Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.cer
File:                     60BB83C02533E0ADF12AE7C3B183EA76020CECF2.cer (raw, json)
Hash identifier:          wYJ/QO+5LpI4NbRNe2uqCQuEEVowqeQ6ChdaO3zgobY=
Subject key identifier:   60:BB:83:C0:25:33:E0:AD:F1:2A:E7:C3:B1:83:EA:76:02:0C:EC:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7928776782A2B8FCB0A7B2CAE3D819EF4AB162A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 21:01:06 +0000
Certificate not after:    Wed 03 Dec 2025 21:06:06 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32
Validation:               Failed, certificate revoked on Tue 10 Dec 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:77:67:82:a2:b8:fc:b0:a7:b2:ca:e3:d8:19:ef:4a:b1:62:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 21:01:06 2024 GMT
            Not After : Dec  3 21:06:06 2025 GMT
        Subject: CN=60BB83C02533E0ADF12AE7C3B183EA76020CECF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:5f:3d:61:b8:ca:a8:ca:95:db:06:44:94:
                    fd:ae:0b:7d:e4:6e:66:47:61:43:93:69:80:5f:3b:
                    a0:3e:4c:8a:14:1b:47:e9:2a:26:21:70:4d:41:d0:
                    fd:02:22:7c:02:3f:e9:86:1d:f0:81:e2:e5:f7:a0:
                    c2:fa:1e:3e:56:84:a0:f8:9d:c8:99:a1:02:91:ac:
                    ff:bc:4a:44:56:92:42:f0:15:a1:cc:69:1e:08:e4:
                    7a:b9:6e:4e:a7:15:ca:bb:ee:f7:17:9e:94:4f:bb:
                    8f:03:a5:ed:ca:24:f4:35:56:41:56:14:8d:a7:c5:
                    32:c9:1a:8d:a9:fd:70:11:63:3c:7b:64:ce:0b:1d:
                    b9:22:30:06:16:62:1e:01:1e:19:b5:e2:22:3e:ae:
                    91:ab:13:9c:5c:65:f9:7c:9f:da:80:60:eb:6f:05:
                    53:cd:e9:ec:76:10:43:cb:da:ab:da:8f:56:34:0e:
                    f0:57:fb:20:2f:ce:af:9e:09:34:25:fb:ac:2c:ec:
                    da:b0:c4:17:a5:9b:73:e1:4a:97:7f:7c:aa:6c:66:
                    95:05:1b:e6:6a:92:88:f3:b2:0c:a7:1c:7f:b0:49:
                    ef:e5:57:ca:5e:bb:bb:9a:67:26:7d:a2:0a:8f:ef:
                    6f:9d:78:c6:a1:aa:30:8e:d0:5d:ee:61:5c:67:19:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:BB:83:C0:25:33:E0:AD:F1:2A:E7:C3:B1:83:EA:76:02:0C:EC:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:01:bb:be:f2:7a:db:58:84:e9:d3:fd:8a:44:1b:cd:80:
         e4:18:88:79:23:8f:17:dc:d7:f2:81:a3:f4:d2:5e:74:44:8a:
         c5:c8:23:89:7f:ca:06:ad:24:09:08:49:d4:65:4e:55:42:f7:
         4e:50:e5:19:c7:30:b6:29:a4:de:f0:eb:4d:72:2c:88:49:02:
         1b:de:6d:7e:60:51:68:d4:e8:0e:42:7d:57:aa:6c:fa:3f:2e:
         57:64:22:26:d9:c9:d0:ba:eb:23:95:14:85:d9:40:6c:17:ca:
         67:eb:51:e5:0a:d2:be:0c:b2:a4:2b:61:0b:57:cf:4c:2f:7d:
         67:22:21:32:5d:81:83:a8:34:57:e4:c2:e6:94:62:1f:4d:e5:
         4b:f4:f8:0f:bc:6d:c9:99:81:c1:3f:fa:ae:9f:ce:c9:d3:0f:
         c7:20:d7:0a:58:dc:1b:07:00:cb:32:44:15:d5:9f:4e:aa:be:
         14:85:45:8d:3f:6a:77:54:d2:2d:57:70:ef:e9:c2:23:7a:f2:
         1c:4a:a9:da:8f:3f:9c:51:17:10:5d:68:78:d5:ad:4e:a4:db:
         fc:01:6a:0c:d3:99:aa:2d:ea:af:5b:a7:f7:5b:0b:27:fc:04:
         71:ac:e0:da:a5:fd:9d:d1:eb:8c:96:a6:02:2e:e3:9c:52:50:
         2c:10:37:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:29:20 2025 by rpki-client