:ae:7c:0b:bf:1f:83:41:72:
         6e:a1:12:d0:27:28:9b:6b:83:f3:0b:0e:4c:dd:fa:37:6d:d9:
         ec:d6:fb:9c:8d:67:34:a0:25:20:f2:4f:04:37:2d:e4:6d:39:
         4f:40:a4:22:c2:4a:4d:7c:26:e7:57:4f:c2:39:be:54:e8:78:
         08:d8:eb:2d:bb:5e:a2:30:d8:75:a2:27:87:29:bd:8c:c1:73:
         08:d7:84:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:16:12 2024 by rpki-client on console-ams.rpki-client.org