Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer
File:                     6078711E4D16F976E3EAD759D27879C6B0B008C1.cer (raw, json)
Hash identifier:          2FltQ/jChNYFEtjmA4hmhh/pTTI3QBvjMGxwZKNmNKY=
Subject key identifier:   60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20AED30A5A1EA140BEDE62BDAE77B580D9D803D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 23:11:09 +0000
Certificate not after:    Thu 03 Apr 2025 23:16:09 +0000
Subordinate resources:    AS: 263905
                          IP: 138.204.200.0/22
                          IP: 170.80.68.0/22
                          IP: 2804:2780::/32

Validation:               Failed, certificate revoked on Thu 02 May 2024 13:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:d3:0a:5a:1e:a1:40:be:de:62:bd:ae:77:b5:80:d9:d8:03:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 23:11:09 2024 GMT
            Not After : Apr  3 23:16:09 2025 GMT
        Subject: CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:89:56:8f:42:d6:a2:45:54:a1:89:df:21:
                    33:74:94:3b:c6:94:88:c0:2e:34:b5:a4:38:f6:bd:
                    bc:ac:41:d8:07:40:19:e7:3c:54:4a:25:b3:a4:51:
                    80:36:2f:5f:16:92:c2:d0:1b:54:d2:5d:ee:9a:e0:
                    7f:77:b4:2d:27:6f:50:ee:28:16:0d:6c:f9:7c:a4:
                    67:13:a4:2f:a1:27:9c:3a:3b:e5:9a:e7:23:76:19:
                    c6:53:6e:40:e8:e1:7a:3e:23:6b:4d:09:f7:89:0c:
                    36:fa:95:42:e2:3e:0b:ee:bd:6f:aa:63:be:a3:0e:
                    97:e4:84:3a:0c:cb:2c:53:e8:6e:1b:63:2e:ff:9c:
                    3e:00:9e:73:87:e0:05:90:f0:48:b3:c4:17:52:d9:
                    8a:ba:1a:78:8e:ba:2c:90:b0:90:59:c6:58:ea:1d:
                    b2:65:ae:05:46:a7:08:0a:24:ad:34:bc:a2:b5:37:
                    59:07:6f:83:57:af:64:29:89:e7:bd:7e:b2:70:b3:
                    98:fb:b3:2b:00:fe:23:37:08:98:cd:46:bf:13:cb:
                    95:c9:15:3d:4f:74:ae:e0:89:ff:e8:18:26:54:7b:
                    94:e7:e1:5c:76:ee:6d:d9:93:d1:ea:a5:3c:ce:ae:
                    d3:fc:9c:a6:47:8d:51:8d:7b:ef:f1:68:fc:9c:8d:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.200.0/22
                  170.80.68.0/22
                IPv6:
                  2804:2780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263905

    Signature Algorithm: sha256WithRSAEncryption
         ad:91:1f:b4:3b:d5:c6:f7:73:95:b5:4c:31:74:f4:d3:b0:33:
         b0:5a:21:94:a0:a2:9f:7d:79:5d:fa:0a:66:5b:94:d6:c0:31:
         0f:bc:26:b7:73:c0:b7:a0:98:04:b8:1d:49:ec:7f:0f:0a:48:
         e9:98:7f:b7:50:13:59:d2:ad:c9:c6:4d:19:4e:d6:d1:e4:c9:
         5d:5e:3b:36:e0:23:9a:f4:32:5e:57:03:1c:eb:1d:22:18:46:
         69:ae:fc:14:f9:5a:ce:52:55:a6:ec:11:e1:a5:02:b7:9d:af:
         2b:bd:75:2b:35:cd:b9:fd:b2:23:28:a8:e0:50:55:b7:1b:f2:
         42:36:84:ec:c4:7c:d1:9f:0f:c7:7b:77:29:31:46:d6:ed:e3:
         ca:3b:e3:12:b1:9a:4b:2c:87:5a:3f:84:55:a6:c4:41:b2:58:
         77:0d:ce:59:18:81:f3:0f:63:cf:df:d5:a2:a8:0d:15:bf:3d:
         a4:ef:f1:67:22:4e:d6:75:d2:52:2b:fa:5b:6c:5a:5a:8f:4f:
         a8:14:2b:25:6c:fc:dc:36:71:d2:00:5c:c3:b0:58:fa:59:aa:
         13:1e:e6:22:ab:2c:51:d4:94:9c:46:ec:ec:31:08:99:69:dc:
         04:2b:0a:a9:4e:31:9e:2c:85:02:b2:d2:ab:e9:2d:57:8d:0c:
         ec:a6:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org