Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F6C1353E46050CD04B240AAD05CC96E080A2889.cer
File:                     2F6C1353E46050CD04B240AAD05CC96E080A2889.cer (raw, json)
Hash identifier:          dFPjOjCsZ2Z59vflR44v90QXVF7w6N2V9HX4zs6zg24=
Subject key identifier:   2F:6C:13:53:E4:60:50:CD:04:B2:40:AA:D0:5C:C9:6E:08:0A:28:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0665B41FA47D5EFD7567401C392F10A59A3A2146
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/2F6C1353E46050CD04B240AAD05CC96E080A2889.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2024 19:29:13 +0000
Certificate not after:    Tue 10 Jun 2025 19:34:13 +0000
Subordinate resources:    AS: 270794
                          IP: 189.51.164.0/22
                          IP: 2804:7184::/32

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 04:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:b4:1f:a4:7d:5e:fd:75:67:40:1c:39:2f:10:a5:9a:3a:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 11 19:29:13 2024 GMT
            Not After : Jun 10 19:34:13 2025 GMT
        Subject: CN=2F6C1353E46050CD04B240AAD05CC96E080A2889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:58:77:41:ba:75:12:cd:d6:00:79:89:ee:
                    1b:e1:3b:e8:11:f3:87:0a:f8:68:be:48:63:4e:ae:
                    cc:f3:e0:6f:3e:f5:d5:30:a1:96:70:ab:96:87:ce:
                    c2:80:4c:8d:b0:6e:11:1e:dc:12:7c:ec:d8:ea:5f:
                    91:e9:10:5b:b2:dd:cf:b3:4b:f0:ad:6b:54:55:9f:
                    d5:ca:38:25:c8:ee:61:6a:18:48:69:7b:34:c4:5b:
                    c8:36:6a:36:f1:fc:bb:32:d2:39:f8:c9:fe:98:70:
                    fa:39:c0:4a:b9:f1:ce:64:18:a0:ee:5f:88:ed:5b:
                    95:8d:3c:92:31:35:41:3e:d4:b2:e9:b7:87:a8:31:
                    ea:7f:1c:05:bb:ab:a1:62:51:70:6a:77:80:1b:06:
                    b2:96:a4:38:c4:cf:eb:e7:69:37:e1:ce:c4:14:20:
                    a1:a1:ca:66:0b:43:1b:18:20:ca:cd:0f:de:3c:84:
                    5d:67:ca:f4:28:c7:b3:73:95:cf:ad:c2:76:c6:3e:
                    b7:66:00:a9:9f:97:51:0f:6f:09:de:aa:c7:04:eb:
                    54:4f:e4:5e:96:ce:7c:74:cd:32:d1:9b:76:47:c1:
                    8f:3a:53:df:e9:9b:b1:21:3f:bd:68:f5:d7:42:c1:
                    b6:39:5d:4f:d0:f1:c3:ef:cf:63:de:5d:7e:b0:1c:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:6C:13:53:E4:60:50:CD:04:B2:40:AA:D0:5C:C9:6E:08:0A:28:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/2F6C1353E46050CD04B240AAD05CC96E080A2889.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22
                IPv6:
                  2804:7184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270794

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:0c:ab:2b:1b:8e:d1:04:39:94:5a:a1:b6:20:d1:65:58:
         bb:1f:7c:d9:05:9f:07:f6:84:bf:c5:13:04:e4:d9:0e:b0:04:
         2c:10:59:42:82:ca:23:e8:b8:82:a1:b6:d0:3d:8a:16:78:82:
         4c:63:75:7f:81:9e:7b:3a:ea:82:c2:2d:be:c3:4a:14:fe:89:
         6e:b1:cb:78:c4:be:ba:63:e5:f3:3d:53:72:55:08:d3:46:27:
         7c:06:1f:40:af:5e:ee:61:45:c7:e2:24:de:ff:f0:46:b8:17:
         be:54:00:82:46:56:29:a4:6f:c9:ee:51:1a:3c:fe:e1:7d:81:
         ae:c7:f6:d8:53:1b:4b:16:77:ec:2a:0f:44:5c:64:09:40:d8:
         1d:db:e3:9d:f7:e5:a6:fb:4c:9c:4f:bb:ed:06:e5:56:4f:af:
         f9:c3:1e:4d:d4:0b:54:16:9b:70:36:40:70:ad:3c:66:ef:44:
         70:81:da:55:d0:46:b9:69:29:9a:43:69:ee:4f:49:c4:49:a2:
         0b:c1:1b:de:1a:fd:15:7e:eb:59:f5:e3:2c:75:60:2a:2b:54:
         f9:05:bc:7d:81:6c:76:15:ac:5e:fd:24:4c:2a:36:fc:1d:c5:
         1e:37:ca:c0:72:74:41:de:c9:d6:a2:7a:4f:fa:73:d5:e1:53:
         61:f4:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 05:17:28 2024 by rpki-client on console-fra.rpki-client.org