Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer
File:                     506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer (raw, json)
Hash identifier:          2nbABIY2RamtQE/+5+qoK4iZSlSVdJmHorRfDHduwSo=
Subject key identifier:   50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A44F6F8D41DB6574640BA917CA2CCA3D2C5CA0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2024 18:47:49 +0000
Certificate not after:    Wed 18 Jun 2025 18:52:49 +0000
Subordinate resources:    AS: 264324
                          IP: 138.122.92.0/22
                          IP: 2804:2624::/32

Validation:               Failed, certificate revoked on Sat 06 Jul 2024 13:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:44:f6:f8:d4:1d:b6:57:46:40:ba:91:7c:a2:cc:a3:d2:c5:ca:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 18:47:49 2024 GMT
            Not After : Jun 18 18:52:49 2025 GMT
        Subject: CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:1b:6b:cc:3b:95:cd:8a:67:f6:21:9c:7d:
                    0a:45:35:6e:8e:7f:0d:1d:5a:33:6e:00:a5:82:b4:
                    db:c1:7d:bf:59:60:e2:a5:b3:43:e8:7b:e3:f5:0a:
                    9c:a1:d6:72:72:53:c8:a6:39:5a:14:b8:8e:04:3f:
                    f3:82:63:03:f1:76:7b:85:8f:b5:f5:68:5e:79:d8:
                    b7:b9:7c:60:4a:0b:a7:1e:5d:a5:df:5e:35:20:01:
                    bb:7f:7c:83:bb:99:ba:2d:61:4b:d5:13:ed:a3:02:
                    26:2b:d5:88:9d:da:9e:08:8f:08:82:8b:78:12:e5:
                    f3:ab:08:bc:dc:7f:9d:94:b0:c6:0a:28:bd:65:93:
                    77:a9:bf:f7:5e:21:d0:ec:84:fe:56:7e:92:a2:24:
                    48:f4:f9:d5:f0:91:fe:4e:5c:97:b7:ba:bb:1d:cc:
                    1c:63:95:08:a2:db:6b:54:69:39:01:28:3c:74:46:
                    f3:ce:b5:ba:74:2e:e1:4c:a9:2a:4c:3c:5f:57:39:
                    65:9f:f9:c7:c3:95:f0:d5:60:01:5d:7a:01:0b:9c:
                    bd:db:fa:5f:c2:c4:df:06:75:35:1d:9f:44:96:3f:
                    6c:6f:dc:1a:da:7e:54:8d:38:df:85:e3:f7:0b:cb:
                    cf:0f:ef:45:82:39:2c:6a:ec:3b:29:30:05:dd:ba:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.92.0/22
                IPv6:
                  2804:2624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264324

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:3e:48:9d:e8:d9:96:fd:41:bf:ae:13:6b:c0:0c:fe:7a:
         bd:07:50:8c:cf:c2:f9:52:63:15:bd:22:98:41:49:9e:db:f7:
         7f:a7:79:61:09:ab:fa:b4:f2:c3:33:27:20:5c:a3:64:7f:86:
         3b:0c:5d:52:0b:76:83:8d:bf:b8:33:fb:db:ff:37:52:fa:8d:
         e6:de:96:bd:da:f5:71:23:dd:9f:57:2d:1e:bf:81:79:1e:ed:
         e5:2c:e0:d7:9e:23:e0:d2:f7:ca:bd:ee:bc:fb:e0:02:c4:a6:
         56:18:77:f3:78:44:da:2f:cc:9e:07:23:d7:43:01:c3:9a:1e:
         35:0b:8f:ba:1a:1b:c9:97:43:a3:fe:3b:ce:a4:5d:6e:53:ae:
         5c:78:ce:74:e4:56:90:bd:26:fc:42:c3:a9:1b:3d:8e:a4:e1:
         1b:0f:a6:ee:13:ca:26:7a:30:39:34:d4:7b:a0:a8:5b:c5:9d:
         b6:64:1e:aa:b7:09:28:ee:aa:24:9d:03:c7:89:64:a9:ce:72:
         51:1e:0f:89:6a:1f:d5:19:c7:05:03:b7:32:1a:30:f5:ce:1f:
         05:bb:6d:08:ee:a6:49:80:45:b1:23:2a:61:13:2a:e1:b8:ba:
         33:24:0c:30:73:62:49:07:4b:70:de:94:54:db:82:e4:c5:14:
         a0:e3:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 15:45:32 2024 by rpki-client on console-fra.rpki-client.org