Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60A24DFED964B29E842EEDF768DB6A14019D0AE5.cer
File:                     60A24DFED964B29E842EEDF768DB6A14019D0AE5.cer (raw, json)
Hash identifier:          2PXJfYknJOTybVrXOXykqtTjv9xZ6oGrMUsQr5K5AZk=
Subject key identifier:   60:A2:4D:FE:D9:64:B2:9E:84:2E:ED:F7:68:DB:6A:14:01:9D:0A:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3651FDF7F60419958A7175E6CA67F4A5638586CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/60A24DFED964B29E842EEDF768DB6A14019D0AE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Sep 2024 13:48:02 +0000
Certificate not after:    Wed 03 Sep 2025 13:53:02 +0000
Subordinate resources:    AS: 269004
                          IP: 45.178.28.0/22
                          IP: 2804:5df8::/32

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 21:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:fd:f7:f6:04:19:95:8a:71:75:e6:ca:67:f4:a5:63:85:86:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 13:48:02 2024 GMT
            Not After : Sep  3 13:53:02 2025 GMT
        Subject: CN=60A24DFED964B29E842EEDF768DB6A14019D0AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:73:70:3a:25:af:80:d1:6c:00:ef:d2:e3:
                    fc:cb:e6:e1:55:bf:24:0a:c3:2e:98:49:04:4a:73:
                    8a:65:f4:9a:74:83:b3:ca:56:0d:73:1e:f6:04:34:
                    5a:91:2b:8b:19:67:b3:d8:0d:db:f3:fc:23:ce:f7:
                    49:a3:98:90:b4:ec:ae:5e:32:6f:2f:65:c2:30:c5:
                    08:ae:48:be:3a:dd:48:91:76:3d:a1:4f:a7:63:63:
                    a4:2b:48:88:0e:bc:92:95:95:06:ff:51:55:46:5b:
                    1d:a8:ba:db:6e:ec:68:12:06:17:37:2d:af:a0:e3:
                    4e:5a:ab:b8:27:46:90:66:cd:82:9f:f6:84:e8:d8:
                    5e:c8:be:2b:8a:43:3f:2b:ea:66:f6:54:10:3a:cb:
                    26:3a:6d:f8:27:51:07:fb:20:58:43:61:3d:40:d6:
                    8a:44:a5:77:2c:8d:b1:dd:7e:05:e5:d7:ed:ef:eb:
                    e0:bb:5e:7b:c6:5c:be:34:d2:97:ad:fe:be:79:9b:
                    f1:70:02:88:f7:58:81:3a:be:6c:d4:54:fe:ad:e9:
                    9d:3a:14:73:99:e1:fa:e0:23:42:57:22:b8:c8:d1:
                    39:b0:7e:6f:fb:39:be:72:dd:42:3e:2e:6e:f0:b7:
                    74:57:d2:47:eb:9c:08:3f:0f:5a:9e:9f:68:f6:53:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:A2:4D:FE:D9:64:B2:9E:84:2E:ED:F7:68:DB:6A:14:01:9D:0A:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/60A24DFED964B29E842EEDF768DB6A14019D0AE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.28.0/22
                IPv6:
                  2804:5df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269004

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:c7:f5:59:ac:60:64:74:f1:fe:8b:36:c8:79:f0:f6:8c:
         d1:ec:4f:43:28:63:fd:a1:f8:bd:ab:0a:12:2d:94:42:8e:bf:
         46:e0:76:e7:e7:e2:b8:2e:ef:35:05:42:95:29:59:f8:79:7a:
         67:6c:72:ff:0a:11:f3:7c:75:34:09:00:22:8e:d8:4e:87:ab:
         ab:9a:0a:2f:ce:ea:13:9e:ae:c0:6c:1c:25:21:f4:86:09:10:
         eb:b3:92:46:f3:6b:5b:3c:57:c4:7f:24:f7:0f:9a:34:35:5d:
         ae:8f:4c:78:87:15:3b:2d:c6:d7:75:83:a0:5c:80:25:27:fa:
         de:26:93:ca:2c:c6:ce:f5:19:2a:3b:c8:12:8c:66:b7:e9:3a:
         cb:c8:7d:58:87:86:39:47:c1:58:dc:31:72:56:95:86:2d:be:
         39:5b:73:fe:e9:a1:60:7d:d1:a4:5f:6e:2f:e9:06:48:87:82:
         e6:5b:0d:e0:71:6d:9a:a9:75:cd:6a:e7:33:59:fc:52:7f:0a:
         9b:82:27:a6:73:13:cf:5f:44:8e:14:89:6f:07:f5:73:84:5c:
         4b:1c:f5:cc:3e:af:d2:b0:3f:32:c2:e5:4e:04:4a:09:a1:e3:
         08:7d:f5:ab:e3:0f:08:f3:50:6a:ee:48:3f:06:ee:17:0e:87:
         03:c2:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 22:43:17 2024 by rpki-client on console-fra.rpki-client.org