Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer
File:                     6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer (raw, json)
Hash identifier:          1Lmw7RskrnAEIisNBix/IzoQCRJIG3vYaf7k4oFbofQ=
Subject key identifier:   62:47:EC:2E:5F:53:2D:BE:59:91:DF:68:3B:8E:94:EA:12:8B:11:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F3C3305C88C62E4934E4B6C9322320CEEE00363
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/6247EC2E5F532DBE5991DF683B8E94EA128B117F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 15:09:13 +0000
Certificate not after:    Thu 15 May 2025 15:14:13 +0000
Subordinate resources:    AS: 267133
                          IP: 45.229.200.0/22
                          IP: 2804:489c::/32

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 08:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3c:33:05:c8:8c:62:e4:93:4e:4b:6c:93:22:32:0c:ee:e0:03:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 15:09:13 2024 GMT
            Not After : May 15 15:14:13 2025 GMT
        Subject: CN=6247EC2E5F532DBE5991DF683B8E94EA128B117F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:d1:12:66:9a:8f:8a:7c:c3:fa:54:c2:85:
                    1d:65:e1:c3:f7:1f:14:37:ee:93:59:2b:81:7a:f0:
                    aa:df:3a:fc:51:03:c1:ed:49:7a:e1:e2:b3:e5:99:
                    76:f1:23:b9:ab:8d:25:08:5e:22:27:9c:14:ef:fc:
                    d9:bd:34:33:06:e0:a6:62:d5:a5:b9:7b:8f:2c:93:
                    6e:91:35:58:1f:b5:19:4c:9e:34:89:6f:25:4f:a0:
                    3b:38:73:50:01:2d:5c:70:88:48:c1:b7:7e:e6:08:
                    e2:ac:2d:ab:95:2d:4f:7a:f4:9a:ad:e9:eb:63:2a:
                    10:fb:b9:ba:98:40:f8:c8:f2:af:89:41:b8:78:49:
                    33:0f:3d:30:fc:b2:ba:1f:90:c6:1f:20:64:45:b0:
                    3f:3f:79:71:0a:b8:08:00:26:a7:20:3c:33:f2:d4:
                    45:7a:15:5f:1a:89:52:ac:24:60:cd:a4:86:e0:22:
                    73:9f:86:f8:24:bb:7a:5b:a7:c0:6a:c7:11:4f:12:
                    70:c4:26:97:d2:09:b5:34:9d:9b:24:1f:c4:da:bd:
                    4b:c4:59:23:06:e8:1e:73:eb:5b:cc:5d:a7:cc:87:
                    d4:b6:77:51:10:3c:2e:12:35:ee:8e:65:b9:19:b0:
                    35:67:34:46:d7:e3:89:91:26:52:39:f9:98:4d:1b:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:47:EC:2E:5F:53:2D:BE:59:91:DF:68:3B:8E:94:EA:12:8B:11:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/6247EC2E5F532DBE5991DF683B8E94EA128B117F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.200.0/22
                IPv6:
                  2804:489c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267133

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:16:a1:f8:5c:92:17:65:04:46:19:b4:61:ca:ce:51:1b:
         11:f5:75:98:7f:85:94:b6:7c:c2:fb:22:1c:27:1f:36:65:b8:
         b8:54:c6:a3:19:12:b4:0f:b4:1a:a8:e3:0e:d8:b4:79:48:7a:
         15:5c:68:82:bf:cd:c4:67:0a:c4:41:3e:06:24:c7:e6:72:b1:
         4d:ba:9a:86:64:ae:11:a7:ef:20:a7:61:5f:2b:2b:3c:36:3a:
         cb:b3:5f:b2:3a:e5:71:1c:6c:3a:b6:54:16:3a:b0:cb:fa:41:
         98:12:81:e1:54:a4:6b:b5:fa:7d:ce:00:c5:ac:ac:0a:13:da:
         5e:cb:0e:40:b9:a5:89:e7:07:af:cb:1c:d8:90:62:66:33:68:
         22:f5:b3:04:2a:84:83:e7:60:a3:2e:80:57:94:ef:43:45:76:
         55:22:fc:b6:c5:b1:f7:96:5d:a1:b6:e3:8d:9c:07:87:80:df:
         9e:26:75:57:ee:e7:c8:68:08:3b:0a:37:e0:d3:12:81:3a:16:
         45:99:5b:1b:74:64:f8:7a:41:1e:ce:3f:3b:43:c1:b0:97:ed:
         da:7b:eb:96:37:4e:34:db:e0:ce:fc:b5:74:fa:3f:75:df:0f:
         07:8e:59:20:2a:7a:9c:9f:2e:8d:74:21:f5:57:bd:53:2b:b2:
         19:c3:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 09:38:23 2024 by rpki-client on console-fra.rpki-client.org